Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dabc4602-2146-37aa-b063-4430e7e62b87.roa
File: dabc4602-2146-37aa-b063-4430e7e62b87.roa (raw, json)
Hash identifier: VJbI5283WCy+nAektYEwAYXIQWzYWIgBTDOvA5WTJcA=
Subject key identifier: 0C:68:8C:2D:41:C5:73:90:BE:DF:85:DA:E5:1A:5E:F5:8E:C2:CA:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840755B58E370A3B1220262B980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dabc4602-2146-37aa-b063-4430e7e62b87.roa
Signing time: Tue 03 Jan 2023 12:00:00 +0000
ROA not before: Tue 03 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:75:5b:58:e3:70:a3:b1:22:02:62:b9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 3 12:00:00 2023 GMT
Not After : Feb 8 05:00:00 2023 GMT
Subject: CN=a6cf368a-a5d5-4cec-ae1b-84f913218c5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:09:51:04:7e:45:09:f2:dc:2b:6f:c0:7b:
9b:1e:6e:d3:9b:06:c3:a5:c9:4a:c9:94:f4:ac:6a:
78:14:01:58:a4:de:d5:b1:dd:7f:d8:7e:f7:e8:87:
3a:02:c3:93:5d:47:af:34:cc:f9:b9:03:21:16:ec:
d3:7b:3a:d0:28:60:37:1b:97:f1:61:cd:2f:c5:20:
01:28:93:66:c0:f5:07:54:a8:f8:b2:b6:b8:9e:8e:
66:e2:f5:98:16:ea:cc:61:90:46:d1:01:1b:40:78:
38:22:c4:17:9f:b3:0f:cc:c1:04:83:54:5b:0e:cf:
92:ef:97:09:b7:a6:46:37:24:09:06:e6:eb:65:41:
09:c8:bd:94:80:1c:89:22:5b:24:9e:a5:e3:f2:03:
36:41:d6:48:4f:97:32:6b:00:ea:88:b7:f3:86:f9:
72:b1:8d:e2:5b:27:0d:e1:da:0f:e1:7c:3e:a8:e6:
41:df:a0:50:de:4f:2f:27:8a:e6:0d:be:9f:d0:c5:
a6:fb:72:ef:77:a8:7c:0f:43:46:2e:1a:d0:ac:8f:
4c:a9:ee:c5:34:5d:82:d6:91:a1:3a:0f:aa:6e:1b:
c4:99:ab:c3:a6:7a:0f:d5:f2:16:79:89:1e:32:5e:
4e:d7:14:80:ac:fb:93:aa:26:4e:ef:fd:25:e9:f0:
33:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:68:8C:2D:41:C5:73:90:BE:DF:85:DA:E5:1A:5E:F5:8E:C2:CA:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dabc4602-2146-37aa-b063-4430e7e62b87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:3b:8f:c1:42:10:07:d6:39:4f:d9:fe:10:64:f9:b5:46:3c:
ce:50:e3:17:66:63:27:bc:f1:05:68:3c:4e:f9:e4:fd:b1:90:
90:e2:6d:81:33:9e:0a:05:73:2b:ce:52:29:ca:cc:22:fd:43:
45:75:ba:10:92:fb:8a:21:28:84:ad:8d:65:77:5b:50:fe:9b:
ca:5e:00:a3:f5:5a:86:51:55:b2:bd:3b:f6:7d:5f:07:57:10:
7d:b3:f2:35:39:20:78:e5:c9:75:92:2e:c3:2d:02:33:60:af:
02:a6:a9:19:af:8b:eb:91:39:9c:1a:7e:db:c7:be:29:df:00:
3d:3a:b0:fa:3f:7f:ac:48:76:72:ae:b0:06:9b:d6:a2:6b:de:
aa:02:75:01:f5:71:51:ef:63:33:57:b5:05:5d:c3:63:e5:72:
46:d4:a1:5f:6d:9a:1a:aa:ec:aa:25:0c:e8:55:ac:f6:f5:ab:
e2:4e:35:29:0c:39:cb:61:2c:86:f3:e7:31:79:6a:c7:a9:3f:
05:3f:a2:b1:4b:2a:69:74:5b:1e:ad:1b:89:de:30:90:1d:05:
e5:7d:45:88:fa:c6:30:5b:b2:2c:65:78:9b:b9:2b:d4:a1:bc:
71:38:68:84:9b:39:b1:33:ac:6b:4a:12:1c:84:75:8e:a0:61:
e6:10:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:31 2025 by rpki-client