Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2811daa7-b268-36ad-b074-6c0e7d5f6362.roa
File: 2811daa7-b268-36ad-b074-6c0e7d5f6362.roa (raw, json)
Hash identifier: J81qS3wtXuvzBrYNRNHth63JRzoFl7glSF7m2yeD24E=
Subject key identifier: 14:A3:92:D0:36:D1:71:2A:5F:A6:36:78:A2:E7:94:9C:99:CA:9F:F5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2F3A276E3B8AB1D3FE5807C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2811daa7-b268-36ad-b074-6c0e7d5f6362.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.172.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:3a:27:6e:3b:8a:b1:d3:fe:58:07:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=405019a1-a9fa-4883-832e-081942e26369
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:8a:c5:1a:2c:01:5f:fc:02:49:b2:98:2d:
dd:42:e2:6f:5b:da:d1:9d:1e:36:14:32:a5:b6:9c:
58:39:5a:18:a3:e2:bb:36:73:34:f5:e6:96:04:90:
cd:64:11:c5:77:cc:0f:bb:e1:e5:de:46:a4:f8:34:
68:f8:5c:0d:ab:20:b2:0b:f2:58:eb:c4:26:48:3f:
e0:46:93:e1:8f:00:ae:da:01:6f:32:1c:39:c7:62:
a1:c1:0f:62:80:f7:f3:f2:64:b3:af:67:f3:d4:ff:
5c:0a:82:2e:ec:0b:45:f7:6f:22:34:ed:b7:dd:3a:
3b:ca:55:e5:2d:a3:98:fd:16:bd:4d:57:99:67:ea:
02:cb:56:c1:bc:af:1a:02:b5:02:66:52:05:7a:ea:
12:c9:da:b5:25:d3:92:ad:04:b7:e8:04:88:d4:7b:
f8:fe:12:84:eb:b4:6e:cf:13:63:31:0c:d2:42:7f:
51:39:ce:4d:8e:59:1b:aa:4c:52:0f:9b:6a:85:74:
57:7c:73:55:74:6c:2a:76:48:49:5b:e8:69:40:84:
8f:bd:48:35:47:c3:70:72:32:2f:15:55:55:dc:f1:
5b:e9:3c:2b:d6:16:ee:a7:35:d8:52:10:98:ef:ff:
20:7f:e1:0f:23:86:4d:38:cb:93:5d:48:f9:d9:41:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A3:92:D0:36:D1:71:2A:5F:A6:36:78:A2:E7:94:9C:99:CA:9F:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2811daa7-b268-36ad-b074-6c0e7d5f6362.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:2d:2f:00:a1:cd:d0:f8:ac:b6:19:31:c6:ae:7e:1c:2e:e8:
43:ee:cf:a9:7d:53:9a:2f:4b:57:3f:39:44:22:e8:28:32:f0:
96:63:c9:84:5b:7f:de:85:e4:dd:39:6f:81:0b:67:84:c0:1c:
a9:e9:38:cc:db:5a:57:75:f5:bf:a3:a6:b1:af:3f:f7:52:d7:
42:0b:6b:a5:11:7a:90:f2:2b:c9:0a:c9:25:4d:3d:b1:29:90:
f6:af:8c:a1:62:11:cc:2a:93:a6:76:40:2d:3b:48:55:58:31:
90:9a:15:07:b1:44:1a:62:7b:58:67:c0:4e:7c:31:1d:2b:93:
8b:fd:ce:74:3f:ba:88:05:93:e5:e0:45:be:62:0c:44:c0:26:
9f:6b:ba:61:3e:be:39:fd:48:55:b6:09:f3:95:0c:b8:f4:a7:
4c:f2:14:65:f4:12:84:4a:ca:9b:51:28:8b:72:33:16:07:bf:
53:69:fa:5b:a7:b3:ca:db:6b:52:fb:42:1f:02:5d:02:c7:ec:
3e:c8:b9:0d:05:d8:cf:c2:94:ad:3e:9c:76:1a:66:2c:79:a5:
94:fa:9d:30:76:5b:63:18:62:5e:ed:02:84:23:f9:bf:a7:1e:
41:48:88:27:a3:9d:3c:2f:fc:6a:8f:52:72:da:40:45:59:6e:
df:e8:43:11
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0vOiduO4qx0/5YB8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMDA1MDAwMFoXDTIyMDQxNDA0MDAwMFowLzEtMCsGA1UEAxMk
NDA1MDE5YTEtYTlmYS00ODgzLTgzMmUtMDgxOTQyZTI2MzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0aKxRosAV/8AkmymC3dQuJvW9rRnR42FDKl
tpxYOVoYo+K7NnM09eaWBJDNZBHFd8wPu+Hl3kak+DRo+FwNqyCyC/JY68QmSD/g
RpPhjwCu2gFvMhw5x2KhwQ9igPfz8mSzr2fz1P9cCoIu7AtF928iNO233To7ylXl
LaOY/Ra9TVeZZ+oCy1bBvK8aArUCZlIFeuoSydq1JdOSrQS36ASI1Hv4/hKE67Ru
zxNjMQzSQn9ROc5NjlkbqkxSD5tqhXRXfHNVdGwqdkhJW+hpQISPvUg1R8NwcjIv
FVVV3PFb6Twr1hbupzXYUhCY7/8gf+EPI4ZNOMuTXUj52UGFgwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBSjktA20XEqX6Y2eKLnlJyZyp/1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMjgxMWRhYTctYjI2OC0z
NmFkLWIwNzQtNmMwZTdkNWY2MzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAqi0vAKHN0Pisthkxxq5+HC7oQ+7PqX1Tmi9LVz85RCLoKDLwlmPJhFt/
3oXk3TlvgQtnhMAcqek4zNtaV3X1v6Omsa8/91LXQgtrpRF6kPIryQrJJU09sSmQ
9q+MoWIRzCqTpnZALTtIVVgxkJoVB7FEGmJ7WGfATnwxHSuTi/3OdD+6iAWT5eBF
vmIMRMAmn2u6YT6+Of1IVbYJ85UMuPSnTPIUZfQShErKm1Eoi3IzFge/U2n6W6ez
yttrUvtCHwJdAsfsPsi5DQXYz8KUrT6cdhpmLHmllPqdMHZbYxhiXu0ChCP5v6ce
QUiIJ6OdPC/8ao9SctpARVlu3+hDEQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:50:30 2025 by rpki-client