Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd44932d-6ab2-318c-8e1f-b547b129d8b1.roa
File: fd44932d-6ab2-318c-8e1f-b547b129d8b1.roa (raw, json)
Hash identifier: KT1MgJqYfSJObieBhIDC3gtGM6EYeFhkLZfGLIxHJGU=
Subject key identifier: 11:3A:85:E8:E9:44:3E:43:08:F8:E9:EA:85:FF:8A:AF:F9:F3:47:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584078BAC1E01FC0A410EEA8FDC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd44932d-6ab2-318c-8e1f-b547b129d8b1.roa
Signing time: Wed 04 Jan 2023 12:00:00 +0000
ROA not before: Wed 04 Jan 2023 12:00:00 +0000
ROA not after: Thu 09 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.167.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:78:ba:c1:e0:1f:c0:a4:10:ee:a8:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 4 12:00:00 2023 GMT
Not After : Feb 9 05:00:00 2023 GMT
Subject: CN=6a20d7cc-9451-4b19-ae95-8060ce33454b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cc:6c:74:46:0f:99:81:ce:84:11:64:54:0b:
d9:f4:17:ff:19:ec:3a:46:51:8e:b7:2f:ff:5e:45:
2f:22:94:6f:fe:d2:87:a6:30:e7:86:8c:d7:f0:ef:
8c:48:3c:5a:60:0a:d3:ab:82:33:e1:4e:fe:e5:57:
7f:3d:b8:35:1f:a2:cb:68:27:3b:d7:44:e4:e1:18:
87:b8:2e:db:18:0d:b0:0f:82:1b:83:0e:6b:35:8d:
b9:66:60:98:c0:97:9b:67:d0:fe:25:8a:9d:3b:25:
aa:c4:7e:d7:81:62:e0:38:fe:3e:11:88:97:b3:cc:
da:2c:07:29:ef:ba:92:97:9a:dc:49:f8:e5:73:15:
84:d8:84:ea:8a:f1:2c:cf:1a:68:14:78:10:b2:28:
2e:13:87:71:1b:11:48:ad:d3:08:88:a4:14:ba:8c:
87:4d:55:6b:a6:bb:0f:57:94:8f:84:d3:44:90:76:
ee:73:04:c9:a5:66:71:3d:03:5a:00:df:81:66:f5:
fb:b9:b5:e3:60:b6:e9:e7:e1:36:52:56:be:b8:31:
41:e9:6a:12:b1:6f:ce:1e:44:21:0b:39:21:18:5b:
88:20:f7:6a:43:df:7c:3b:fd:86:87:e4:7a:12:64:
72:5f:b2:0c:74:60:12:5a:48:12:02:b0:ee:8f:07:
af:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3A:85:E8:E9:44:3E:43:08:F8:E9:EA:85:FF:8A:AF:F9:F3:47:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd44932d-6ab2-318c-8e1f-b547b129d8b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.167.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:86:ae:91:80:ba:d3:85:1e:bc:cc:99:ab:34:0d:db:92:87:
50:5a:d5:f6:f0:de:65:32:58:42:ac:85:98:94:6c:1f:41:bd:
55:c7:ba:dd:cc:d2:22:0c:84:c1:8f:93:0a:d3:18:58:58:b9:
48:35:83:54:ce:10:80:1a:b2:6b:6c:ab:b9:4e:0f:5a:ad:85:
cb:1e:ef:60:ec:76:dd:45:9a:24:9d:c4:20:18:a1:6d:0b:c0:
28:7d:d8:02:48:29:ce:76:8d:fd:84:65:d6:af:01:0a:1b:01:
eb:b5:69:bd:5f:25:1d:dd:ea:bc:8d:7c:69:66:06:6b:d7:ff:
af:f9:f6:a3:58:3b:a2:f4:ba:cf:e1:bd:ec:21:80:58:f3:2c:
ec:d5:3f:8a:3a:09:1a:04:84:c4:d6:9a:f5:cc:51:9c:6d:cb:
8f:a2:fb:6b:e5:fe:2b:53:e0:49:1c:6e:a0:a1:44:ab:e8:41:
3c:54:c0:b9:f3:89:60:c1:74:51:9b:68:26:ad:e4:e8:5d:67:
6d:a8:e9:54:29:c7:9b:e4:17:28:29:5c:21:07:ed:15:6f:42:
7d:e9:08:35:62:c6:d7:92:6f:a5:51:73:6a:b2:98:e7:0e:97:
35:ae:58:7a:69:24:23:98:09:43:e9:42:71:dd:9f:f7:22:7d:
01:f5:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:14 2025 by rpki-client