Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f74f06d-c606-3ff2-ba3c-90ff7f0b6033.roa
File: 2f74f06d-c606-3ff2-ba3c-90ff7f0b6033.roa (raw, json)
Hash identifier: xIo/5lekm3+XRkjTg72N2M/HswtH8jrCvxQQJk/fiJA=
Subject key identifier: AB:07:E2:DB:84:F8:89:EB:52:30:6D:D0:E9:5D:30:93:3B:06:48:8D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D083A651EDE4C63C8F996C360
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f74f06d-c606-3ff2-ba3c-90ff7f0b6033.roa
Signing time: Thu 24 Feb 2022 05:00:00 +0000
ROA not before: Thu 24 Feb 2022 05:00:00 +0000
ROA not after: Thu 31 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:08:3a:65:1e:de:4c:63:c8:f9:96:c3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 24 05:00:00 2022 GMT
Not After : Mar 31 04:00:00 2022 GMT
Subject: CN=9f98e138-935b-4b20-9d2a-14b268b229c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a1:c1:27:ef:45:5d:51:22:d0:ef:04:31:0c:
ab:bb:5d:08:12:5d:96:35:f6:ef:6c:4f:ec:1e:3d:
bf:5b:08:e0:a6:c8:a4:7b:1e:15:bb:05:bc:2e:0e:
1d:89:90:f5:ba:6b:a8:ee:10:e4:b8:fe:23:20:24:
2d:5b:40:e6:36:50:f7:82:81:d2:74:d7:8c:ab:e0:
2d:9d:94:3a:6f:91:56:35:6e:e8:ad:a6:00:a3:c5:
35:c7:e8:d9:86:ad:0d:dc:b8:b8:85:a3:bf:9f:a6:
22:35:fb:8e:eb:a6:7f:5e:f3:56:e1:54:57:f8:91:
6e:ed:6f:f2:68:01:45:9f:38:64:44:47:67:91:35:
23:ba:73:f6:53:ef:b1:01:b4:38:d5:53:e1:99:41:
f7:9d:60:8a:28:c4:a1:1c:fc:34:38:3b:d4:64:07:
0c:84:82:b0:05:80:12:e8:9f:22:8d:63:98:ec:74:
65:43:75:d8:49:cc:2f:3d:b5:b3:d6:e1:44:65:08:
89:66:eb:5a:14:82:ab:f4:bd:4d:d0:7f:02:40:39:
4c:5d:92:31:27:5c:88:17:e5:ad:27:78:30:c5:a4:
d7:14:1e:ca:6e:72:81:63:d1:d1:69:f4:00:93:d1:
b5:b1:c3:8f:13:f8:7f:2f:7e:2a:15:fe:0f:4d:65:
96:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:07:E2:DB:84:F8:89:EB:52:30:6D:D0:E9:5D:30:93:3B:06:48:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f74f06d-c606-3ff2-ba3c-90ff7f0b6033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:83:07:af:1a:cc:49:37:21:26:93:d6:17:be:db:62:1a:b8:
62:cc:ed:ea:bd:ae:d5:fa:fc:6e:80:0c:37:42:9f:11:ba:c1:
9d:2d:6c:64:91:82:56:98:81:ee:96:2d:e2:1b:2b:e5:40:5e:
fc:3a:d4:9a:d4:b5:1c:29:1c:18:8f:5d:9d:8e:0e:f7:32:2d:
b3:76:ff:ef:fc:2b:f2:13:49:1f:33:e4:de:2d:af:da:38:38:
d0:bf:96:3d:a0:86:2a:f4:47:2a:28:8c:41:b0:d6:24:10:6e:
62:3c:9c:b5:1b:24:66:0c:80:71:8d:f1:13:c7:47:24:73:7b:
9f:a7:42:bc:24:fd:2d:00:3a:74:f4:60:f0:0a:84:6d:0a:1d:
3f:1f:d9:d4:59:63:23:45:6b:97:34:69:31:cf:06:04:f8:8f:
0c:a8:12:9e:78:47:ad:44:1b:20:da:e4:ce:cd:40:e3:b2:0c:
84:4b:51:9e:e6:f7:b1:2d:cd:0f:41:a0:61:9a:ff:d9:a8:e0:
f8:6a:53:a6:fd:4e:db:db:b3:82:b7:8c:96:0a:fd:c1:a1:e6:
99:5c:72:bd:3d:77:e4:d5:19:9c:a7:56:42:42:ab:72:e3:7e:
a1:b0:ed:7a:dd:9d:79:e3:6e:d4:2d:4e:0a:71:ee:5a:59:05:
e3:a9:a6:63
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0IOmUe3kxjyPmWw2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNDA1MDAwMFoXDTIyMDMzMTA0MDAwMFowLzEtMCsGA1UEAxMk
OWY5OGUxMzgtOTM1Yi00YjIwLTlkMmEtMTRiMjY4YjIyOWM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6HBJ+9FXVEi0O8EMQyru10IEl2WNfbvbE/s
Hj2/Wwjgpsikex4VuwW8Lg4diZD1umuo7hDkuP4jICQtW0DmNlD3goHSdNeMq+At
nZQ6b5FWNW7oraYAo8U1x+jZhq0N3Li4haO/n6YiNfuO66Z/XvNW4VRX+JFu7W/y
aAFFnzhkREdnkTUjunP2U++xAbQ41VPhmUH3nWCKKMShHPw0ODvUZAcMhIKwBYAS
6J8ijWOY7HRlQ3XYScwvPbWz1uFEZQiJZutaFIKr9L1N0H8CQDlMXZIxJ1yIF+Wt
J3gwxaTXFB7KbnKBY9HRafQAk9G1scOPE/h/L34qFf4PTWWWNQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKsH4tuE+InrUjBt0OldMJM7BkiNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmY3NGYwNmQtYzYwNi0z
ZmYyLWJhM2MtOTBmZjdmMGI2MDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD+cwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQIMHrxrMSTchJpPWF77bYhq4Yszt6r2u1fr8boAMN0KfEbrBnS1sZJGC
VpiB7pYt4hsr5UBe/DrUmtS1HCkcGI9dnY4O9zIts3b/7/wr8hNJHzPk3i2v2jg4
0L+WPaCGKvRHKiiMQbDWJBBuYjyctRskZgyAcY3xE8dHJHN7n6dCvCT9LQA6dPRg
8AqEbQodPx/Z1FljI0VrlzRpMc8GBPiPDKgSnnhHrUQbINrkzs1A47IMhEtRnub3
sS3ND0GgYZr/2ajg+GpTpv1O29uzgreMlgr9waHmmVxyvT135NUZnKdWQkKrcuN+
obDtet2deeNu1C1OCnHuWlkF46mmYw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:07:24 2025 by rpki-client