Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f805f73b-9af9-3101-a63a-7ed8c833383b.roa
File: f805f73b-9af9-3101-a63a-7ed8c833383b.roa (raw, json)
Hash identifier: vJi4caVa6lzdZtEl6vEGf+DW46Qh6jMVd3MXyTlTq1Q=
Subject key identifier: 45:B4:9C:CE:C8:03:90:61:F9:2E:BC:07:6D:6A:A9:A0:20:BE:87:4F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403D85B43F9239ABFAF7FB12B8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f805f73b-9af9-3101-a63a-7ed8c833383b.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.161.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:85:b4:3f:92:39:ab:fa:f7:fb:12:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=3d8bdfb6-768d-4fd2-9e45-7f21dc94cbfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:33:57:86:c3:10:a9:e7:cb:86:12:3b:db:
be:e6:26:4e:e3:b9:f6:e9:f6:b3:aa:f8:45:03:c7:
ad:d7:2b:bb:b0:7d:07:31:5d:84:13:e6:8d:aa:a1:
f3:f1:10:2f:af:2f:36:87:85:64:05:b4:56:c0:7d:
ae:07:58:19:f1:74:a6:b7:7f:72:ab:91:76:7a:44:
e6:88:db:6d:ee:59:ac:b5:72:24:ac:ee:aa:bc:18:
9a:00:67:13:1a:5b:93:6d:99:9c:4b:50:85:66:eb:
7e:39:51:c6:52:64:6b:63:c2:a1:58:4d:d7:6f:b6:
cc:83:b8:84:1d:eb:75:d9:ff:f4:de:c9:1c:c0:9f:
45:54:d8:f5:15:ce:3e:d4:fe:4e:dd:5e:8e:13:7c:
14:28:51:0f:2e:15:a9:2e:f6:44:79:04:a3:33:86:
d8:99:8e:e4:77:4b:77:90:75:f6:6c:2c:0f:3e:80:
f3:da:39:eb:f0:ca:ec:06:d9:de:6e:a8:f2:47:ac:
f9:bd:c6:64:7b:5c:0b:4d:1b:0c:d3:6f:5e:66:4b:
74:c9:d9:58:1b:ac:64:da:2b:4e:47:e5:89:a5:e7:
a7:25:3d:73:0b:6c:0b:8a:79:31:dc:53:b8:16:0e:
12:e0:5f:7c:70:f9:e7:cb:77:48:bd:d4:8d:bc:3a:
0a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B4:9C:CE:C8:03:90:61:F9:2E:BC:07:6D:6A:A9:A0:20:BE:87:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f805f73b-9af9-3101-a63a-7ed8c833383b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.161.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:f2:07:19:04:b0:8e:aa:63:b6:76:aa:69:ca:11:ad:4f:99:
49:19:44:e9:af:d9:65:04:49:b6:f6:99:af:d4:32:41:8a:2d:
53:ea:00:37:c6:89:85:01:86:de:b1:ff:63:37:a3:fe:9f:64:
69:43:1a:e8:b1:f6:56:ed:c7:f0:1a:d1:3c:e3:0c:38:4a:ef:
ce:fe:d0:74:be:90:0e:7b:38:cd:3f:46:36:99:ed:73:3d:1a:
ec:ba:3a:06:bd:9e:e7:5b:30:01:85:fe:ed:2d:73:36:35:35:
bf:1f:e8:7e:e3:a6:dc:49:4c:7a:8a:14:e9:ef:1b:59:67:82:
72:5e:de:29:28:e6:f9:8f:fc:08:b2:1e:fc:12:9c:cc:da:39:
2a:41:a6:63:64:5a:7a:9e:aa:2e:c5:4a:d8:17:8a:90:ac:c6:
2a:67:ac:af:c3:0d:73:5b:02:0d:50:96:0a:47:a2:2b:18:c1:
c4:9b:47:a6:f3:c9:5c:cd:93:c3:e9:17:5d:24:00:5e:05:ea:
08:de:74:4c:74:88:08:4d:c9:0f:5c:67:98:4b:ad:93:bc:00:
f1:45:60:74:73:dc:9a:28:64:55:e8:d3:31:26:82:d5:6c:cc:
7c:08:94:85:33:91:bc:ca:1f:78:56:21:9f:ea:91:f1:93:7d:
30:59:25:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:04 2025 by rpki-client