Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/397db58b-43bc-326a-a507-3cec7ebd7780.roa
File: 397db58b-43bc-326a-a507-3cec7ebd7780.roa (raw, json)
Hash identifier: 10RO5iU0urn8Y7llI14/81P0LdIllwFybU7IfMVVYY0=
Subject key identifier: AA:A6:42:F4:71:7E:40:E4:BC:AA:EA:19:C8:9C:FA:A1:4E:D8:B9:80
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7A5544657F2E1699F42A8390
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/397db58b-43bc-326a-a507-3cec7ebd7780.roa
Signing time: Wed 05 Oct 2022 12:00:00 +0000
ROA not before: Wed 05 Oct 2022 12:00:00 +0000
ROA not after: Thu 10 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:7a:55:44:65:7f:2e:16:99:f4:2a:83:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 5 12:00:00 2022 GMT
Not After : Nov 10 05:00:00 2022 GMT
Subject: CN=51a6a739-c372-413c-9b64-195a0f0eaf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:53:ce:70:4d:dd:6b:2b:83:a3:20:d5:61:
c0:03:ce:3e:3c:f7:3c:03:7f:01:23:d1:e9:bb:56:
d8:9e:02:b9:6a:05:93:3e:bf:7c:9d:3e:e6:d8:b9:
7c:68:ec:b6:3a:d1:e5:43:39:0e:35:35:42:88:cc:
6f:de:a0:f3:56:df:04:46:09:d6:9a:53:2d:d4:6d:
78:fa:37:0d:8e:e7:9a:9a:b2:ce:6e:96:bb:d7:7c:
e7:07:98:b1:96:48:f6:31:44:58:70:14:98:46:5a:
57:ce:1b:3b:2f:03:46:6f:85:0a:f9:af:a0:a6:31:
a6:9a:0e:e0:32:fe:6c:fa:39:6c:87:95:dc:b1:27:
0b:d2:15:11:d0:fd:bd:3d:00:2c:3a:22:0a:de:b8:
a5:d5:09:6c:fb:9f:0b:b0:c9:e6:34:39:d1:5e:d4:
d5:95:e4:40:63:6c:61:be:4c:20:b0:d7:80:53:13:
53:c8:46:e1:61:70:3a:f8:c9:7a:5c:8b:87:49:92:
4e:b7:3a:9b:2e:2e:60:c2:9f:e5:f5:0d:5e:bb:25:
39:3d:38:23:af:1a:c6:df:bc:e8:7c:7a:d4:66:ab:
56:59:69:f6:26:b2:41:44:d9:90:fe:59:bb:7a:4b:
5b:59:b8:44:2a:00:2d:ca:88:62:83:96:cd:7b:ad:
d3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A6:42:F4:71:7E:40:E4:BC:AA:EA:19:C8:9C:FA:A1:4E:D8:B9:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/397db58b-43bc-326a-a507-3cec7ebd7780.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.200.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b6:70:fe:0b:2d:bb:94:e9:9a:bd:1b:82:60:21:41:a9:c3:
49:0e:6e:3b:3d:fe:c3:7b:55:09:0e:a6:df:4c:9c:79:0c:c0:
ba:40:5e:c8:d6:03:97:ea:e0:af:d9:9a:bf:a1:f1:d7:cc:83:
9a:c6:db:0a:c7:c8:1b:99:b2:17:de:b7:98:45:e7:3a:0f:10:
d4:ae:4d:3f:91:0e:da:06:b2:60:9f:3f:f4:00:73:25:f6:aa:
62:52:3c:e8:df:4a:d7:ac:14:f7:6c:58:80:7b:e0:dd:b8:64:
e0:c4:6e:52:d9:eb:dc:6c:a6:e7:b6:91:73:87:9f:d8:88:80:
f2:f4:c8:43:e7:04:28:1c:d0:2d:39:ea:63:9e:72:85:80:0c:
11:c4:a6:70:43:f3:a7:42:80:81:10:9a:ca:0b:ba:a6:46:20:
d5:7a:51:84:9a:dd:cb:bb:68:42:f3:de:4e:ca:15:26:b2:27:
2f:9f:94:42:c1:d9:dc:7f:45:df:50:d0:6d:70:24:64:8a:66:
8c:9e:de:7e:fd:85:bb:67:f2:3d:18:b7:47:3d:1a:96:de:b3:
15:24:1b:58:58:b1:40:b0:c4:b0:5d:2e:0d:3d:a6:5e:b4:81:
ec:30:77:f7:44:4e:47:8b:24:fc:f5:1a:7e:6a:bd:dc:15:fe:
bf:cd:73:16
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD96VURlfy4WmfQqg5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAwNTEyMDAwMFoXDTIyMTExMDA1MDAwMFowLzEtMCsGA1UEAxMk
NTFhNmE3MzktYzM3Mi00MTNjLTliNjQtMTk1YTBmMGVhZjk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCVTznBN3Wsrg6Mg1WHAA84+PPc8A38BI9Hp
u1bYngK5agWTPr98nT7m2Ll8aOy2OtHlQzkONTVCiMxv3qDzVt8ERgnWmlMt1G14
+jcNjueamrLObpa713znB5ixlkj2MURYcBSYRlpXzhs7LwNGb4UK+a+gpjGmmg7g
Mv5s+jlsh5XcsScL0hUR0P29PQAsOiIK3ril1Qls+58LsMnmNDnRXtTVleRAY2xh
vkwgsNeAUxNTyEbhYXA6+Ml6XIuHSZJOtzqbLi5gwp/l9Q1euyU5PTgjrxrG37zo
fHrUZqtWWWn2JrJBRNmQ/lm7ektbWbhEKgAtyohig5bNe63TIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKqmQvRxfkDkvKrqGcic+qFO2LmAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzk3ZGI1OGItNDNiYy0z
MjZhLWE1MDctM2NlYzdlYmQ3NzgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFrZw/gstu5Tpmr0bgmAhQanDSQ5uOz3+w3tVCQ6m30yceQzAukBeyNYD
l+rgr9mav6Hx18yDmsbbCsfIG5myF963mEXnOg8Q1K5NP5EO2gayYJ8/9ABzJfaq
YlI86N9K16wU92xYgHvg3bhk4MRuUtnr3Gym57aRc4ef2IiA8vTIQ+cEKBzQLTnq
Y55yhYAMEcSmcEPzp0KAgRCaygu6pkYg1XpRhJrdy7toQvPeTsoVJrInL5+UQsHZ
3H9F31DQbXAkZIpmjJ7efv2Fu2fyPRi3Rz0alt6zFSQbWFixQLDEsF0uDT2mXrSB
7DB390ROR4sk/PUafmq93BX+v81zFg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:51 2025 by rpki-client