Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3af45d34-beb2-32c5-abec-5f13a5a97c12.roa
File: 3af45d34-beb2-32c5-abec-5f13a5a97c12.roa (raw, json)
Hash identifier: TKs8fb0vnF2UOSMJW+/dKSuOcYaArQsHUO5+3RRVexs=
Subject key identifier: 19:8F:53:DE:20:B1:52:53:EA:65:8E:3E:A3:CE:80:37:DC:5F:36:5B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC98501CE4D39EC9435F6EE60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3af45d34-beb2-32c5-abec-5f13a5a97c12.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c9:85:01:ce:4d:39:ec:94:35:f6:ee:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=970e01ed-b551-43ff-87a8-eb319d83cd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:af:78:90:e5:0e:63:88:98:98:10:71:c1:74:
81:ac:6d:1d:b1:f4:ed:84:fa:54:01:08:76:14:bb:
a7:fe:c0:d3:ba:5b:7d:a8:75:36:6e:40:fb:d3:1a:
51:4a:a5:d0:50:06:bf:1a:ed:89:50:df:01:ed:70:
c1:a6:0e:6c:ef:0e:54:b8:c5:31:59:4d:37:64:4e:
40:ac:ab:af:9a:05:0e:5e:b4:93:0b:e3:67:8e:a9:
66:45:ec:5c:52:a2:f3:22:0d:c6:d6:30:4e:2a:23:
2b:a6:24:9c:27:ec:f3:82:fa:ca:ef:c6:49:2a:7c:
1e:15:74:27:1c:b0:72:dc:49:3c:18:02:3c:8d:73:
16:42:f0:85:4e:75:61:42:da:17:12:16:d8:95:ba:
bc:5e:54:41:e7:c7:30:c9:d7:6a:de:c3:16:24:74:
ec:b0:1b:5a:ce:45:21:51:80:f0:6f:d6:4c:49:c2:
7a:9a:06:78:79:0a:81:77:2b:11:6d:9b:b5:f3:77:
75:d4:da:0b:a0:18:3e:e9:76:73:ae:73:4f:5e:ee:
44:66:1c:8d:04:63:ee:b4:72:f0:91:6f:f0:4d:4c:
fe:39:26:ff:96:9d:b7:72:02:5c:aa:84:2d:39:a7:
a9:4c:3e:81:05:ad:7d:c8:2c:e0:dc:53:da:ca:ac:
bf:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:8F:53:DE:20:B1:52:53:EA:65:8E:3E:A3:CE:80:37:DC:5F:36:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3af45d34-beb2-32c5-abec-5f13a5a97c12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:81:22:ab:e1:27:a5:f4:ea:62:62:d0:85:74:8e:1e:01:31:
22:5e:19:02:65:3d:ea:3b:1c:7d:89:d5:19:c1:de:2d:cb:c4:
f3:b9:53:ff:b8:c8:ea:aa:cd:7e:13:ee:00:07:45:43:d5:a5:
4e:18:69:d0:f3:a8:27:4f:ed:6a:03:2b:17:e2:d1:ad:4b:ec:
fb:f3:29:7e:3e:0d:65:bd:62:94:59:86:07:ec:11:c9:a6:11:
60:f8:00:3b:03:40:8e:c3:55:72:5b:3c:ef:41:ca:ad:8c:20:
91:90:5a:6e:89:9e:a5:13:8c:5d:43:2f:15:34:b2:eb:c9:89:
b9:49:76:a5:bb:ef:50:c6:89:bd:67:1a:c3:6a:f2:bd:51:f7:
8e:00:64:06:c7:82:d6:dd:ae:ec:dc:d8:5a:bb:49:ab:19:b3:
db:f5:da:2e:97:c1:1d:17:d3:40:c2:a5:a7:92:0e:6b:5c:d2:
a2:89:7f:1c:63:63:1e:1f:dd:86:4f:04:42:39:e1:86:4e:60:
7b:3f:c1:8e:e9:f6:93:32:d2:32:f3:b1:55:18:6e:df:f6:9c:
c4:86:c1:80:27:cf:03:9e:88:e9:8b:5b:fe:c2:eb:ab:94:1e:
a5:7a:3f:4f:3e:43:9f:e7:d5:2e:a6:1f:f5:0d:f0:17:0b:ec:
32:17:41:6f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/JhQHOTTnslDX27mAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMjEyMDAwMFoXDTIyMTIwODA1MDAwMFowLzEtMCsGA1UEAxMk
OTcwZTAxZWQtYjU1MS00M2ZmLTg3YTgtZWIzMTlkODNjZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAia94kOUOY4iYmBBxwXSBrG0dsfTthPpUAQh2
FLun/sDTult9qHU2bkD70xpRSqXQUAa/Gu2JUN8B7XDBpg5s7w5UuMUxWU03ZE5A
rKuvmgUOXrSTC+NnjqlmRexcUqLzIg3G1jBOKiMrpiScJ+zzgvrK78ZJKnweFXQn
HLBy3Ek8GAI8jXMWQvCFTnVhQtoXEhbYlbq8XlRB58cwyddq3sMWJHTssBtazkUh
UYDwb9ZMScJ6mgZ4eQqBdysRbZu183d11NoLoBg+6XZzrnNPXu5EZhyNBGPutHLw
kW/wTUz+OSb/lp23cgJcqoQtOaepTD6BBa19yCzg3FPayqy/RwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBmPU94gsVJT6mWOPqPOgDfcXzZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2FmNDVkMzQtYmViMi0z
MmM1LWFiZWMtNWYxM2E1YTk3YzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD+8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAkIEiq+EnpfTqYmLQhXSOHgExIl4ZAmU96jscfYnVGcHeLcvE87lT/7jI
6qrNfhPuAAdFQ9WlThhp0POoJ0/tagMrF+LRrUvs+/Mpfj4NZb1ilFmGB+wRyaYR
YPgAOwNAjsNVcls870HKrYwgkZBabomepROMXUMvFTSy68mJuUl2pbvvUMaJvWca
w2ryvVH3jgBkBseC1t2u7NzYWrtJqxmz2/XaLpfBHRfTQMKlp5IOa1zSool/HGNj
Hh/dhk8EQjnhhk5gez/Bjun2kzLSMvOxVRhu3/acxIbBgCfPA56I6Ytb/sLrq5Qe
pXo/Tz5Dn+fVLqYf9Q3wFwvsMhdBbw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:29:42 2025 by rpki-client