Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2639df3c-cdc4-39a7-b32b-ef5eee10e91e.roa
File: 2639df3c-cdc4-39a7-b32b-ef5eee10e91e.roa (raw, json)
Hash identifier: tdDOjfpw6a/YSr/NoWaw0dWueRECaHvVhhhXMoHbnIc=
Subject key identifier: 27:9D:74:4A:DE:BC:AE:FC:AB:F7:BC:92:4D:DB:8C:8A:E6:EF:57:3F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858400320A975F80F48665EE1FAB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2639df3c-cdc4-39a7-b32b-ef5eee10e91e.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.171.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:20:a9:75:f8:0f:48:66:5e:e1:fa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=d2b2ef9c-f3e1-45ff-aedb-aac6e54c7e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:fc:59:0f:89:d3:8c:cd:16:58:37:8e:66:
b6:a8:d0:65:d0:de:95:37:76:9c:80:49:c8:3d:31:
be:92:a9:0f:7a:32:cb:d6:43:af:32:9f:e5:a3:51:
83:aa:12:05:41:36:cf:8e:2b:38:20:cc:22:c1:66:
f6:74:8c:51:4d:fd:07:0d:bd:66:54:d7:f5:ba:5f:
bf:2e:f6:b4:08:db:26:a6:8e:4e:fa:45:12:ed:1a:
36:16:34:33:2b:0d:94:07:14:07:05:91:64:6e:d1:
c6:61:ce:38:d0:67:8c:c8:78:0c:5a:ba:13:d0:60:
df:02:b1:c0:4e:b9:79:24:31:76:d4:05:8c:4b:4a:
fb:2e:bd:fa:74:64:8b:dd:fd:2f:0d:64:70:db:6e:
6e:2b:46:73:b7:01:5b:98:2e:91:e5:ea:53:8d:a8:
33:f2:d0:d4:db:99:0e:b1:75:27:58:1a:d2:36:97:
bc:d7:b3:d9:ab:35:9d:5b:ae:b9:c0:cf:d7:bd:96:
d7:b0:a7:0b:9c:69:9f:96:ca:a4:a1:2e:40:95:ef:
42:85:ef:f1:ca:91:b0:76:46:f4:09:08:cb:f7:28:
81:c8:89:16:5b:f4:b9:d7:6c:cf:09:75:e8:b7:c6:
6c:7b:88:38:c2:07:66:5e:50:33:4c:ab:92:72:55:
8b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9D:74:4A:DE:BC:AE:FC:AB:F7:BC:92:4D:DB:8C:8A:E6:EF:57:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2639df3c-cdc4-39a7-b32b-ef5eee10e91e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.171.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:72:01:e6:53:95:0d:64:2c:ef:f9:93:90:1d:4f:2e:91:51:
ec:83:d1:25:18:af:e9:63:c8:6e:e1:f3:bb:a7:31:8c:39:ba:
a1:64:af:77:65:df:6f:15:5a:82:fb:99:33:d1:16:64:55:1e:
96:23:ac:27:22:45:b4:c1:c4:6b:54:e7:93:56:90:a9:45:db:
82:df:1d:17:3f:2e:69:5a:b5:10:a0:4e:bd:5e:b4:d3:ea:87:
d4:19:d3:a0:d9:e2:26:44:eb:14:ee:a8:5d:89:a4:1f:57:3b:
15:dc:dd:37:5d:f6:7a:7e:58:ed:2c:26:44:00:8d:77:4d:a7:
51:00:b7:dd:68:6f:bd:db:40:7d:d8:2b:a4:eb:81:ed:68:70:
02:4c:2a:48:f6:71:ce:09:b8:dc:be:b6:9f:42:68:ed:c3:1a:
6b:eb:db:be:46:0f:2a:dd:b9:f5:3d:c6:e5:f7:4c:ac:ad:d5:
dd:ee:2e:ab:d5:c1:ad:06:d5:01:a7:42:19:91:9a:a8:f3:0b:
eb:7c:2c:87:ec:f4:7b:12:d8:76:0c:0d:31:66:0c:7f:78:e5:
1a:c9:61:b7:d5:d5:64:5d:95:00:b7:dd:d6:c4:3f:e8:7f:d8:
53:14:d1:b1:ad:38:aa:4e:90:3e:48:a0:44:9d:d9:56:34:98:
6c:ec:d8:cd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEADIKl1+A9IZl7h+rAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyMzEyMDAwMFoXDTIyMTIyOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZDJiMmVmOWMtZjNlMS00NWZmLWFlZGItYWFjNmU1NGM3ZTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcf8WQ+J04zNFlg3jma2qNBl0N6VN3acgEnI
PTG+kqkPejLL1kOvMp/lo1GDqhIFQTbPjis4IMwiwWb2dIxRTf0HDb1mVNf1ul+/
Lva0CNsmpo5O+kUS7Ro2FjQzKw2UBxQHBZFkbtHGYc440GeMyHgMWroT0GDfArHA
Trl5JDF21AWMS0r7Lr36dGSL3f0vDWRw225uK0ZztwFbmC6R5epTjagz8tDU25kO
sXUnWBrSNpe817PZqzWdW665wM/XvZbXsKcLnGmflsqkoS5Ale9Che/xypGwdkb0
CQjL9yiByIkWW/S512zPCXXot8Zse4g4wgdmXlAzTKuSclWLIQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCeddErevK78q/e8kk3bjIrm71c/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjYzOWRmM2MtY2RjNC0z
OWE3LWIzMmItZWY1ZWVlMTBlOTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6swVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATXIB5lOVDWQs7/mTkB1PLpFR7IPRJRiv6WPIbuHzu6cxjDm6oWSvd2Xf
bxVagvuZM9EWZFUeliOsJyJFtMHEa1Tnk1aQqUXbgt8dFz8uaVq1EKBOvV600+qH
1BnToNniJkTrFO6oXYmkH1c7FdzdN132en5Y7SwmRACNd02nUQC33WhvvdtAfdgr
pOuB7WhwAkwqSPZxzgm43L62n0Jo7cMaa+vbvkYPKt259T3G5fdMrK3V3e4uq9XB
rQbVAadCGZGaqPML63wsh+z0exLYdgwNMWYMf3jlGslht9XVZF2VALfd1sQ/6H/Y
UxTRsa04qk6QPkigRJ3ZVjSYbOzYzQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:32 2025 by rpki-client