Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b898e8a-256e-3853-8083-c6700f3f853d.roa
File: 0b898e8a-256e-3853-8083-c6700f3f853d.roa (raw, json)
Hash identifier: c71MeYFDfTYOiB9YLXFtZj4lmLcBOzTk4tgsleAOBJE=
Subject key identifier: DA:32:05:F1:0D:FE:BF:88:0C:CF:CC:20:E3:44:FB:80:01:18:C0:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840274DD30E30CE325557BC1E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b898e8a-256e-3853-8083-c6700f3f853d.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.255.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:4d:d3:0e:30:ce:32:55:57:bc:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=ecf3bb82-690c-4392-9479-dfda2b20ae21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:66:79:7f:2f:c6:61:05:bf:28:4a:57:38:
de:44:9d:6c:96:50:3c:bf:02:b0:bd:f7:94:ae:87:
2b:af:53:b6:94:94:66:46:19:b8:0f:a2:37:1b:c0:
dc:51:a0:3c:e8:9f:b4:00:a5:0f:4d:f4:cc:88:3e:
fb:79:fe:18:db:20:ee:4d:3d:0e:a6:b0:38:80:79:
37:58:0c:eb:17:eb:2b:30:5d:fd:03:68:1a:41:1c:
f9:00:1b:d4:57:15:0a:92:e3:c0:85:21:4f:05:d8:
03:3f:53:c6:d8:91:22:05:f6:e3:9a:69:e9:f4:2a:
dd:03:6f:3e:84:0e:d5:94:26:17:42:70:e9:2d:d7:
24:8d:57:af:87:98:2b:5f:1f:2a:c7:67:68:01:8e:
ff:4e:72:e1:2d:b9:4d:51:c0:54:2a:0d:c2:e4:80:
23:8a:b8:da:9d:55:81:12:fe:11:69:0a:2b:8c:d2:
6c:a8:23:87:21:5a:9e:3f:45:52:61:bb:69:f9:d2:
4d:20:95:61:3d:0e:3a:34:f5:03:c1:ef:d2:e3:50:
69:35:91:7d:dd:25:2a:20:b6:c0:fd:9e:f2:9a:3b:
89:ed:1e:2e:88:7d:aa:62:ee:9f:93:28:26:6e:fa:
a9:76:c3:10:5a:8d:95:7f:a8:cf:4d:2b:c6:b9:fb:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:32:05:F1:0D:FE:BF:88:0C:CF:CC:20:E3:44:FB:80:01:18:C0:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b898e8a-256e-3853-8083-c6700f3f853d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.255.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:cb:5a:79:3a:03:0e:d6:77:13:e4:2a:a8:9c:55:88:35:73:
d7:a2:40:65:84:29:a5:e6:ec:7a:b1:b2:7c:7a:01:fa:55:24:
2a:62:44:38:88:89:fc:7f:b4:70:8a:9f:f7:ed:39:62:3f:df:
ea:e7:d7:63:8c:1b:f8:ec:76:80:80:95:0f:a9:a8:24:f8:d0:
fd:67:1e:7e:db:2e:63:73:ec:ce:27:a3:9e:44:43:91:60:fb:
97:7c:00:6c:bc:45:f2:79:c6:2d:30:26:35:73:32:c0:98:30:
63:28:a1:65:ed:87:6e:b9:65:ce:5d:ed:dd:6e:28:de:0b:88:
c3:2c:e8:44:5d:e6:0c:66:50:d8:3e:ee:96:5b:17:3e:f3:e7:
e0:61:c0:64:3d:5c:53:d5:04:48:7e:8a:f7:b0:98:3b:23:1f:
d1:ca:f0:40:c7:e4:58:ea:d4:be:90:9c:ec:7c:18:f9:26:26:
74:48:21:fe:3c:7f:26:93:5b:98:9e:f7:cb:f7:af:2f:52:56:
e7:03:fc:1d:c2:1a:d2:76:39:0d:39:54:84:bc:65:2f:fb:b1:
3d:c0:9a:f7:5f:36:cf:31:7e:b4:fd:cc:4d:16:40:ce:de:57:
80:e6:4b:78:35:0a:58:2e:a5:4b:e5:68:df:fa:5e:89:7d:85:
94:ea:05:ea
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAnTdMOMM4yVVe8HoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIwNjEyMDAwMFoXDTIzMDExMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZWNmM2JiODItNjkwYy00MzkyLTk0NzktZGZkYTJiMjBhZTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DtmeX8vxmEFvyhKVzjeRJ1sllA8vwKwvfeU
rocrr1O2lJRmRhm4D6I3G8DcUaA86J+0AKUPTfTMiD77ef4Y2yDuTT0OprA4gHk3
WAzrF+srMF39A2gaQRz5ABvUVxUKkuPAhSFPBdgDP1PG2JEiBfbjmmnp9CrdA28+
hA7VlCYXQnDpLdckjVevh5grXx8qx2doAY7/TnLhLblNUcBUKg3C5IAjirjanVWB
Ev4RaQorjNJsqCOHIVqeP0VSYbtp+dJNIJVhPQ46NPUDwe/S41BpNZF93SUqILbA
/Z7ymjuJ7R4uiH2qYu6fkygmbvqpdsMQWo2Vf6jPTSvGufuq+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNoyBfEN/r+IDM/MIONE+4ABGMCkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGI4OThlOGEtMjU2ZS0z
ODUzLTgwODMtYzY3MDBmM2Y4NTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAastaeToDDtZ3E+QqqJxViDVz16JAZYQppebserGyfHoB+lUkKmJEOIiJ
/H+0cIqf9+05Yj/f6ufXY4wb+Ox2gICVD6moJPjQ/WceftsuY3PsziejnkRDkWD7
l3wAbLxF8nnGLTAmNXMywJgwYyihZe2Hbrllzl3t3W4o3guIwyzoRF3mDGZQ2D7u
llsXPvPn4GHAZD1cU9UESH6K97CYOyMf0crwQMfkWOrUvpCc7HwY+SYmdEgh/jx/
JpNbmJ73y/evL1JW5wP8HcIa0nY5DTlUhLxlL/uxPcCa9182zzF+tP3MTRZAzt5X
gOZLeDUKWC6lS+Vo3/peiX2FlOoF6g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:46 2025 by rpki-client