Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/058d0fc8-b277-395a-a998-e7a4467d7566.roa
File: 058d0fc8-b277-395a-a998-e7a4467d7566.roa (raw, json)
Hash identifier: L6104zl+8SK8fAY6v5Yde1Gm/OjPuIPlwDpm/jhWpdg=
Subject key identifier: 14:15:23:EA:EC:FB:0F:4A:17:20:50:75:E4:94:19:E7:E9:B8:B8:26
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E68B6B107A91580D3760F4880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/058d0fc8-b277-395a-a998-e7a4467d7566.roa
Signing time: Wed 29 Jun 2022 12:00:00 +0000
ROA not before: Wed 29 Jun 2022 12:00:00 +0000
ROA not after: Thu 04 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.198.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:68:b6:b1:07:a9:15:80:d3:76:0f:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 29 12:00:00 2022 GMT
Not After : Aug 4 04:00:00 2022 GMT
Subject: CN=ba5daf82-0744-4a90-be29-b0ce5cfd4144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:41:90:c8:0c:a0:45:62:2f:f2:5c:a4:77:2a:
43:e3:b4:ea:ab:07:53:ba:e4:65:6c:5b:2c:de:4d:
26:67:af:38:02:a2:63:36:80:7f:5b:41:4e:17:e9:
b3:bb:ff:f4:0e:a0:81:36:6f:d9:df:1d:6a:9e:3e:
ee:b3:93:68:db:aa:52:e6:f2:95:6a:9b:84:dd:b9:
1b:c7:31:61:26:ca:e9:c6:75:3d:ce:2d:40:ee:94:
29:7a:59:04:2b:72:2e:99:52:fb:69:d5:8c:42:86:
15:c7:d1:52:98:61:32:ed:60:43:07:ad:be:e1:62:
7c:b5:f5:fd:94:97:74:98:71:58:67:d2:86:be:ff:
b0:af:04:da:70:d0:83:a0:08:cb:f5:1d:2f:db:32:
a7:65:89:ac:8d:8e:39:c7:06:a3:03:07:00:04:04:
42:f5:e7:90:b6:3c:e8:2b:f0:e5:3f:59:15:da:6b:
91:84:7a:f0:df:28:df:ad:2e:8f:d6:78:29:e4:f0:
19:cb:71:2d:51:af:9f:05:80:0e:41:b6:58:85:89:
80:76:21:1f:d1:47:9a:0f:c7:2e:dc:c6:03:4c:63:
9d:fb:d0:72:c1:9b:2b:aa:00:8d:6b:82:50:b5:0d:
ab:59:01:f6:8a:8f:8f:43:f3:cd:99:8d:86:13:62:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:23:EA:EC:FB:0F:4A:17:20:50:75:E4:94:19:E7:E9:B8:B8:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/058d0fc8-b277-395a-a998-e7a4467d7566.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.198.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:2e:58:5f:c3:1d:12:5c:07:81:0b:47:f1:67:cd:4a:1c:24:
6f:a7:f2:dc:14:ab:db:3a:64:4f:b6:fc:52:ea:7f:d4:82:37:
1b:5d:b0:00:1a:c8:ce:0c:bc:0e:33:e4:42:00:ee:cc:56:8b:
a0:1d:d0:99:e0:dc:56:e9:51:cf:6f:ae:c6:43:0f:b8:92:8f:
77:69:f5:7b:86:03:c1:73:29:69:3c:c4:73:76:0a:35:4d:19:
66:c3:be:44:2c:f7:6b:86:96:7a:01:98:f6:7c:25:15:7b:49:
04:c0:c9:a4:0f:2c:2a:4d:c6:19:f8:9a:39:95:4d:15:3a:20:
6d:4b:b6:5c:9e:75:4b:b5:88:a7:fc:9d:57:a7:f0:6c:57:4a:
60:f3:a8:dd:36:4b:e2:4f:29:f1:b7:da:0e:84:13:14:2b:d8:
38:6b:d0:cf:a3:07:7c:47:63:d1:bd:70:2f:05:c3:22:b6:ed:
87:b5:79:ab:1c:43:8f:43:2f:ec:11:5c:42:ee:1e:f7:80:2b:
03:3e:6e:bd:3a:6d:f2:ba:0e:09:36:c0:b8:7d:7c:9d:dd:73:
0f:5e:16:fc:bd:f9:ee:2c:92:5a:52:a7:09:7b:ca:54:90:d5:
ad:46:16:a0:54:b2:31:f0:58:91:b1:f7:69:6f:91:f8:5a:1b:
63:cd:84:82
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5otrEHqRWA03YPSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYyOTEyMDAwMFoXDTIyMDgwNDA0MDAwMFowLzEtMCsGA1UEAxMk
YmE1ZGFmODItMDc0NC00YTkwLWJlMjktYjBjZTVjZmQ0MTQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA70GQyAygRWIv8lykdypD47TqqwdTuuRlbFss
3k0mZ684AqJjNoB/W0FOF+mzu//0DqCBNm/Z3x1qnj7us5No26pS5vKVapuE3bkb
xzFhJsrpxnU9zi1A7pQpelkEK3IumVL7adWMQoYVx9FSmGEy7WBDB62+4WJ8tfX9
lJd0mHFYZ9KGvv+wrwTacNCDoAjL9R0v2zKnZYmsjY45xwajAwcABARC9eeQtjzo
K/DlP1kV2muRhHrw3yjfrS6P1ngp5PAZy3EtUa+fBYAOQbZYhYmAdiEf0UeaD8cu
3MYDTGOd+9BywZsrqgCNa4JQtQ2rWQH2io+PQ/PNmY2GE2KHawIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBQVI+rs+w9KFyBQdeSUGefpuLgmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDU4ZDBmYzgtYjI3Ny0z
OTVhLWE5OTgtZTdhNDQ2N2Q3NTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATy5YX8MdElwHgQtH8WfNShwkb6fy3BSr2zpkT7b8Uup/1II3G12wABrI
zgy8DjPkQgDuzFaLoB3QmeDcVulRz2+uxkMPuJKPd2n1e4YDwXMpaTzEc3YKNU0Z
ZsO+RCz3a4aWegGY9nwlFXtJBMDJpA8sKk3GGfiaOZVNFTogbUu2XJ51S7WIp/yd
V6fwbFdKYPOo3TZL4k8p8bfaDoQTFCvYOGvQz6MHfEdj0b1wLwXDIrbth7V5qxxD
j0Mv7BFcQu4e94ArAz5uvTpt8roOCTbAuH18nd1zD14W/L357iySWlKnCXvKVJDV
rUYWoFSyMfBYkbH3aW+R+FobY82Egg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:20:12 2025 by rpki-client