Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd70fe06-1af5-3493-a48d-b13603b7c339.roa
File: fd70fe06-1af5-3493-a48d-b13603b7c339.roa (raw, json)
Hash identifier: V+c+NIEqq8pCRpwU9rcd+QM/R7PLU5KrpkOJUVsj9hc=
Subject key identifier: 8F:21:6E:E3:22:10:D6:2C:B1:3F:A0:A4:54:5C:62:3F:70:60:B5:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584016E70E26FB1256874844ED00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd70fe06-1af5-3493-a48d-b13603b7c339.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.164.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:e7:0e:26:fb:12:56:87:48:44:ed:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=00f40e22-a390-49af-8acd-eacd57a4e890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8b:83:a7:5f:1d:8f:0a:e7:23:40:e4:66:ec:
e8:ba:a2:50:88:a1:f0:69:41:49:d7:fd:41:53:94:
f8:ec:2c:52:e9:4f:24:86:1b:72:3d:ed:22:83:20:
7d:cd:51:21:ca:3f:82:64:c1:3e:7f:e4:88:1c:d2:
24:d9:4a:62:74:73:5a:fb:e2:a3:31:21:b7:b1:f9:
b2:02:70:c9:b2:90:28:6b:84:3b:2d:49:53:0c:23:
c7:c3:09:42:67:85:e5:b3:a9:df:78:23:6e:e2:71:
b2:ed:0a:73:97:e6:87:2a:ae:13:25:18:1b:ac:94:
60:e5:66:2f:db:3a:46:89:d6:90:d3:74:c7:36:cf:
bc:07:42:1e:81:de:fa:89:ab:1c:70:6b:9b:70:70:
b6:77:04:dc:e9:ff:7d:45:78:90:a0:64:34:87:af:
6c:71:b6:06:c6:5e:6e:b2:a2:6f:01:8e:be:39:e3:
b3:f3:45:a2:9e:f7:6c:16:81:e7:f8:2c:b8:19:00:
29:bf:9d:18:09:29:d6:ba:92:6d:f6:f0:fb:29:a7:
47:2d:7b:ef:7c:85:fd:9b:70:72:b8:a2:d3:68:fd:
c5:af:b1:1f:a3:ca:c4:d3:f3:92:fc:cf:da:f1:65:
0a:ac:4e:c0:c6:72:10:9f:16:d3:27:39:50:ac:cd:
0b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:21:6E:E3:22:10:D6:2C:B1:3F:A0:A4:54:5C:62:3F:70:60:B5:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fd70fe06-1af5-3493-a48d-b13603b7c339.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.164.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:fa:1b:20:4f:a4:b5:37:de:da:1a:b1:01:84:0f:88:9b:dc:
9d:d6:46:23:2c:51:87:53:39:00:5c:93:cc:8f:d8:5e:fa:65:
2c:9a:26:1a:d6:5f:fe:22:50:36:6f:31:17:bf:ed:89:6c:a8:
5e:23:d0:23:48:0f:ce:02:bc:03:f9:fc:7a:d3:40:ac:34:e0:
4e:77:0f:eb:fc:87:57:8b:73:ce:68:01:9e:3d:81:f7:4a:08:
95:c5:4b:b9:43:3c:ca:0d:02:99:41:72:a7:94:cc:fd:3d:56:
a3:f6:46:3a:17:ff:e2:43:d8:52:53:2c:c9:0d:7c:6f:f0:36:
ec:2d:2e:c1:56:75:c2:57:9d:3d:68:8e:4f:25:98:54:8d:68:
86:2c:1c:ce:b5:18:49:60:14:34:62:d7:7a:b9:70:d6:08:bc:
ae:2c:aa:65:0b:ad:2f:e6:80:aa:25:1f:53:39:a4:0b:ff:cb:
11:d7:47:d3:ef:22:0a:30:f5:ad:73:68:9d:e3:84:4a:94:c9:
0a:04:ea:e8:26:03:c7:06:5c:00:d2:1c:b5:d0:fb:c2:07:46:
c2:47:a9:6a:e7:c2:40:4b:62:44:98:cf:3a:d1:ff:93:68:fc:
8f:b8:a3:a8:63:42:f7:0f:cc:ba:a9:a7:3e:39:c1:c4:f4:3e:
7d:1a:8b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:47 2025 by rpki-client