Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48f21cb3-e4fc-30f1-9de3-e4ad3390b857.roa
File: 48f21cb3-e4fc-30f1-9de3-e4ad3390b857.roa (raw, json)
Hash identifier: VBnYoSLkLAIJux6YVVdhWH2HNrLawFVvpXqJd1lbpTc=
Subject key identifier: 1E:2B:6B:C5:0D:69:16:A4:DD:A3:F2:AF:F5:35:45:09:59:E5:30:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C68E6A240D352949CEDDE0840
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48f21cb3-e4fc-30f1-9de3-e4ad3390b857.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.152.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:68:e6:a2:40:d3:52:94:9c:ed:de:08:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=c3e114c1-454a-42ce-a1fb-67373025eab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:da:e4:cd:14:bc:19:a3:10:9d:c2:65:99:0d:
15:dd:f6:a4:89:f5:0b:74:99:78:61:b2:c6:70:74:
b2:cf:7a:c2:e3:fa:52:6c:e2:76:03:4a:b3:50:90:
f2:1f:24:60:9e:43:bd:fb:00:7a:d9:12:c4:45:4c:
dd:4a:b2:c8:66:34:b8:bf:84:3c:9e:92:e7:6e:0c:
8b:27:d7:78:26:da:f4:fc:bb:7f:95:9a:ca:dd:f7:
f9:8a:5f:6c:86:21:0e:d7:6d:f1:56:4a:39:1f:3c:
a6:b7:52:1d:9f:aa:dc:92:c8:a3:c5:e4:dc:24:3f:
3a:34:64:0e:e8:a0:fa:98:25:16:c3:6a:7f:20:fa:
39:60:bf:cf:b7:a2:72:af:18:2c:b3:15:6e:f9:6e:
09:3a:4b:2a:87:11:7f:57:05:c0:ee:e0:c5:e4:92:
fd:c2:77:15:0b:fa:54:27:5f:13:d9:02:a0:b7:51:
50:d1:9d:01:d8:c5:d8:19:e7:ff:dd:91:b8:f1:65:
63:07:88:a3:80:bb:1f:19:96:f4:ce:1c:d6:6d:c9:
e9:b1:eb:54:52:40:50:37:0f:6c:fe:2f:4e:6d:5e:
87:bd:ff:15:e4:b8:fa:24:5b:4c:ac:d4:f7:70:95:
de:30:2a:9d:d4:c1:5e:7b:ca:3a:89:67:23:33:3e:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2B:6B:C5:0D:69:16:A4:DD:A3:F2:AF:F5:35:45:09:59:E5:30:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/48f21cb3-e4fc-30f1-9de3-e4ad3390b857.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.152.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:4b:1e:c0:d6:d2:17:13:a6:2c:16:b8:c7:b7:49:cd:f3:58:
83:cb:bf:3f:e7:f6:f0:af:b0:3c:9e:5b:b9:ca:97:43:22:fa:
fc:c4:06:27:c4:4e:89:bc:8c:b5:ac:bf:64:21:ac:1c:56:49:
aa:6a:bc:92:1b:5a:cd:6a:76:d7:00:e6:36:76:ff:4c:43:de:
ba:a0:c2:62:24:41:af:7b:e2:ed:6e:75:b0:94:be:49:5b:87:
c3:a2:ff:b4:5f:c4:af:b9:2c:52:fe:f1:a9:4d:94:61:2a:55:
b6:41:f8:b3:cd:9b:b4:58:03:0a:5a:3a:f2:62:38:d7:75:7b:
16:4a:91:5d:c8:9e:7c:f9:fd:d8:9e:94:ce:f8:aa:58:de:21:
60:da:d3:53:53:d6:46:3d:42:1f:56:33:cc:26:4d:62:a3:40:
64:e9:88:53:5d:79:02:9b:f2:c7:5b:a0:88:da:a3:84:2d:a8:
1c:6b:3d:06:28:62:a6:f9:1c:ab:20:a5:68:f1:e1:d0:b0:6d:
85:b4:3f:c2:fc:4a:64:53:45:00:d7:c1:ba:a9:7e:8f:6f:db:
57:ec:31:cc:b3:07:16:e5:e9:48:fc:e0:c2:ff:7a:6a:ff:2d:
99:35:53:48:7c:08:bf:f3:a5:e3:6a:e5:b7:da:88:6e:90:ce:
50:c8:e1:22
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxo5qJA01KUnO3eCEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIyOTA1MDAwMFoXDTIyMDIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
YzNlMTE0YzEtNDU0YS00MmNlLWExZmItNjczNzMwMjVlYWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNrkzRS8GaMQncJlmQ0V3fakifULdJl4YbLG
cHSyz3rC4/pSbOJ2A0qzUJDyHyRgnkO9+wB62RLERUzdSrLIZjS4v4Q8npLnbgyL
J9d4Jtr0/Lt/lZrK3ff5il9shiEO123xVko5Hzymt1Idn6rcksijxeTcJD86NGQO
6KD6mCUWw2p/IPo5YL/Pt6JyrxgssxVu+W4JOksqhxF/VwXA7uDF5JL9wncVC/pU
J18T2QKgt1FQ0Z0B2MXYGef/3ZG48WVjB4ijgLsfGZb0zhzWbcnpsetUUkBQNw9s
/i9ObV6Hvf8V5Lj6JFtMrNT3cJXeMCqd1MFee8o6iWcjMz4I1QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB4ra8UNaRak3aPyr/U1RQlZ5TAdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDhmMjFjYjMtZTRmYy0z
MGYxLTlkZTMtZTRhZDMzOTBiODU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD5gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtUsewNbSFxOmLBa4x7dJzfNYg8u/P+f28K+wPJ5bucqXQyL6/MQGJ8RO
ibyMtay/ZCGsHFZJqmq8khtazWp21wDmNnb/TEPeuqDCYiRBr3vi7W51sJS+SVuH
w6L/tF/Er7ksUv7xqU2UYSpVtkH4s82btFgDClo68mI413V7FkqRXciefPn92J6U
zviqWN4hYNrTU1PWRj1CH1YzzCZNYqNAZOmIU115Apvyx1ugiNqjhC2oHGs9Bihi
pvkcqyClaPHh0LBthbQ/wvxKZFNFANfBuql+j2/bV+wxzLMHFuXpSPzgwv96av8t
mTVTSHwIv/Ol42rlt9qIbpDOUMjhIg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:18 2025 by rpki-client