Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c81b63d-4348-3577-a132-37b4ae2a90a7.roa
File: 0c81b63d-4348-3577-a132-37b4ae2a90a7.roa (raw, json)
Hash identifier: x3xcnQbHeEXeZh9JlRz5LnQKNRp+wsL4bGZxdJrNl/E=
Subject key identifier: BC:01:39:E6:CC:74:35:7F:4E:6E:E4:22:54:CA:69:8B:5D:10:59:79
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584065210B5F01523790E9D41F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c81b63d-4348-3577-a132-37b4ae2a90a7.roa
Signing time: Wed 28 Dec 2022 12:00:00 +0000
ROA not before: Wed 28 Dec 2022 12:00:00 +0000
ROA not after: Thu 02 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:65:21:0b:5f:01:52:37:90:e9:d4:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 28 12:00:00 2022 GMT
Not After : Feb 2 05:00:00 2023 GMT
Subject: CN=ff8e4bae-db49-4bf4-ba98-baf75d9b2392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:55:2c:dc:86:44:bb:5d:f7:aa:12:ee:9c:32:
ce:d9:17:a3:0a:fd:da:e7:34:a5:43:ca:64:e5:f6:
2f:e8:2d:bd:f5:3e:d5:a2:e1:02:89:32:d5:73:8e:
ec:60:be:33:6a:67:ab:f9:b1:ef:f8:ae:55:ea:6f:
bf:06:3c:ce:10:dc:0d:51:52:93:dd:27:c0:68:b0:
20:64:77:a6:05:f8:26:bc:fd:79:dd:39:84:70:0a:
cf:98:27:e4:2d:74:eb:0c:43:85:06:de:ef:d3:9f:
d2:cc:7b:92:9f:2a:15:d4:e0:33:64:b1:9a:25:37:
d6:5b:45:05:4f:2a:8a:6c:9f:87:10:38:63:fd:32:
ce:f7:0b:71:49:12:c7:4f:f2:9a:65:c3:87:bf:3f:
4f:6f:b3:3b:9a:52:c5:ad:3f:d9:1d:38:d5:75:c5:
7d:63:c0:79:d2:c9:87:f5:4a:d0:ed:19:4a:17:e9:
ae:a3:43:09:da:63:38:9d:4f:42:fd:b5:a5:a9:07:
47:1a:c0:c4:65:59:1d:3b:07:c1:f1:3a:6a:93:10:
82:ad:2c:c5:ec:ce:cb:19:ad:31:c6:a1:cf:d3:17:
23:75:eb:c3:a2:1e:e4:6e:93:61:30:4c:c5:5e:16:
8e:97:05:72:c6:57:c0:61:f9:34:67:fc:5f:18:7b:
6c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:01:39:E6:CC:74:35:7F:4E:6E:E4:22:54:CA:69:8B:5D:10:59:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c81b63d-4348-3577-a132-37b4ae2a90a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:af:46:08:af:46:ed:b1:4c:f5:ab:89:5f:9a:3b:ed:01:35:
1e:9a:cb:0d:ae:87:87:f5:2f:4b:de:1e:43:1c:e2:c2:fb:ed:
38:de:8e:3b:e8:f5:6e:25:22:00:ef:3c:71:96:a2:ae:08:36:
e0:98:1d:b3:2c:c1:78:92:6a:e5:d5:cb:cf:77:77:83:d1:56:
8d:0c:05:ab:fb:6f:49:e8:56:54:f2:82:af:f4:23:1b:35:89:
94:d5:c3:5f:c7:1e:64:b6:bf:f6:46:88:03:96:1f:c2:0e:41:
8d:0d:57:4e:25:af:8b:9c:14:b4:ea:a7:72:9b:c6:35:ce:d3:
6a:8e:86:74:00:1c:ac:e1:a4:8a:d8:7e:3b:19:1a:c6:ed:35:
53:ff:41:3a:b8:eb:49:15:bb:05:9f:4a:ca:35:e6:b3:a1:27:
b7:1d:c9:00:04:1a:61:1c:a7:0f:c5:7c:3c:e3:9b:12:0a:48:
07:e4:94:a4:26:ff:e3:21:68:46:d3:bf:86:a4:07:4e:a9:0d:
03:57:38:4e:96:be:1d:5a:4b:6f:8e:86:66:4e:e5:14:06:99:
60:93:03:13:8e:26:ff:78:60:0e:aa:28:ce:df:14:99:06:fe:
e9:67:ff:c7:75:d3:ce:b9:ad:53:84:7a:82:b6:39:36:95:90:
86:6d:a0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:53:22 2025 by rpki-client