Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b541364-6640-3f02-8980-ad4a43a84cfe.roa
File: 1b541364-6640-3f02-8980-ad4a43a84cfe.roa (raw, json)
Hash identifier: XWqNtMrY6FFP7HSUn3AvlAes+jGlcE380lawDoypITs=
Subject key identifier: BD:5D:6A:EF:B4:A9:3D:E0:70:BD:15:E9:75:70:59:1F:24:5C:AC:F5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E41409E39426078F0D87C6E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b541364-6640-3f02-8980-ad4a43a84cfe.roa
Signing time: Wed 15 Jun 2022 12:00:00 +0000
ROA not before: Wed 15 Jun 2022 12:00:00 +0000
ROA not after: Thu 21 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.248.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:41:40:9e:39:42:60:78:f0:d8:7c:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 15 12:00:00 2022 GMT
Not After : Jul 21 04:00:00 2022 GMT
Subject: CN=eb2b4bf8-ec17-4ad8-b624-3d4f459374c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5d:32:0e:0f:b3:33:80:8c:47:81:47:85:6e:
24:06:1a:fb:12:b0:fe:e3:a5:58:54:b7:1c:f8:ff:
16:3b:74:1b:6a:11:2a:e1:cd:c3:7a:b5:d8:b0:c3:
65:22:75:ed:8c:8f:11:50:0d:b6:af:77:4d:36:29:
be:3d:51:6a:2b:b0:f2:17:66:69:f0:8b:c3:99:11:
2c:4a:f9:bf:90:d9:b4:46:c1:80:b2:80:fb:ef:31:
7e:37:24:d4:20:8e:c5:5f:32:3a:d2:8c:f0:cf:de:
c6:6a:46:8d:88:ba:f6:da:43:c8:0f:9f:63:e7:2a:
c6:cd:52:68:a4:10:51:a2:c4:b9:3c:d9:2e:4f:63:
57:e0:65:1a:93:27:d5:3c:ea:55:7c:fc:75:9c:45:
74:1e:42:16:27:05:a7:08:32:3e:5a:aa:a8:0b:c0:
72:10:31:83:33:f9:71:08:d3:95:e0:ee:be:84:6f:
08:93:dd:c7:0d:3b:f3:8b:52:e7:aa:5d:e5:a9:3c:
84:f8:b2:77:07:10:6d:4e:eb:ec:a5:dd:a9:84:5b:
68:7b:a5:23:93:93:5d:37:f7:54:fe:f6:4c:ac:f4:
24:bc:42:fb:ae:cc:2c:8c:79:c2:47:85:6f:44:c7:
c9:64:31:32:49:ff:8a:4e:c4:a5:41:24:3e:21:18:
54:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5D:6A:EF:B4:A9:3D:E0:70:BD:15:E9:75:70:59:1F:24:5C:AC:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b541364-6640-3f02-8980-ad4a43a84cfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.248.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:86:c2:77:4b:dd:96:b7:36:fc:38:2b:d3:07:68:f1:b5:40:
72:ed:5e:99:33:27:7d:72:fb:27:4e:3f:59:ac:e3:b5:1a:66:
d3:89:b4:b0:90:f0:aa:9f:df:ac:23:e9:c7:f7:63:db:1e:15:
e1:df:4f:03:85:62:c0:1b:83:d1:f8:77:c8:ce:ca:54:31:fc:
30:f5:07:60:d3:c1:be:7b:f9:d8:d9:df:eb:fe:c8:9d:2e:8f:
05:05:41:b5:f0:33:7b:22:f9:e0:b3:98:69:64:82:37:77:2c:
ae:c0:00:a8:a6:e9:26:2a:4b:84:0c:5c:c7:fa:ea:06:e2:db:
9a:91:da:ce:56:7c:fe:37:72:b8:d8:e6:83:50:f8:d1:cb:14:
ef:0a:52:13:71:3e:cd:8a:ec:e6:7e:2b:2e:1a:0c:55:d9:38:
4e:00:ac:cb:bc:6e:55:c5:f5:ab:dd:4c:65:81:07:d9:80:8f:
48:a9:29:55:15:7f:ff:92:c7:a2:18:dc:9f:63:69:32:4c:e8:
4a:6a:3f:b8:f4:43:cb:87:94:8c:dd:ac:d2:10:14:a8:f0:71:
86:54:87:45:51:99:3b:62:12:90:b0:77:71:61:ee:73:1f:44:
8a:8e:26:98:e8:8b:72:2b:93:e4:ed:8b:45:c7:4a:db:cb:5c:
b4:c3:29:2b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5BQJ45QmB48Nh8bgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYxNTEyMDAwMFoXDTIyMDcyMTA0MDAwMFowLzEtMCsGA1UEAxMk
ZWIyYjRiZjgtZWMxNy00YWQ4LWI2MjQtM2Q0ZjQ1OTM3NGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV0yDg+zM4CMR4FHhW4kBhr7ErD+46VYVLcc
+P8WO3QbahEq4c3DerXYsMNlInXtjI8RUA22r3dNNim+PVFqK7DyF2Zp8IvDmREs
Svm/kNm0RsGAsoD77zF+NyTUII7FXzI60ozwz97GakaNiLr22kPID59j5yrGzVJo
pBBRosS5PNkuT2NX4GUakyfVPOpVfPx1nEV0HkIWJwWnCDI+WqqoC8ByEDGDM/lx
CNOV4O6+hG8Ik93HDTvzi1Lnql3lqTyE+LJ3BxBtTuvspd2phFtoe6Ujk5NdN/dU
/vZMrPQkvEL7rswsjHnCR4VvRMfJZDEySf+KTsSlQSQ+IRhUQQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL1dau+0qT3gcL0V6XVwWR8kXKz1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWI1NDEzNjQtNjY0MC0z
ZjAyLTg5ODAtYWQ0YTQzYTg0Y2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAaYbCd0vdlrc2/Dgr0wdo8bVAcu1emTMnfXL7J04/WazjtRpm04m0sJDw
qp/frCPpx/dj2x4V4d9PA4ViwBuD0fh3yM7KVDH8MPUHYNPBvnv52Nnf6/7InS6P
BQVBtfAzeyL54LOYaWSCN3csrsAAqKbpJipLhAxcx/rqBuLbmpHazlZ8/jdyuNjm
g1D40csU7wpSE3E+zYrs5n4rLhoMVdk4TgCsy7xuVcX1q91MZYEH2YCPSKkpVRV/
/5LHohjcn2NpMkzoSmo/uPRDy4eUjN2s0hAUqPBxhlSHRVGZO2ISkLB3cWHucx9E
io4mmOiLciuT5O2LRcdK28tctMMpKw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:59:52 2025 by rpki-client