Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/142ab787-14fa-3fea-bf0b-0333c31c5581.roa
File: 142ab787-14fa-3fea-bf0b-0333c31c5581.roa (raw, json)
Hash identifier: jlm3vvHQgUWW2ZlJDt3HgCpxTRmEncu0eR5IXNUwBzU=
Subject key identifier: 84:A8:EB:D4:C2:C6:D2:64:99:B5:9D:72:81:BB:87:E1:27:73:63:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D33CA7069E772F6B538C57980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/142ab787-14fa-3fea-bf0b-0333c31c5581.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 3209
IP address blocks: 15.145.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:ca:70:69:e7:72:f6:b5:38:c5:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=d1ce5531-e42d-4856-8b89-1e289e4f0d4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:44:74:82:a8:e9:71:b5:9b:dd:e3:6d:fc:
72:ee:cb:4a:6b:51:69:40:3e:4d:7f:41:7b:ab:9b:
2d:5c:4a:67:10:24:2f:09:81:b6:bc:12:65:db:a4:
12:e8:df:07:0a:08:95:36:46:6a:d3:96:9c:69:de:
92:20:c8:ec:3e:2a:97:2f:19:44:ea:a7:b9:4b:27:
ea:0f:03:42:30:66:41:1a:2b:0a:89:78:5c:93:92:
74:67:98:74:fd:5b:a2:d4:0f:d6:d7:d2:eb:62:87:
c3:79:c1:1a:cc:7d:58:8d:b3:3a:82:a8:ab:53:5a:
18:6a:9b:ae:a1:29:71:20:d1:92:eb:68:a9:8d:9a:
db:7d:5e:2a:09:59:24:60:19:a1:8d:e4:bb:d7:a6:
62:3f:27:c3:0e:a1:d0:69:fa:73:93:66:34:c1:38:
c8:bc:8e:cb:7b:d2:4e:78:2a:e3:10:46:65:4b:3c:
c7:4f:53:a1:b7:d6:a9:81:f3:82:b3:56:f5:89:6a:
09:11:1b:b3:1d:d9:83:7a:92:9f:58:bd:c9:c7:dc:
5f:01:88:55:f3:b0:85:7c:57:4c:0a:c8:f9:94:ab:
0a:28:74:05:7b:78:ec:01:48:ac:7b:79:98:ed:6c:
05:0f:f2:b7:57:4d:f7:98:92:10:ca:8f:91:bf:10:
63:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A8:EB:D4:C2:C6:D2:64:99:B5:9D:72:81:BB:87:E1:27:73:63:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/142ab787-14fa-3fea-bf0b-0333c31c5581.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:88:b3:7f:b9:91:6e:02:b7:31:64:64:9f:a1:74:8a:75:ce:
6d:52:b3:a5:e0:83:f2:1f:97:3b:75:9c:91:da:fd:d7:21:a4:
66:5e:d2:a5:3c:99:e1:96:a3:2c:69:9e:c9:48:9f:e2:4a:7a:
5d:ae:38:9a:c7:33:ab:a9:d5:b5:ea:3a:b2:0d:8e:b3:8c:62:
fa:59:78:4b:37:bf:5c:f2:ca:e9:10:6b:a8:a8:78:2c:86:5a:
37:0f:da:31:32:04:a0:f6:ba:9d:2f:c5:30:46:99:55:cb:93:
e3:f1:f2:d1:5a:ca:07:71:b4:c8:5a:10:64:9c:3c:cc:39:39:
ee:90:91:8e:9b:40:e6:b5:25:84:e8:d2:b9:8c:58:c3:50:fa:
e0:1e:10:32:1c:93:a2:e8:72:53:8c:9f:9b:af:7a:7c:4c:c9:
15:d8:f9:71:cd:e9:8e:cd:41:0d:0c:f8:45:2d:cf:30:dd:36:
13:03:bc:75:74:53:2d:04:f0:52:9a:49:7c:0d:1f:b9:7a:e0:
96:a2:3c:52:96:4e:fb:f1:25:63:3d:70:66:e9:9f:ee:8c:e4:
4e:45:41:35:56:73:03:bf:50:0b:83:7b:7b:4a:a4:5b:89:62:
8e:9c:69:cf:c8:f9:ad:63:b4:ed:cc:88:f9:b6:c8:b7:51:fd:
d6:75:46:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0zynBp53L2tTjFeYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMTA1MDAwMFoXDTIyMDQxNTA0MDAwMFowLzEtMCsGA1UEAxMk
ZDFjZTU1MzEtZTQyZC00ODU2LThiODktMWUyODllNGYwZDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzhEdIKo6XG1m93jbfxy7stKa1FpQD5Nf0F7
q5stXEpnECQvCYG2vBJl26QS6N8HCgiVNkZq05acad6SIMjsPiqXLxlE6qe5Syfq
DwNCMGZBGisKiXhck5J0Z5h0/Vui1A/W19LrYofDecEazH1YjbM6gqirU1oYapuu
oSlxINGS62ipjZrbfV4qCVkkYBmhjeS716ZiPyfDDqHQafpzk2Y0wTjIvI7Le9JO
eCrjEEZlSzzHT1Oht9apgfOCs1b1iWoJERuzHdmDepKfWL3Jx9xfAYhV87CFfFdM
Csj5lKsKKHQFe3jsAUise3mY7WwFD/K3V033mJIQyo+RvxBjYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFISo69TCxtJkmbWdcoG7h+Enc2NAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMTQyYWI3ODctMTRmYS0z
ZmVhLWJmMGItMDMzM2MzMWM1NTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBD5EEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADiIs3+5kW4CtzFkZJ+hdIp1zm1Ss6Xgg/Iflzt1nJHa/dchpGZe0qU8
meGWoyxpnslIn+JKel2uOJrHM6up1bXqOrINjrOMYvpZeEs3v1zyyukQa6ioeCyG
WjcP2jEyBKD2up0vxTBGmVXLk+Px8tFaygdxtMhaEGScPMw5Oe6QkY6bQOa1JYTo
0rmMWMNQ+uAeEDIck6LoclOMn5uvenxMyRXY+XHN6Y7NQQ0M+EUtzzDdNhMDvHV0
Uy0E8FKaSXwNH7l64JaiPFKWTvvxJWM9cGbpn+6M5E5FQTVWcwO/UAuDe3tKpFuJ
Yo6cac/I+a1jtO3MiPm2yLdR/dZ1Rmk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:11 2025 by rpki-client