Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36c9e85f-4dd0-3efd-b01a-0d61805ebcd4.roa
File: 36c9e85f-4dd0-3efd-b01a-0d61805ebcd4.roa (raw, json)
Hash identifier: jrnnKe8AdV6yjF0340sfGDrPuxOyUPBowT8wIF/xwXk=
Subject key identifier: F3:50:DD:67:72:ED:04:11:7A:07:29:0C:18:D1:BA:8F:7A:48:DD:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584016955385838676B881755E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36c9e85f-4dd0-3efd-b01a-0d61805ebcd4.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.192.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:95:53:85:83:86:76:b8:81:75:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=cefd6ce1-8387-47a4-8a4d-c7ad85804e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d4:f1:67:4c:cb:1e:2e:43:de:b4:22:8f:c8:
97:9f:e5:01:e1:51:5e:d1:d9:fe:19:12:7c:9b:f4:
d3:aa:77:6b:dd:b4:75:dc:cf:ef:3b:5f:a5:65:e8:
91:64:c7:1b:d9:76:ef:dc:53:d4:da:1f:d5:1a:35:
1e:26:6c:82:3e:ee:c5:cd:ec:b8:89:80:14:fa:55:
9a:76:d0:d1:74:fd:67:b4:76:fa:dd:7f:9d:96:8e:
4c:13:5a:92:78:0a:74:ba:9f:dc:73:02:e6:08:45:
e8:49:d3:2b:cf:7f:14:85:9e:bb:11:b6:61:4e:8a:
8f:b1:91:9c:95:bd:09:d7:88:73:02:6f:7c:b0:77:
89:a9:4d:7e:9e:0a:f3:44:f5:59:65:db:45:03:67:
a1:58:06:53:b5:9b:1f:cf:35:de:26:34:c9:f8:eb:
60:fc:25:ff:ec:20:7d:9e:13:49:0d:dd:6b:e9:09:
d7:aa:68:6f:1e:a6:2b:98:a2:d2:fc:e0:8c:a8:bd:
c0:d5:c4:55:71:4f:36:48:62:08:99:fe:6d:72:72:
13:05:fd:44:9f:c1:eb:e3:41:27:1b:35:0f:bd:3e:
79:7e:e0:65:ec:c6:f2:4e:9f:41:f0:2e:a1:09:49:
18:cb:cf:10:b9:26:e2:3c:23:b1:b4:42:21:f2:07:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:50:DD:67:72:ED:04:11:7A:07:29:0C:18:D1:BA:8F:7A:48:DD:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/36c9e85f-4dd0-3efd-b01a-0d61805ebcd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.192.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:ca:07:dd:37:6f:bc:c6:05:e3:84:8c:49:68:09:cb:98:e0:
0e:a2:9e:78:c8:b4:64:ec:a1:fe:a2:87:83:cd:ba:0b:ff:59:
79:84:65:68:3d:d6:03:1e:e3:c8:cb:55:8d:20:4d:ad:55:a3:
c3:bc:20:de:e8:4d:46:49:b3:01:5d:98:d4:2b:4a:4d:26:4f:
e7:be:ab:88:c6:57:e8:38:1b:66:14:97:04:a9:38:37:8d:61:
35:53:6a:84:fc:73:f4:cd:b6:fc:d4:98:60:74:91:28:4f:ca:
3c:84:cf:29:0b:0c:dc:c4:bb:af:c2:8f:26:d9:a3:49:34:55:
72:94:39:4a:a7:09:c9:91:bd:ac:d9:d7:46:3a:09:1b:05:07:
11:42:54:7b:5c:eb:43:08:f6:4e:b5:05:61:df:43:95:b3:3d:
66:fa:4f:b2:d2:53:dd:89:84:30:91:8d:01:d0:dc:b9:c4:4d:
90:fc:fa:a6:3e:43:17:b8:56:9b:db:a8:41:68:04:2a:fd:bc:
67:94:d9:09:28:8b:d9:dd:0c:11:a8:ad:04:ba:9a:f8:ea:11:
f2:dc:53:5e:8f:fd:79:2e:86:fd:a0:fc:68:3c:de:77:37:2b:
8c:8a:40:b4:ab:52:ea:54:e1:7e:ee:e0:50:b1:3e:52:e1:e6:
fb:8b:2a:dc
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAWlVOFg4Z2uIF1XoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
Y2VmZDZjZTEtODM4Ny00N2E0LThhNGQtYzdhZDg1ODA0ZTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9TxZ0zLHi5D3rQij8iXn+UB4VFe0dn+GRJ8
m/TTqndr3bR13M/vO1+lZeiRZMcb2Xbv3FPU2h/VGjUeJmyCPu7Fzey4iYAU+lWa
dtDRdP1ntHb63X+dlo5ME1qSeAp0up/ccwLmCEXoSdMrz38UhZ67EbZhToqPsZGc
lb0J14hzAm98sHeJqU1+ngrzRPVZZdtFA2ehWAZTtZsfzzXeJjTJ+Otg/CX/7CB9
nhNJDd1r6QnXqmhvHqYrmKLS/OCMqL3A1cRVcU82SGIImf5tcnITBf1En8Hr40En
GzUPvT55fuBl7MbyTp9B8C6hCUkYy88QuSbiPCOxtEIh8gcC7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPNQ3Wdy7QQRegcpDBjRuo96SN2LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzZjOWU4NWYtNGRkMC0z
ZWZkLWIwMWEtMGQ2MTgwNWViY2Q0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAC8oH3TdvvMYF44SMSWgJy5jgDqKeeMi0ZOyh/qKHg826C/9ZeYRlaD3W
Ax7jyMtVjSBNrVWjw7wg3uhNRkmzAV2Y1CtKTSZP576riMZX6DgbZhSXBKk4N41h
NVNqhPxz9M22/NSYYHSRKE/KPITPKQsM3MS7r8KPJtmjSTRVcpQ5SqcJyZG9rNnX
RjoJGwUHEUJUe1zrQwj2TrUFYd9DlbM9ZvpPstJT3YmEMJGNAdDcucRNkPz6pj5D
F7hWm9uoQWgEKv28Z5TZCSiL2d0MEaitBLqa+OoR8txTXo/9eS6G/aD8aDzedzcr
jIpAtKtS6lThfu7gULE+UuHm+4sq3A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:16 2025 by rpki-client