Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d99a2987-ffb1-37b0-8e5f-03624515256b.roa
File: d99a2987-ffb1-37b0-8e5f-03624515256b.roa (raw, json)
Hash identifier: D/m55PEoH2hp8/xE9TN6sTetCaweqOeAhow8rT6FFew=
Subject key identifier: 19:4A:AB:38:52:42:AF:35:16:28:02:4F:DE:9E:68:66:CC:1C:15:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584078B37F139980FAAECFF26400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d99a2987-ffb1-37b0-8e5f-03624515256b.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.142.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:b3:7f:13:99:80:fa:ae:cf:f2:64:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=5e0ac273-91a4-4c8f-8a85-2391d3585a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:07:ff:b6:bf:63:31:cb:ae:a4:1b:84:da:
f5:73:21:69:60:ff:84:0f:28:33:48:ff:b9:9e:e9:
3e:8c:99:6b:92:93:7c:d7:42:d4:25:b8:95:db:5d:
de:83:07:97:24:62:d9:e0:48:c5:bd:51:df:38:d0:
5f:46:6a:16:31:de:e8:34:8d:91:a4:3e:a4:81:83:
5a:36:ca:05:ad:3c:40:23:29:48:45:c0:88:1c:72:
05:cd:9b:4b:bc:07:10:06:ed:da:38:32:da:7e:32:
61:b5:91:23:46:8b:4d:e1:b8:e2:73:23:cc:28:83:
e2:a1:88:da:30:03:4b:05:99:82:ca:b7:3a:c0:6c:
08:74:fa:5e:31:1b:22:01:17:ff:9d:b2:16:f1:a8:
89:66:5c:90:cb:a2:45:40:11:96:76:37:19:fc:73:
fd:7c:f4:70:03:81:4e:20:a2:cf:7d:d1:7c:f1:ea:
1f:8b:88:98:4a:ba:ef:0f:ed:bc:44:e3:56:dc:24:
18:f7:aa:ff:44:04:1d:3a:10:ca:52:c6:60:76:d6:
4a:ae:44:bf:4a:6d:fe:2f:04:df:66:53:33:25:78:
f1:06:1d:6b:94:1f:18:84:72:08:d2:98:49:43:78:
50:39:c8:f5:0b:9d:90:b3:4d:1e:24:9f:33:84:df:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4A:AB:38:52:42:AF:35:16:28:02:4F:DE:9E:68:66:CC:1C:15:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d99a2987-ffb1-37b0-8e5f-03624515256b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.142.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:19:ad:55:ee:77:70:61:d2:f0:f5:05:77:e2:39:d5:55:f0:
21:b7:5e:0f:a0:89:e3:f9:7a:af:3b:fd:09:68:57:72:bf:3f:
52:ee:b5:84:16:9b:27:e2:14:78:e0:04:5f:ad:45:ea:51:ec:
67:2d:77:c6:bf:7a:4d:52:d7:57:0e:88:16:3e:30:85:fc:eb:
ed:37:39:9c:b3:86:39:c0:a9:8d:65:55:68:01:b7:75:ba:3a:
9f:8c:ff:c4:e4:e9:80:62:a7:c7:8a:c1:c2:c8:f3:da:b0:fa:
b4:62:7f:6c:bb:fa:fe:09:fa:66:dc:03:b3:17:19:15:31:03:
eb:06:f9:86:65:a3:e5:c2:b2:5e:5e:e0:01:fc:99:71:e8:29:
aa:8b:31:d4:1d:62:e6:b0:82:4b:1a:88:67:db:0c:75:3a:48:
3c:8a:75:99:44:aa:c2:83:8b:db:85:09:e6:7e:47:3f:95:10:
8b:5e:8a:7a:c8:74:4b:87:dd:7f:0f:b9:b1:27:62:64:ab:52:
2d:7a:cb:98:f3:99:bb:47:9a:c2:3a:54:78:f7:37:a6:03:60:
46:35:97:2d:a0:62:81:c5:0c:ab:ef:0b:51:c9:59:21:2c:1f:
86:ec:93:9e:80:4b:5c:c3:2f:ab:52:08:cc:40:e9:ef:c6:92:
7a:3d:59:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:56:42 2025 by rpki-client