Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cc30b79-2c93-3f2b-bc32-94ebee7ea324.roa
File: 1cc30b79-2c93-3f2b-bc32-94ebee7ea324.roa (raw, json)
Hash identifier: s77X+kCR1E1ACMSD4DJTspM2YPg/5+XEpfnVBKn2YGA=
Subject key identifier: 12:F2:3E:F6:1D:6B:11:D7:AC:1B:CA:38:6A:77:87:3E:B8:FC:06:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF2D2673DE931E3EAAC5B1200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cc30b79-2c93-3f2b-bc32-94ebee7ea324.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.192.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:d2:67:3d:e9:31:e3:ea:ac:5b:12:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=5d18e780-bcb4-43cc-9899-6f1ca8dc96c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:8d:8f:67:7f:e7:9f:91:d2:be:45:59:6c:
ae:54:77:9c:e7:f0:df:4a:1e:d8:70:3f:6b:6a:8e:
9e:22:e9:f4:3f:dd:26:03:1e:16:c4:e0:72:79:3d:
eb:e2:a9:68:fc:f3:13:71:0f:c3:fa:ef:16:88:2a:
fd:f4:21:e2:ed:1f:fd:0d:89:fc:87:76:42:c1:5d:
b3:85:16:a2:67:d4:c5:fc:82:39:a1:5a:06:47:47:
90:a9:22:39:2a:9f:9e:8b:f0:06:21:15:26:fc:07:
8c:8b:8c:f1:25:2f:27:12:fb:87:0f:02:fc:38:4e:
5b:47:11:5a:4a:b3:20:83:b5:75:b0:d9:20:df:ac:
fd:3a:34:8a:9a:ea:75:35:a1:b9:70:ea:8a:a5:0a:
f7:c5:71:fe:e2:3e:8b:74:04:e6:04:bc:58:73:dd:
ee:dc:28:55:89:5e:af:97:dc:85:83:60:99:4f:f9:
b6:b8:21:b7:41:8f:3b:48:9a:15:eb:db:b1:13:98:
55:d6:e2:c8:9e:f1:82:00:d5:6e:8f:92:ee:01:3c:
30:a1:fb:9f:1d:b9:1d:2a:38:2b:d1:29:d0:69:87:
b2:29:39:66:24:55:16:ed:17:8f:94:53:67:72:9c:
83:1f:dd:1c:2d:b5:8a:96:04:8a:ce:b2:cb:8f:da:
f1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F2:3E:F6:1D:6B:11:D7:AC:1B:CA:38:6A:77:87:3E:B8:FC:06:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cc30b79-2c93-3f2b-bc32-94ebee7ea324.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.192.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:08:20:5a:fc:ed:12:a9:88:eb:4b:ab:67:c0:c7:f6:77:85:
6a:99:67:0b:7b:e0:f7:be:ab:b0:ab:ad:55:de:e6:b5:66:e8:
c0:22:a3:51:b0:82:09:2e:73:c7:9b:db:4a:22:3e:ae:47:c0:
1f:b8:b5:84:12:8e:67:a9:9d:23:05:6f:bb:3f:66:f2:13:bc:
40:f4:9b:03:db:48:ed:be:9c:97:e3:a5:2b:10:d9:53:dc:cb:
ee:f0:e9:5a:5d:f5:66:24:58:53:fa:46:9a:c7:2e:f3:39:f0:
97:a6:52:64:04:53:bc:2e:41:bf:59:6a:1f:36:97:01:90:13:
71:d7:40:99:79:b2:96:c6:ad:62:22:0b:c4:cb:6c:a7:20:ae:
da:ed:af:78:27:db:13:d4:7c:87:08:af:7d:d1:3a:72:87:5d:
06:23:ce:d0:40:a3:58:71:b9:a9:46:ce:00:78:e2:95:03:1a:
70:5d:8b:58:b0:41:d5:61:6b:7a:8e:31:ae:19:d4:45:d5:71:
ca:fb:3b:6b:1b:e3:29:98:f8:0b:cf:83:25:0a:a4:0c:79:6f:
2d:4d:f7:30:79:59:c6:f4:63:a9:77:9a:1e:59:e4:b8:68:0c:
db:46:a1:f4:ca:be:78:84:bc:92:ac:5b:ea:f2:d7:b1:c2:6d:
b5:89:ee:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3y0mc96THj6qxbEgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUxODEyMDAwMFoXDTIyMDYyMzA0MDAwMFowLzEtMCsGA1UEAxMk
NWQxOGU3ODAtYmNiNC00M2NjLTk4OTktNmYxY2E4ZGM5NmM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnGNj2d/55+R0r5FWWyuVHec5/DfSh7YcD9r
ao6eIun0P90mAx4WxOByeT3r4qlo/PMTcQ/D+u8WiCr99CHi7R/9DYn8h3ZCwV2z
hRaiZ9TF/II5oVoGR0eQqSI5Kp+ei/AGIRUm/AeMi4zxJS8nEvuHDwL8OE5bRxFa
SrMgg7V1sNkg36z9OjSKmup1NaG5cOqKpQr3xXH+4j6LdATmBLxYc93u3ChViV6v
l9yFg2CZT/m2uCG3QY87SJoV69uxE5hV1uLInvGCANVuj5LuATwwofufHbkdKjgr
0SnQaYeyKTlmJFUW7RePlFNncpyDH90cLbWKlgSKzrLLj9rx9wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBLyPvYdaxHXrBvKOGp3hz64/AbKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWNjMzBiNzktMmM5My0z
ZjJiLWJjMzItOTRlYmVlN2VhMzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAswggWvztEqmI60urZ8DH9neFaplnC3vg976rsKutVd7mtWbowCKjUbCC
CS5zx5vbSiI+rkfAH7i1hBKOZ6mdIwVvuz9m8hO8QPSbA9tI7b6cl+OlKxDZU9zL
7vDpWl31ZiRYU/pGmscu8znwl6ZSZARTvC5Bv1lqHzaXAZATcddAmXmylsatYiIL
xMtspyCu2u2veCfbE9R8hwivfdE6coddBiPO0ECjWHG5qUbOAHjilQMacF2LWLBB
1WFreo4xrhnURdVxyvs7axvjKZj4C8+DJQqkDHlvLU33MHlZxvRjqXeaHlnkuGgM
20ah9Mq+eIS8kqxb6vLXscJttYnuIA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:02:54 2025 by rpki-client