Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0cd63397-5cf1-3a98-8ca5-f833248b38f9.roa
File: 0cd63397-5cf1-3a98-8ca5-f833248b38f9.roa (raw, json)
Hash identifier: 9qCSFZYAegdtNgJ1URBOcyMkXeE1Tu1PrWZ8GzpojWE=
Subject key identifier: 63:F1:F1:50:FA:A5:27:06:7F:A4:07:DA:9F:64:D7:C0:08:FC:B6:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409F1674F1A9899AD58E6E7A40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0cd63397-5cf1-3a98-8ca5-f833248b38f9.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.131.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9f:16:74:f1:a9:89:9a:d5:8e:6e:7a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=b8a585b7-37a9-4482-818b-9bcc48c6bd50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bc:43:66:ba:25:a2:83:36:22:fa:bc:89:34:
f1:f4:fe:69:eb:44:5e:37:d7:6a:dd:26:fe:c8:58:
a7:84:cb:8e:1f:0e:35:4c:5f:19:1e:5c:fc:e3:cd:
c6:58:c6:88:ee:5f:82:9e:19:c7:88:af:c6:03:67:
c5:3e:3c:db:40:0c:e0:8a:97:16:9c:7f:2c:e6:1c:
6e:76:40:44:3b:76:31:51:4b:e0:ef:e8:df:3f:14:
a0:54:98:e3:31:56:0b:8c:37:89:d6:2f:66:62:19:
51:4e:8e:f9:f5:21:f0:49:63:99:e8:9d:2b:ac:cd:
6a:39:5e:df:c0:51:f2:98:92:0c:55:10:3e:62:61:
0d:07:ca:2c:8d:5a:83:69:0c:9f:e9:22:3d:33:6b:
aa:4d:80:21:26:a8:80:c3:17:a8:c3:1e:61:08:35:
a0:3b:cd:a1:44:06:3e:b5:44:a7:15:1e:8e:8a:a7:
4c:c5:00:42:53:78:c3:8a:31:23:69:0f:9f:1b:25:
61:e1:df:e2:1b:7e:f4:74:5b:36:fb:2b:86:f3:86:
3a:87:cf:43:a8:13:dc:92:c1:f7:9d:12:2a:c1:51:
f5:d8:98:45:73:2b:bc:c8:be:83:f3:e6:28:de:7e:
bd:58:0e:95:26:a2:45:dd:f4:c1:6d:73:20:84:6a:
e8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F1:F1:50:FA:A5:27:06:7F:A4:07:DA:9F:64:D7:C0:08:FC:B6:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0cd63397-5cf1-3a98-8ca5-f833248b38f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.131.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:a4:aa:d6:ae:34:e8:de:f6:ad:4c:ad:29:d7:fe:95:2a:9e:
d3:be:f4:cb:74:34:08:22:39:f8:0a:8a:aa:14:2c:ac:ab:3e:
4a:25:1e:cb:0f:30:7c:22:72:26:73:2e:1a:97:a0:4b:5f:d8:
59:a3:50:2b:66:94:18:46:46:71:c2:70:f7:a6:90:bf:17:2f:
32:cd:02:55:9d:35:ca:40:80:85:26:f8:23:7e:40:9f:a7:ad:
db:82:95:62:f0:b1:48:ae:83:76:64:5d:05:7d:b9:73:05:92:
2b:92:e1:77:a1:73:41:0a:34:66:95:14:14:02:38:cc:1f:bd:
d1:f5:2c:96:8c:a8:76:9b:0f:fd:d7:b8:f1:39:ce:cc:62:2b:
48:ca:8d:81:be:6c:4f:15:cd:18:41:b0:e7:61:db:86:58:4a:
b0:ca:0a:71:d3:a1:19:7a:5e:6a:4d:61:d6:2a:08:48:dd:73:
0f:e5:65:1e:b0:95:db:84:c4:9c:a2:74:73:42:1b:5a:f7:c9:
a5:18:cf:51:ee:19:ee:13:1d:3b:16:5e:a2:fd:c7:f9:0e:47:
e4:61:80:88:76:67:8a:4a:ac:ce:6f:84:32:41:88:11:a5:ab:
46:b7:39:28:5a:3e:40:38:93:9b:c8:a4:c1:0c:bd:5b:09:ec:
fd:51:f4:c4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECfFnTxqYma1Y5uekAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExODEyMDAwMFoXDTIzMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
YjhhNTg1YjctMzdhOS00NDgyLTgxOGItOWJjYzQ4YzZiZDUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLxDZrolooM2Ivq8iTTx9P5p60ReN9dq3Sb+
yFinhMuOHw41TF8ZHlz8483GWMaI7l+CnhnHiK/GA2fFPjzbQAzgipcWnH8s5hxu
dkBEO3YxUUvg7+jfPxSgVJjjMVYLjDeJ1i9mYhlRTo759SHwSWOZ6J0rrM1qOV7f
wFHymJIMVRA+YmENB8osjVqDaQyf6SI9M2uqTYAhJqiAwxeowx5hCDWgO82hRAY+
tUSnFR6OiqdMxQBCU3jDijEjaQ+fGyVh4d/iG370dFs2+yuG84Y6h89DqBPcksH3
nRIqwVH12JhFcyu8yL6D8+Yo3n69WA6VJqJF3fTBbXMghGronwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGPx8VD6pScGf6QH2p9k18AI/La7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGNkNjMzOTctNWNmMS0z
YTk4LThjYTUtZjgzMzI0OGIzOGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD4MwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApKSq1q406N72rUytKdf+lSqe0770y3Q0CCI5+AqKqhQsrKs+SiUeyw8w
fCJyJnMuGpegS1/YWaNQK2aUGEZGccJw96aQvxcvMs0CVZ01ykCAhSb4I35An6et
24KVYvCxSK6DdmRdBX25cwWSK5Lhd6FzQQo0ZpUUFAI4zB+90fUsloyodpsP/de4
8TnOzGIrSMqNgb5sTxXNGEGw52HbhlhKsMoKcdOhGXpeak1h1ioISN1zD+VlHrCV
24TEnKJ0c0IbWvfJpRjPUe4Z7hMdOxZeov3H+Q5H5GGAiHZnikqszm+EMkGIEaWr
Rrc5KFo+QDiTm8ikwQy9Wwns/VH0xA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:24:55 2025 by rpki-client