Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/508701ee-8064-3b4c-b5f3-8d377a1cacb2.roa
File: 508701ee-8064-3b4c-b5f3-8d377a1cacb2.roa (raw, json)
Hash identifier: IG6drB1+HNKl09gqYnRcMEmyv+cBN3GMoC0E/SlYTzQ=
Subject key identifier: 9F:AD:2B:D5:BE:E6:EA:74:F0:10:B1:2A:50:D1:31:64:7D:87:D7:EA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6BA9A6B752838697A21B5720
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/508701ee-8064-3b4c-b5f3-8d377a1cacb2.roa
Signing time: Thu 30 Dec 2021 05:00:00 +0000
ROA not before: Thu 30 Dec 2021 05:00:00 +0000
ROA not after: Thu 03 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.185.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6b:a9:a6:b7:52:83:86:97:a2:1b:57:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 05:00:00 2021 GMT
Not After : Feb 3 05:00:00 2022 GMT
Subject: CN=87ca8e45-8d63-42dc-a09d-783797a3ed10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:de:8e:8c:c8:71:bf:a2:c0:1e:aa:94:82:4e:
e8:6b:dd:d9:95:3c:d0:55:c4:93:95:3e:dc:3f:89:
3b:ab:70:e5:4a:45:12:63:da:b0:f0:52:c0:ac:9c:
57:87:01:4c:5f:0c:ec:cd:3e:c0:8e:58:b1:f4:13:
99:af:fe:2a:36:ba:9d:8f:17:0c:f0:fa:4a:92:49:
4d:73:11:43:f4:29:d6:73:bf:2f:7c:d3:73:60:b5:
fd:23:ad:72:e5:a4:2f:ce:bf:78:12:97:21:c7:fc:
e5:03:9e:9f:a5:e1:b9:62:ef:53:87:8a:d2:93:0b:
ec:f1:0c:35:d0:ad:09:c5:a4:a6:3b:cd:a1:58:4c:
5f:28:c0:6a:b0:87:6b:2c:09:a3:00:f6:83:5f:11:
78:48:8e:14:00:06:f5:77:dd:ef:80:c3:76:06:5f:
fe:f0:69:1c:6c:24:34:e7:2b:38:c4:76:b8:23:ac:
66:75:a0:0f:cc:39:54:49:d4:f2:2c:3e:f6:c2:92:
ac:b8:8b:46:0b:85:04:5a:6c:72:5f:94:5c:c5:b0:
a9:8e:10:ec:60:d1:eb:1c:16:3c:cc:95:f3:52:2f:
ac:9c:e8:f6:7d:76:e3:3a:d4:16:6a:61:79:0e:2b:
d2:48:69:62:14:fd:88:d5:9e:0f:34:ad:42:6a:10:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:2B:D5:BE:E6:EA:74:F0:10:B1:2A:50:D1:31:64:7D:87:D7:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/508701ee-8064-3b4c-b5f3-8d377a1cacb2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.185.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:18:e0:ee:fa:93:2b:18:61:7d:06:8f:9e:40:7a:26:bd:3f:
51:06:02:e1:a9:8e:09:9b:01:fc:00:8c:28:77:9c:f2:25:17:
17:7e:17:8a:bb:10:3f:fa:38:e6:be:fc:db:74:a1:bb:04:67:
1e:60:27:ca:0d:e5:10:c9:38:4f:9e:1d:6d:35:3d:69:3f:58:
29:28:6c:9d:23:e0:67:73:f2:6d:e6:4e:9b:6e:dc:09:4c:9e:
70:0b:b3:c2:80:40:d5:b8:4f:98:7a:2e:a6:a8:7b:dc:73:14:
6c:99:37:77:ae:1f:85:59:fd:5c:34:11:92:30:33:a5:21:ad:
91:7a:b8:0c:c3:d5:ce:d5:c5:19:47:90:b6:53:b2:39:a7:8f:
b5:23:35:43:3a:81:fb:5c:eb:90:f4:95:66:e4:d0:5a:fb:ab:
73:2b:e2:67:5a:31:24:b0:d1:91:1f:3a:7e:1d:70:ac:0b:cd:
8c:e9:34:c9:85:58:77:58:12:cc:f0:cb:4f:0b:2f:85:b7:0e:
57:67:b0:48:c4:01:51:a1:ca:cc:48:e3:10:21:39:05:24:69:
1c:f7:29:6f:77:65:6d:cf:a1:cc:bc:c1:82:22:53:bb:dc:a0:
e6:53:40:c0:81:1c:6c:64:e7:f9:73:c7:c8:46:0d:f0:b5:41:
e6:71:30:86
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDxrqaa3UoOGl6IbVyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIxMTIzMDA1MDAwMFoXDTIyMDIwMzA1MDAwMFowLzEtMCsGA1UEAxMk
ODdjYThlNDUtOGQ2My00MmRjLWEwOWQtNzgzNzk3YTNlZDEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN6OjMhxv6LAHqqUgk7oa93ZlTzQVcSTlT7c
P4k7q3DlSkUSY9qw8FLArJxXhwFMXwzszT7Ajlix9BOZr/4qNrqdjxcM8PpKkklN
cxFD9CnWc78vfNNzYLX9I61y5aQvzr94Epchx/zlA56fpeG5Yu9Th4rSkwvs8Qw1
0K0JxaSmO82hWExfKMBqsIdrLAmjAPaDXxF4SI4UAAb1d93vgMN2Bl/+8GkcbCQ0
5ys4xHa4I6xmdaAPzDlUSdTyLD72wpKsuItGC4UEWmxyX5RcxbCpjhDsYNHrHBY8
zJXzUi+snOj2fXbjOtQWamF5DivSSGliFP2I1Z4PNK1CahDIOwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ+tK9W+5up08BCxKlDRMWR9h9fqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTA4NzAxZWUtODA2NC0z
YjRjLWI1ZjMtOGQzNzdhMWNhY2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD7kwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAehjg7vqTKxhhfQaPnkB6Jr0/UQYC4amOCZsB/ACMKHec8iUXF34XirsQ
P/o45r7823ShuwRnHmAnyg3lEMk4T54dbTU9aT9YKShsnSPgZ3PybeZOm27cCUye
cAuzwoBA1bhPmHoupqh73HMUbJk3d64fhVn9XDQRkjAzpSGtkXq4DMPVztXFGUeQ
tlOyOaePtSM1QzqB+1zrkPSVZuTQWvurcyviZ1oxJLDRkR86fh1wrAvNjOk0yYVY
d1gSzPDLTwsvhbcOV2ewSMQBUaHKzEjjECE5BSRpHPcpb3dlbc+hzLzBgiJTu9yg
5lNAwIEcbGTn+XPHyEYN8LVB5nEwhg==
-----END CERTIFICATE-----
Generated at Wed Jun 18 00:09:28 2025 by rpki-client