Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37450b4f-902d-3b1a-83e9-90032637eb58.roa
File: 37450b4f-902d-3b1a-83e9-90032637eb58.roa (raw, json)
Hash identifier: mWUIh0haa4nYV7ePW3Ib3wLen2WM6q+tLeE2qbPIsi4=
Subject key identifier: F1:9D:72:52:DD:3F:66:9C:F3:59:DC:1B:45:DA:AF:3B:52:E5:43:A5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7D7C8ACF073B63077740DCC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37450b4f-902d-3b1a-83e9-90032637eb58.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.221.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:7c:8a:cf:07:3b:63:07:77:40:dc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=e6c65be8-2e88-45d1-a2c4-903597497ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c8:b3:e0:6d:8c:15:f9:11:42:c3:2b:74:6d:
b0:08:15:a7:96:cb:fb:83:b4:ed:a6:3f:6f:d0:34:
ff:1e:7a:8b:d4:b3:3b:1f:a6:5c:49:cf:74:b7:c0:
5b:51:75:85:5c:dc:bf:00:07:5e:dd:16:b9:e8:cf:
03:e8:90:67:00:ab:c2:0f:60:ac:a2:fa:f0:b1:3d:
7a:9f:59:9b:30:02:7b:5d:52:db:f7:ef:11:e5:ca:
c4:77:f0:4f:2f:89:1f:d4:2f:a7:c1:b7:28:3e:f0:
1f:1b:f6:a6:8b:99:64:29:61:61:0a:b6:d9:be:f6:
a3:ef:8b:c2:66:e5:07:9d:5e:04:cc:9c:fb:54:16:
69:77:a2:f1:be:2c:16:56:cc:69:cd:9e:3a:e1:7c:
ac:1f:cd:ee:17:88:c4:88:e0:f7:fe:4d:c5:8a:c6:
d2:c4:80:c3:a0:e6:0a:c1:8e:27:0f:fa:8c:5d:20:
85:95:e0:88:5f:d3:b4:ae:5b:c3:3d:31:ba:e2:4e:
a8:74:b5:9f:86:ed:1f:0c:01:1c:17:2f:4a:e0:15:
89:5e:44:d9:d6:47:34:40:4b:17:c5:90:a0:8d:29:
ff:b6:75:b6:8c:c8:1a:a0:2a:6a:63:ad:de:35:68:
e5:11:fa:27:c6:dd:81:b2:f6:9c:3b:45:97:da:41:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9D:72:52:DD:3F:66:9C:F3:59:DC:1B:45:DA:AF:3B:52:E5:43:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/37450b4f-902d-3b1a-83e9-90032637eb58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.221.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:9d:28:63:6a:e2:10:e5:dc:f4:a2:33:62:00:25:35:78:4a:
10:5d:21:89:e6:72:17:6f:1d:fe:45:bd:e1:09:9a:d1:f3:0b:
53:1c:7d:96:d1:7d:6d:a5:e6:f6:9c:7c:d9:be:88:8a:b6:cf:
ba:ca:17:98:de:74:56:a8:32:62:6d:74:a3:5e:46:23:1f:55:
3a:b0:28:7c:18:49:ac:db:6b:2c:49:8a:c8:94:6c:4b:08:13:
8d:13:0f:05:eb:ec:04:e8:f0:b0:e8:16:b6:fa:5e:a1:40:25:
db:5e:74:30:0b:a8:c6:59:1f:b1:39:81:5f:70:24:32:60:82:
e3:12:42:73:34:a1:ae:f1:9c:df:dd:2d:c2:63:c8:49:1c:de:
38:d7:91:0f:ae:af:4c:c5:54:29:38:99:ea:f9:8e:ef:0e:19:
85:22:e5:a6:ee:91:a8:b3:eb:03:81:0b:6c:56:1d:b8:ea:f1:
08:e3:42:9c:81:ff:33:25:07:f8:5a:df:34:2b:fd:bb:29:3c:
b9:df:8d:cf:e2:ef:79:3f:96:06:fe:c6:32:4f:bc:21:1a:ca:
fb:c1:7a:b1:63:76:8b:69:42:bf:1e:2d:b2:33:08:fd:93:50:
dd:e4:28:e2:da:9f:0a:55:11:fa:b9:cb:e3:f5:07:bf:8b:0a:
ef:7c:91:35
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD19fIrPBztjB3dA3MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwNzA0MDAwMFoXDTIyMDUxMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZTZjNjViZTgtMmU4OC00NWQxLWEyYzQtOTAzNTk3NDk3YWU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzciz4G2MFfkRQsMrdG2wCBWnlsv7g7Ttpj9v
0DT/HnqL1LM7H6ZcSc90t8BbUXWFXNy/AAde3Ra56M8D6JBnAKvCD2CsovrwsT16
n1mbMAJ7XVLb9+8R5crEd/BPL4kf1C+nwbcoPvAfG/ami5lkKWFhCrbZvvaj74vC
ZuUHnV4EzJz7VBZpd6LxviwWVsxpzZ464XysH83uF4jEiOD3/k3FisbSxIDDoOYK
wY4nD/qMXSCFleCIX9O0rlvDPTG64k6odLWfhu0fDAEcFy9K4BWJXkTZ1kc0QEsX
xZCgjSn/tnW2jMgaoCpqY63eNWjlEfonxt2BsvacO0WX2kFJIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPGdclLdP2ac81ncG0XarztS5UOlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzc0NTBiNGYtOTAyZC0z
YjFhLTgzZTktOTAwMzI2MzdlYjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD90wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOJ0oY2riEOXc9KIzYgAlNXhKEF0hieZyF28d/kW94Qma0fMLUxx9ltF9
baXm9px82b6IirbPusoXmN50VqgyYm10o15GIx9VOrAofBhJrNtrLEmKyJRsSwgT
jRMPBevsBOjwsOgWtvpeoUAl2150MAuoxlkfsTmBX3AkMmCC4xJCczShrvGc390t
wmPISRzeONeRD66vTMVUKTiZ6vmO7w4ZhSLlpu6RqLPrA4ELbFYduOrxCONCnIH/
MyUH+FrfNCv9uyk8ud+Nz+LveT+WBv7GMk+8IRrK+8F6sWN2i2lCvx4tsjMI/ZNQ
3eQo4tqfClUR+rnL4/UHv4sK73yRNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:44 2025 by rpki-client