Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d29944dd-9ca1-3660-950a-3e95dcaa9a1f.roa
File: d29944dd-9ca1-3660-950a-3e95dcaa9a1f.roa (raw, json)
Hash identifier: /6wJ7NJOvG+C/ukKVmW0G5joNNlb8QlgGdHds/bcctI=
Subject key identifier: E5:E9:0B:FE:AE:96:5C:CC:61:FE:7B:0E:20:8F:E3:38:48:38:EE:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409CD1948C9C04794FFB83C400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d29944dd-9ca1-3660-950a-3e95dcaa9a1f.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.170.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:d1:94:8c:9c:04:79:4f:fb:83:c4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=0576c143-b74b-427e-86a7-eeda5916649e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6e:2c:53:aa:40:c2:8f:6e:9e:c9:fd:0e:3d:
57:b6:34:49:06:ff:74:8e:fa:b9:bb:f6:9f:e4:57:
a7:fa:ca:4b:59:e7:ca:e6:cf:21:bb:06:84:06:e4:
67:30:aa:d1:0f:1e:03:8f:63:86:b0:b6:52:cf:34:
60:ae:52:64:6e:c3:7d:66:f7:7f:fc:8f:4f:41:85:
c7:59:d2:e0:4b:63:6e:c4:09:cd:01:77:49:4f:d5:
2f:3b:b1:93:4a:a0:d1:cf:d4:57:4d:de:8c:e8:5a:
85:f9:13:0e:e5:44:ca:5c:b3:7d:59:28:14:0e:54:
e8:e9:2f:ec:63:fb:02:03:5f:20:48:5e:30:ae:14:
50:4f:f3:5e:cb:d2:4a:ca:10:14:6c:22:79:fd:3f:
c7:5e:1f:04:c0:27:4d:1d:fd:c7:87:ae:9d:d9:ba:
a7:80:10:de:59:da:46:96:56:e2:2c:f2:4b:e8:d6:
7b:7b:10:43:57:73:dd:8d:4b:9a:6a:0c:8b:3a:be:
08:20:1a:cd:24:25:29:37:b3:ee:a9:d3:3c:7f:92:
10:8b:83:2f:5d:05:08:a2:53:ab:ec:3e:8c:bd:a6:
ff:98:9a:b5:31:34:92:bf:82:3d:07:f5:52:39:dc:
b1:80:4c:3a:16:80:c9:02:36:1e:f7:b2:29:3f:44:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E9:0B:FE:AE:96:5C:CC:61:FE:7B:0E:20:8F:E3:38:48:38:EE:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d29944dd-9ca1-3660-950a-3e95dcaa9a1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.170.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:b1:7a:a8:46:27:ab:69:81:c7:9f:fc:7e:eb:11:fb:ce:44:
72:94:90:3a:4d:d2:fe:4a:c9:e2:4e:26:9e:86:36:06:13:e1:
0d:52:1b:fa:55:7b:5d:f1:78:46:65:95:ac:60:43:84:f2:2e:
43:40:8c:fe:b9:66:ce:d2:88:a2:c0:18:e8:c6:e7:82:ad:42:
91:28:07:2f:43:d4:74:68:b5:a0:83:44:10:3b:8d:08:68:37:
ce:e2:65:be:38:f6:94:39:6d:bf:ff:e3:2a:73:05:cf:2a:02:
1c:f8:85:30:7c:5d:ae:78:ec:43:b7:24:1c:3d:ba:ad:94:10:
c4:bb:26:e0:3a:96:4d:6b:9e:00:1f:73:86:7b:98:d5:74:e5:
1a:cc:94:0f:6f:2d:50:fa:d7:22:ba:a1:ce:ca:be:43:56:01:
ff:4e:2f:4e:98:34:28:9a:fb:6c:e4:61:a2:83:f1:0d:72:b9:
8d:96:c9:5e:82:71:f4:be:53:76:64:35:e1:fd:6c:b6:02:2d:
da:8d:9f:52:de:68:a2:14:b8:26:4b:c3:fd:cd:d3:6b:b4:e6:
e9:41:cd:83:52:1a:40:a8:1d:30:20:3b:fc:05:3b:72:ba:fe:
3c:69:0d:40:d8:5e:57:25:88:9c:79:e2:81:dc:63:49:b5:77:
6a:35:47:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:58:44 2025 by rpki-client