Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2aa37dc6-4491-3c8a-97ad-4a42e3dc80b0.roa
File: 2aa37dc6-4491-3c8a-97ad-4a42e3dc80b0.roa (raw, json)
Hash identifier: u358q76wo1M9QYBTGJATRdg8HYMbY/Pmm2uFa5fgZKk=
Subject key identifier: 32:16:C6:AD:58:96:4E:6E:E8:47:D3:47:27:04:78:AC:F6:D4:9A:9E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D082C5139EE8D58F4351AA400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2aa37dc6-4491-3c8a-97ad-4a42e3dc80b0.roa
Signing time: Thu 24 Feb 2022 05:00:00 +0000
ROA not before: Thu 24 Feb 2022 05:00:00 +0000
ROA not after: Thu 31 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.247.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:08:2c:51:39:ee:8d:58:f4:35:1a:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 24 05:00:00 2022 GMT
Not After : Mar 31 04:00:00 2022 GMT
Subject: CN=04d47551-0ba1-4b7d-8859-5c1fbb58c4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0a:a8:d6:53:c7:ba:97:42:3f:37:27:fd:fd:
42:9e:96:44:f1:cd:44:07:1e:9f:f4:fb:66:c7:eb:
60:ff:9d:e3:19:fc:c8:b6:70:bc:a1:ff:3d:80:9c:
98:e5:2c:86:7e:8b:8f:ce:0f:88:ff:05:e4:13:85:
e8:66:21:0d:6d:ca:6d:c3:fb:aa:28:38:44:f8:74:
47:86:12:56:74:88:37:6f:52:6e:23:e6:bb:22:60:
8b:f7:c8:88:72:c0:26:53:ad:75:0e:8f:b3:a5:01:
87:fb:43:c9:bf:c7:47:2d:00:9a:3b:a6:c5:b0:be:
80:79:be:46:b5:ef:40:94:65:7c:a2:06:81:d4:0c:
07:f4:aa:ca:0a:b5:00:85:b8:f5:fd:2f:df:c8:b7:
59:d5:04:45:85:81:55:3c:6a:8c:19:99:17:9c:19:
73:dc:c9:4c:a0:46:c0:03:bf:0c:82:a5:f5:7f:52:
52:f4:ba:94:46:b4:3b:92:9b:d5:b9:a9:56:54:60:
bf:fe:83:1a:d9:e1:ae:87:00:0e:d6:0b:6b:9f:46:
06:60:73:00:72:87:ed:48:2a:12:5d:4e:b4:0c:77:
13:6a:f5:72:27:29:fb:ce:79:59:1f:4e:a7:ab:e9:
5c:2c:47:89:e6:b4:89:a2:73:05:28:b3:59:e0:85:
cc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:16:C6:AD:58:96:4E:6E:E8:47:D3:47:27:04:78:AC:F6:D4:9A:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2aa37dc6-4491-3c8a-97ad-4a42e3dc80b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.247.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:9e:18:61:fa:c4:cd:4b:8b:41:4c:62:bd:e5:b9:6d:d9:32:
a5:36:17:40:9a:39:26:5e:3e:37:e4:2e:53:a2:b7:5a:53:63:
ca:ea:47:ac:36:0d:e1:ed:3c:66:3c:59:c5:d8:0d:46:5e:6a:
aa:18:0d:bf:af:74:63:ec:ad:4d:7f:fa:11:fb:02:51:be:dd:
f0:cd:b2:45:1d:8c:02:3c:f2:d8:24:8f:a9:d8:b2:42:cb:84:
59:d9:9f:60:d2:1f:7b:1b:66:99:a8:6a:96:2e:d7:6e:f7:c8:
d3:08:bc:a4:5b:ac:df:90:42:d7:b7:59:94:c6:b7:51:44:3f:
e0:be:66:c3:6b:ae:bc:26:0e:6f:af:5a:7c:cd:ca:e3:0f:1f:
2a:9d:c1:83:9c:37:01:ea:47:12:0a:44:17:83:ac:7d:e8:cb:
3c:5c:bd:9a:2f:50:ce:86:05:bb:59:11:b6:56:e4:b8:f6:55:
46:ec:fb:f2:2c:94:8b:92:f9:ea:b4:47:7e:bc:57:0e:ba:0c:
7c:62:15:67:4f:79:3d:20:9c:53:cc:7c:d0:09:b7:d0:6c:8c:
2b:14:de:c9:34:a2:7d:13:f5:68:66:84:71:b7:74:b2:8b:7f:
fc:55:56:83:2b:c8:3f:4a:81:c5:3b:b6:d3:e3:b9:a1:bb:14:
b0:34:a0:d4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0ILFE57o1Y9DUapAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNDA1MDAwMFoXDTIyMDMzMTA0MDAwMFowLzEtMCsGA1UEAxMk
MDRkNDc1NTEtMGJhMS00YjdkLTg4NTktNWMxZmJiNThjNGNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQqo1lPHupdCPzcn/f1CnpZE8c1EBx6f9Ptm
x+tg/53jGfzItnC8of89gJyY5SyGfouPzg+I/wXkE4XoZiENbcptw/uqKDhE+HRH
hhJWdIg3b1JuI+a7ImCL98iIcsAmU611Do+zpQGH+0PJv8dHLQCaO6bFsL6Aeb5G
te9AlGV8ogaB1AwH9KrKCrUAhbj1/S/fyLdZ1QRFhYFVPGqMGZkXnBlz3MlMoEbA
A78MgqX1f1JS9LqURrQ7kpvVualWVGC//oMa2eGuhwAO1gtrn0YGYHMAcoftSCoS
XU60DHcTavVyJyn7znlZH06nq+lcLEeJ5rSJonMFKLNZ4IXMzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDIWxq1Ylk5u6EfTRycEeKz21JqeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmFhMzdkYzYtNDQ5MS0z
YzhhLTk3YWQtNGE0MmUzZGM4MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/cwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFp4YYfrEzUuLQUxiveW5bdkypTYXQJo5Jl4+N+QuU6K3WlNjyupHrDYN
4e08ZjxZxdgNRl5qqhgNv690Y+ytTX/6EfsCUb7d8M2yRR2MAjzy2CSPqdiyQsuE
WdmfYNIfextmmahqli7XbvfI0wi8pFus35BC17dZlMa3UUQ/4L5mw2uuvCYOb69a
fM3K4w8fKp3Bg5w3AepHEgpEF4OsfejLPFy9mi9QzoYFu1kRtlbkuPZVRuz78iyU
i5L56rRHfrxXDroMfGIVZ095PSCcU8x80Am30GyMKxTeyTSifRP1aGaEcbd0sot/
/FVWgyvIP0qBxTu20+O5obsUsDSg1A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:54 2025 by rpki-client