Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24cbeb6c-7c7c-315c-85e4-eaa54ccf4353.roa
File: 24cbeb6c-7c7c-315c-85e4-eaa54ccf4353.roa (raw, json)
Hash identifier: n2Opgz21PpR8Y7aFP48zGMDPFKcyp500I25FjwFZ1fk=
Subject key identifier: FA:1B:AB:1F:41:22:43:76:66:60:FE:13:A0:BF:48:DF:03:98:0A:1C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB6E981F8F2185E90624CD500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24cbeb6c-7c7c-315c-85e4-eaa54ccf4353.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b6:e9:81:f8:f2:18:5e:90:62:4c:d5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=12ca7972-e71e-48e9-8526-0245193b0998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:16:81:5e:de:ce:a7:3a:98:01:f5:7d:30:
74:9e:04:24:23:ea:96:89:10:01:87:5d:38:a4:d3:
1e:18:77:26:13:e9:9f:42:69:e2:7c:b5:cf:01:23:
03:31:eb:ad:4a:a6:0d:fe:b9:8d:ff:28:1f:fa:65:
77:8d:e7:00:c3:ca:e5:7c:92:de:73:6c:12:78:b8:
22:a7:bf:9d:09:84:93:f7:64:1a:8a:2f:c1:28:57:
a7:cd:72:f9:17:0a:3c:a7:49:ec:cd:fc:ce:02:ef:
85:84:d8:dd:bf:31:ee:f3:f0:62:6d:7e:87:69:7d:
bc:89:de:29:aa:4b:56:30:32:0f:78:e5:42:1d:fe:
dd:f0:e1:aa:c2:01:74:54:45:ef:86:c0:dc:09:d6:
96:b0:27:31:ad:3b:cc:d0:3f:91:ea:08:2f:4a:03:
4a:59:25:93:6d:ed:4e:fe:3b:2d:62:5c:64:cc:09:
0f:ab:43:b3:7d:b6:58:f0:fe:ed:d9:f6:85:20:6c:
46:a4:9f:94:e8:9e:d0:d8:ae:42:91:d8:5b:af:1e:
07:1f:07:58:33:48:d8:55:56:34:bc:b4:de:4b:30:
76:97:77:47:9d:a8:0d:66:f9:f0:9e:a8:74:d4:56:
28:4f:8e:64:2f:5f:46:12:b8:16:36:8b:d3:ee:7f:
06:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1B:AB:1F:41:22:43:76:66:60:FE:13:A0:BF:48:DF:03:98:0A:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24cbeb6c-7c7c-315c-85e4-eaa54ccf4353.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:71:25:c2:cc:00:8b:42:94:b0:12:d2:9a:78:ba:15:63:44:
3e:0f:3e:57:59:e9:b5:e6:78:c2:ac:34:d0:e7:ba:66:02:9f:
d6:f7:7d:cb:be:a6:2d:26:c2:18:55:4d:eb:b5:b2:4b:cb:d0:
34:d9:87:1b:56:38:a4:c5:e8:f5:01:6f:61:da:f8:46:dc:73:
44:a0:c9:97:45:dd:af:e0:fc:5d:5e:0a:cc:dc:a7:9d:51:ce:
a0:c3:89:90:5f:3c:3d:6d:b6:1d:65:62:60:69:fb:21:0a:68:
a0:22:12:18:71:cd:f9:4f:5d:78:d1:7e:7e:99:b6:86:84:ec:
b2:6a:91:17:4a:9f:e6:13:f6:2a:78:b1:96:05:2e:6f:33:af:
84:8a:76:c6:c1:a5:b0:47:05:1d:9e:46:3b:08:68:d7:14:da:
f3:2b:69:87:f4:7b:6c:b1:72:5c:d3:13:24:f6:38:a8:c7:dd:
f4:c3:f1:e8:15:47:34:6e:99:77:ca:88:68:04:16:59:e8:82:
16:1b:26:6f:1b:fd:ae:e3:99:c2:43:a9:90:b9:4c:6e:45:32:
3d:e5:10:a7:7c:88:e5:79:8c:f3:62:a8:65:b3:28:7d:ef:ff:
9e:01:85:7b:2f:68:d7:62:3d:21:13:22:ff:76:76:bd:be:59:
85:81:03:1a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD626YH48hhekGJM1QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyNzEyMDAwMFoXDTIyMDkwMTA0MDAwMFowLzEtMCsGA1UEAxMk
MTJjYTc5NzItZTcxZS00OGU5LTg1MjYtMDI0NTE5M2IwOTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEsWgV7ezqc6mAH1fTB0ngQkI+qWiRABh104
pNMeGHcmE+mfQmnifLXPASMDMeutSqYN/rmN/ygf+mV3jecAw8rlfJLec2wSeLgi
p7+dCYST92Qaii/BKFenzXL5Fwo8p0nszfzOAu+FhNjdvzHu8/BibX6HaX28id4p
qktWMDIPeOVCHf7d8OGqwgF0VEXvhsDcCdaWsCcxrTvM0D+R6ggvSgNKWSWTbe1O
/jstYlxkzAkPq0OzfbZY8P7t2faFIGxGpJ+U6J7Q2K5Ckdhbrx4HHwdYM0jYVVY0
vLTeSzB2l3dHnagNZvnwnqh01FYoT45kL19GErgWNovT7n8GPQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPobqx9BIkN2ZmD+E6C/SN8DmAocMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjRjYmViNmMtN2M3Yy0z
MTVjLTg1ZTQtZWFhNTRjY2Y0MzUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD9wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAF3ElwswAi0KUsBLSmni6FWNEPg8+V1npteZ4wqw00Oe6ZgKf1vd9y76m
LSbCGFVN67WyS8vQNNmHG1Y4pMXo9QFvYdr4RtxzRKDJl0Xdr+D8XV4KzNynnVHO
oMOJkF88PW22HWViYGn7IQpooCISGHHN+U9deNF+fpm2hoTssmqRF0qf5hP2Knix
lgUubzOvhIp2xsGlsEcFHZ5GOwho1xTa8ytph/R7bLFyXNMTJPY4qMfd9MPx6BVH
NG6Zd8qIaAQWWeiCFhsmbxv9ruOZwkOpkLlMbkUyPeUQp3yI5XmM82KoZbMofe//
ngGFey9o12I9IRMi/3Z2vb5ZhYEDGg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:16:50 2025 by rpki-client