Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6fa1462-bb5f-3fe9-aa6a-184b337f14d5.roa
File: f6fa1462-bb5f-3fe9-aa6a-184b337f14d5.roa (raw, json)
Hash identifier: KxyzHUDX8zKwgt/TeWO0C+4Gllut74r4Qgdb2L4/Yqo=
Subject key identifier: D9:7D:13:8B:3D:08:1D:C4:43:9A:43:A1:F2:EE:74:ED:BD:E6:97:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDBA30CCCD7260C7FE4218380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6fa1462-bb5f-3fe9-aa6a-184b337f14d5.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.129.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:db:a3:0c:cc:d7:26:0c:7f:e4:21:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=0905a996-ed82-45e6-ab3c-04844a77e506
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:3b:9a:f4:37:cf:64:ab:e0:1d:62:f0:f0:
f7:ed:14:fe:7d:97:27:85:7c:a8:b1:63:d8:bd:d4:
35:39:01:21:38:08:0e:76:92:ca:09:8b:e6:b2:e4:
8b:4f:7e:df:de:38:ed:2e:15:ba:f6:d0:8a:5c:61:
fa:59:62:e8:bf:9e:51:29:af:2e:51:49:8f:09:1b:
fe:bc:4b:4d:7f:8e:03:07:d8:ff:c1:02:6e:0f:72:
4d:cc:fd:81:56:99:a4:98:f3:b3:79:80:db:de:59:
72:01:8d:da:0d:89:c8:cb:99:ad:04:97:b0:37:c0:
3c:03:a5:67:32:88:c6:00:f8:87:44:19:a7:c0:ae:
6c:d3:de:a5:7f:67:97:26:70:a7:c3:80:83:9a:5a:
ed:b0:f3:fd:b4:21:95:1c:08:9b:2a:9d:99:14:3c:
c9:0e:da:bc:30:47:89:91:4a:29:37:34:41:67:34:
f1:f9:3c:90:95:3f:96:77:0e:26:2c:f7:b2:ff:be:
cf:7e:43:33:b5:17:31:89:b9:bd:01:3b:ee:8d:cb:
fc:26:a4:44:dd:86:2c:96:b7:93:89:63:93:b1:9d:
c3:15:05:5b:3d:07:45:e2:5e:14:ab:3c:76:1d:bc:
0e:2d:df:3c:32:4c:b7:81:bb:b9:d2:79:e9:21:b4:
1b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7D:13:8B:3D:08:1D:C4:43:9A:43:A1:F2:EE:74:ED:BD:E6:97:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f6fa1462-bb5f-3fe9-aa6a-184b337f14d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.129.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:75:35:cb:0b:a2:89:1a:98:77:61:9e:35:a8:ba:a8:e5:11:
af:4d:ef:2f:cf:46:77:cc:8e:7b:2f:ac:c3:6d:25:61:e2:7f:
03:ff:02:14:b1:65:78:6b:30:58:1e:cf:3d:5f:66:d8:0d:53:
f7:d6:67:c5:90:28:16:4c:53:2f:5b:bb:d1:ee:aa:6b:b5:a8:
02:34:05:f4:fd:c5:99:38:81:3d:39:87:fd:8f:61:e7:cf:3f:
98:ea:fa:1a:5d:1f:1a:b9:f1:3a:70:a5:52:91:54:dd:88:a5:
e9:ab:ac:09:fd:d2:54:2a:d7:f3:8b:38:31:c1:08:b4:c2:1b:
6c:d1:38:b3:ae:58:28:71:bc:b9:0b:a6:b3:e8:58:a7:62:2b:
cb:b9:1b:7f:ca:d4:52:93:fc:da:37:b7:f2:df:98:c0:44:39:
fe:6c:69:bd:2f:ab:47:7c:f7:da:ba:bd:d6:e6:63:af:fd:60:
f8:4d:21:53:c7:a8:0b:4c:f4:85:96:8b:b2:d1:74:14:01:2b:
8c:a5:0e:5b:4b:4c:3f:ac:93:0b:ae:75:5d:6c:4a:85:2c:af:
2a:9a:c6:9a:f2:ba:32:6e:b6:2b:90:4e:bc:82:f9:e4:ee:d7:
96:93:3e:8a:72:33:1e:d3:eb:29:ab:a9:03:4c:18:4a:3b:a6:
23:17:d8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:12:51 2025 by rpki-client