Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/335497bb-e75d-34cc-8d34-46e1988678d1.roa
File: 335497bb-e75d-34cc-8d34-46e1988678d1.roa (raw, json)
Hash identifier: hY+TQUbXwK4cba0RLdgfPd6RLjTEq1SkymdGVB1Da9Y=
Subject key identifier: 67:3E:58:42:2C:E5:ED:86:CF:7F:80:4E:76:94:88:83:EE:04:AC:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584016D0B689EF7EB327F8A42E28
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/335497bb-e75d-34cc-8d34-46e1988678d1.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.220.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:d0:b6:89:ef:7e:b3:27:f8:a4:2e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=0ec190d6-a252-45e1-868b-5d1f6406377a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:11:de:67:11:49:81:f9:31:5b:5b:76:40:90:
89:e6:9c:4b:ef:00:76:9f:3f:f8:8f:4e:72:1a:a2:
b1:46:e3:10:18:c2:c1:bf:8c:d9:7f:71:52:15:29:
ca:40:21:11:e9:58:d3:40:f8:7c:eb:99:16:20:db:
e7:95:df:be:67:eb:79:12:43:08:45:96:1e:46:23:
7c:db:92:25:a9:c1:29:e2:ea:2b:c2:4f:85:ad:2e:
02:95:c7:84:86:a8:ce:a6:be:54:97:5b:6b:78:92:
a7:17:36:69:5f:64:db:d5:2f:3f:58:46:3f:26:d1:
88:e6:be:0a:99:3d:85:7e:fe:14:59:a5:33:72:aa:
0c:57:07:0d:b1:ba:c4:0a:87:59:9e:ad:da:5a:c2:
ad:f5:5a:6e:e8:83:53:c7:03:62:c9:f6:fe:43:30:
78:77:15:bc:3c:87:03:f1:67:25:74:46:22:91:68:
75:4a:2a:da:d6:4b:a9:69:ae:f4:a0:7f:24:9f:de:
6a:cb:dd:d4:bd:c6:ed:20:7c:e2:89:45:32:3d:57:
d1:06:5c:45:f0:3b:e9:37:3d:fc:9f:18:1a:5a:a6:
c4:6d:a8:02:24:63:06:72:9f:4b:c2:cb:fb:a1:7b:
ad:56:73:1d:5a:0d:66:ed:a5:3d:ff:ea:74:0c:47:
54:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:58:42:2C:E5:ED:86:CF:7F:80:4E:76:94:88:83:EE:04:AC:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/335497bb-e75d-34cc-8d34-46e1988678d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.220.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:4c:23:2e:09:da:01:98:e4:44:9a:12:01:9c:18:3e:96:80:
f7:bf:1a:9b:35:db:72:7c:bb:57:38:02:84:9e:67:fa:02:21:
f9:9c:af:08:8b:9f:ad:d9:ca:19:11:70:dc:58:51:74:4d:5b:
42:3b:06:21:c2:4f:13:1b:bb:ba:0c:ff:2b:ec:37:fc:a5:e6:
cc:b7:3c:dd:54:05:0a:91:78:ac:d3:90:1c:b3:15:bc:2f:bb:
2f:f5:53:4e:84:bd:e0:9f:41:80:a4:84:f4:4c:35:c9:91:a0:
14:61:1b:bd:96:e0:81:98:c7:67:28:44:cc:48:b1:b6:df:11:
d8:57:f8:82:dc:c4:92:0f:64:67:64:72:33:00:b5:6e:9b:dc:
4c:c1:c7:46:b6:61:a8:2e:80:dd:f0:eb:30:01:bb:e0:ce:54:
b8:51:1b:50:7c:bb:9b:a8:0d:24:d0:ac:a2:d9:b7:b0:8f:5c:
df:c6:7e:43:f8:dc:da:0c:17:83:5d:a2:b9:e8:9f:fb:ca:76:
01:22:c9:bc:6f:46:31:6f:44:1b:f6:c5:84:12:54:b4:82:b2:
66:bf:63:8e:73:6b:97:97:74:5d:f3:d2:8b:9f:47:6d:cc:a7:
02:81:ed:a6:f1:55:5d:14:c2:73:e2:22:b9:68:5e:b5:e3:5e:
ef:b4:37:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAW0LaJ736zJ/ikLigwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
MGVjMTkwZDYtYTI1Mi00NWUxLTg2OGItNWQxZjY0MDYzNzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBHeZxFJgfkxW1t2QJCJ5pxL7wB2nz/4j05y
GqKxRuMQGMLBv4zZf3FSFSnKQCER6VjTQPh865kWINvnld++Z+t5EkMIRZYeRiN8
25IlqcEp4uorwk+FrS4ClceEhqjOpr5Ul1treJKnFzZpX2Tb1S8/WEY/JtGI5r4K
mT2Ffv4UWaUzcqoMVwcNsbrECodZnq3aWsKt9Vpu6INTxwNiyfb+QzB4dxW8PIcD
8WcldEYikWh1Sira1kupaa70oH8kn95qy93UvcbtIHziiUUyPVfRBlxF8DvpNz38
nxgaWqbEbagCJGMGcp9Lwsv7oXutVnMdWg1m7aU9/+p0DEdUjQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGc+WEIs5e2Gz3+ATnaUiIPuBKyRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzM1NDk3YmItZTc1ZC0z
NGNjLThkMzQtNDZlMTk4ODY3OGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD9wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAQEwjLgnaAZjkRJoSAZwYPpaA978amzXbcny7VzgChJ5n+gIh+ZyvCIuf
rdnKGRFw3FhRdE1bQjsGIcJPExu7ugz/K+w3/KXmzLc83VQFCpF4rNOQHLMVvC+7
L/VTToS94J9BgKSE9Ew1yZGgFGEbvZbggZjHZyhEzEixtt8R2Ff4gtzEkg9kZ2Ry
MwC1bpvcTMHHRrZhqC6A3fDrMAG74M5UuFEbUHy7m6gNJNCsotm3sI9c38Z+Q/jc
2gwXg12iueif+8p2ASLJvG9GMW9EG/bFhBJUtIKyZr9jjnNrl5d0XfPSi59Hbcyn
AoHtpvFVXRTCc+IiuWheteNe77Q3mQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:10:52 2025 by rpki-client