Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43cb1b73-a438-33e6-9d5e-723c09fb9d88.roa
File: 43cb1b73-a438-33e6-9d5e-723c09fb9d88.roa (raw, json)
Hash identifier: j38ukR2B0lqIfhysGI6Oq/xOYGkFb92gvvfqDBaKMzA=
Subject key identifier: 97:4E:BD:FD:65:38:92:8C:36:21:EC:16:2F:2F:2D:E3:2B:BB:1C:BB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840C37005CFD1E0050534A56200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43cb1b73-a438-33e6-9d5e-723c09fb9d88.roa
Signing time: Tue 31 Jan 2023 12:00:00 +0000
ROA not before: Tue 31 Jan 2023 12:00:00 +0000
ROA not after: Wed 08 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:c3:70:05:cf:d1:e0:05:05:34:a5:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 31 12:00:00 2023 GMT
Not After : Mar 8 05:00:00 2023 GMT
Subject: CN=b1513b65-7678-4bca-a70a-23bd6bf3c4bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c9:84:fc:3c:4e:9e:68:08:52:07:12:97:9a:
f3:68:91:9e:b6:76:c7:34:08:b6:fc:5b:89:34:8f:
6b:42:60:33:c7:8a:0b:cb:bc:e2:54:1a:ee:c2:92:
93:f0:ac:86:c9:33:bf:ee:0e:fa:37:63:65:13:d3:
94:9c:89:94:67:c1:97:67:0f:66:26:01:0a:7e:7e:
1f:29:e6:58:7a:dc:68:e5:b4:6d:c4:59:07:eb:aa:
59:52:44:9c:f2:05:e4:d2:df:32:67:36:73:61:bf:
96:aa:57:0c:59:ea:dd:f9:ef:ac:06:61:e8:f1:d1:
2c:00:25:b4:91:bc:3f:6a:4d:73:6c:32:1f:4d:c3:
eb:e2:ca:c7:91:2b:50:ca:d2:5a:2d:78:03:de:2a:
94:4d:06:4a:19:4f:b6:12:d0:c4:04:1c:33:36:60:
92:db:ba:86:a1:5f:e9:91:e0:f9:f1:a9:b1:c6:aa:
54:f3:7a:dd:70:9c:a7:08:dc:9d:e2:3b:91:0c:c9:
08:2d:b1:16:dc:cc:1a:fb:f5:04:3e:7d:94:23:b9:
ad:13:a1:93:cf:de:e4:cc:6e:ef:d2:3f:86:df:a7:
10:40:5b:cc:90:26:e1:31:22:d3:71:2c:b5:e0:90:
f0:15:9c:67:eb:27:fe:81:ea:59:62:53:c8:eb:55:
84:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4E:BD:FD:65:38:92:8C:36:21:EC:16:2F:2F:2D:E3:2B:BB:1C:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43cb1b73-a438-33e6-9d5e-723c09fb9d88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:69:47:d8:16:92:d8:e5:b8:eb:86:eb:6e:8a:b0:a7:c7:02:
dc:c5:b8:96:1c:a7:ab:a9:ab:6d:d3:51:4c:67:bf:46:99:ce:
58:d0:73:e7:1c:2a:7e:17:cd:36:c0:fc:cf:e4:24:2e:22:d9:
a2:3b:a6:7c:4e:5c:90:25:e1:d1:20:9b:b3:30:26:77:23:89:
85:b2:b3:af:b5:d9:12:07:ed:07:b4:19:55:c0:d3:bb:1f:1f:
62:69:ca:5a:8a:d0:32:4d:77:94:3b:fe:e6:91:94:ef:4c:82:
62:55:72:08:42:44:48:b2:dc:42:77:e8:8a:27:ae:d6:06:bc:
c9:7b:18:67:d5:c2:11:63:04:81:cd:48:20:0a:ae:8a:bf:ca:
54:96:6d:ed:13:08:b2:e7:3f:dd:4d:0f:45:28:4f:14:78:a9:
e0:c6:ca:eb:66:e0:63:09:c5:f9:bf:49:82:21:8a:b9:ad:6a:
1e:9b:2f:08:81:bf:f2:91:2c:33:cc:1d:ef:fe:f5:a2:93:fb:
48:9b:7a:a0:be:1e:69:28:b6:98:42:68:e5:cc:ed:e1:46:46:
58:2c:9f:72:86:d4:16:40:64:11:52:c5:37:07:4e:14:db:55:
8b:d3:d0:f5:b1:3e:6d:fb:ad:18:29:1c:ed:0f:ef:e4:63:09:
41:4a:b6:2d
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEDDcAXP0eAFBTSlYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEzMTEyMDAwMFoXDTIzMDMwODA1MDAwMFowLzEtMCsGA1UEAxMk
YjE1MTNiNjUtNzY3OC00YmNhLWE3MGEtMjNiZDZiZjNjNGJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8mE/DxOnmgIUgcSl5rzaJGetnbHNAi2/FuJ
NI9rQmAzx4oLy7ziVBruwpKT8KyGyTO/7g76N2NlE9OUnImUZ8GXZw9mJgEKfn4f
KeZYetxo5bRtxFkH66pZUkSc8gXk0t8yZzZzYb+WqlcMWerd+e+sBmHo8dEsACW0
kbw/ak1zbDIfTcPr4srHkStQytJaLXgD3iqUTQZKGU+2EtDEBBwzNmCS27qGoV/p
keD58amxxqpU83rdcJynCNyd4juRDMkILbEW3Mwa+/UEPn2UI7mtE6GTz97kzG7v
0j+G36cQQFvMkCbhMSLTcSy14JDwFZxn6yf+gepZYlPI61WEwQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJdOvf1lOJKMNiHsFi8vLeMruxy7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDNjYjFiNzMtYTQzOC0z
M2U2LTlkNWUtNzIzYzA5ZmI5ZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD7QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATWlH2BaS2OW464brboqwp8cC3MW4lhynq6mrbdNRTGe/RpnOWNBz5xwq
fhfNNsD8z+QkLiLZojumfE5ckCXh0SCbszAmdyOJhbKzr7XZEgftB7QZVcDTux8f
YmnKWorQMk13lDv+5pGU70yCYlVyCEJESLLcQnfoiieu1ga8yXsYZ9XCEWMEgc1I
IAquir/KVJZt7RMIsuc/3U0PRShPFHip4MbK62bgYwnF+b9JgiGKua1qHpsvCIG/
8pEsM8wd7/71opP7SJt6oL4eaSi2mEJo5czt4UZGWCyfcobUFkBkEVLFNwdOFNtV
i9PQ9bE+bfutGCkc7Q/v5GMJQUq2LQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:36 2025 by rpki-client