Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/606e82b3-f6fb-3378-b263-d9074cbad071.roa
File: 606e82b3-f6fb-3378-b263-d9074cbad071.roa (raw, json)
Hash identifier: AqQ3s1puskro1tje/Q6qk9/W7Zqu/OpwoZOyaFZ+bds=
Subject key identifier: E4:9A:71:CC:97:CD:60:CE:D6:56:44:D0:88:5E:82:5F:86:EA:51:B1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840036B6270AE621BEC8BA95D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/606e82b3-f6fb-3378-b263-d9074cbad071.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 15.150.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:6b:62:70:ae:62:1b:ec:8b:a9:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=59fe6910-703b-4d0d-b5a8-a4c3bb244fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:15:d9:f0:23:67:15:f0:b3:c1:03:3c:81:
b4:41:30:8e:6d:bf:39:8c:36:ca:08:fd:08:16:da:
01:21:f4:65:4e:06:3c:75:58:3c:bc:00:13:56:7d:
05:b3:76:a6:97:0b:79:19:7d:7a:a3:a3:c1:bd:dc:
95:c9:76:e9:d3:af:67:3a:6c:cf:18:15:c5:04:c6:
2d:39:c8:c3:08:5e:76:2b:0d:b1:48:17:71:5e:f2:
18:85:90:84:2a:48:e7:52:82:f7:43:ec:97:9e:e1:
db:18:3e:53:0a:9e:b1:39:18:43:cf:9b:b4:23:bc:
17:ce:49:ce:3a:0f:c1:2d:e0:79:79:65:58:5c:32:
2d:25:5d:df:80:3d:59:4d:0f:af:44:db:e9:73:71:
07:f8:61:e0:e8:28:a3:6e:ef:8c:17:d2:21:84:d2:
19:0d:4d:62:85:79:b4:da:50:3f:13:35:37:89:37:
07:b8:8a:32:9b:19:38:e9:5c:4e:65:11:59:be:02:
e5:c6:31:10:24:81:9b:e0:23:a8:2c:5a:bb:97:f5:
e0:93:dc:10:21:9c:fa:db:40:53:32:6b:2b:ae:7d:
df:23:31:89:41:2b:6f:bc:fd:83:9c:6c:44:05:56:
40:ea:ad:6f:34:d9:06:dc:af:c6:2f:cc:5a:f1:72:
22:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9A:71:CC:97:CD:60:CE:D6:56:44:D0:88:5E:82:5F:86:EA:51:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/606e82b3-f6fb-3378-b263-d9074cbad071.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.150.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:2d:c6:67:29:19:7e:8a:4a:23:0b:f2:0d:ba:59:5a:02:7f:
6e:87:f4:0c:5b:88:91:7b:a2:f7:d8:ef:28:ef:06:63:7b:0d:
d9:43:18:f3:bc:0e:ad:c9:ca:67:8a:ca:37:f1:af:6b:84:8e:
33:f5:82:84:fb:11:31:72:b0:0b:c1:a1:3e:b0:04:e0:1c:ec:
d0:07:d1:46:28:74:56:94:ab:47:cc:df:21:25:cf:c1:79:59:
9e:91:a4:b7:83:f3:1f:22:0d:3f:56:42:43:37:03:0d:8e:86:
ea:9e:95:f5:5f:17:e1:97:db:26:52:ad:3e:c4:77:fe:db:69:
5d:6e:61:94:2b:bc:04:79:a6:45:dc:9c:85:7c:aa:4b:bf:3e:
8b:da:a8:9d:14:11:1b:91:a7:29:3c:7d:9d:54:8b:14:b6:3a:
73:77:0d:88:8b:9e:ea:9e:cd:45:37:41:2a:31:2f:f3:ff:f3:
77:c7:06:5a:4f:67:8d:8b:62:7c:0b:41:bb:59:5f:7a:b4:11:
f2:10:3e:66:36:c8:29:1d:44:de:ab:fe:e9:4c:8d:e5:92:bd:
b9:34:51:89:e1:6b:2b:41:a0:f4:58:9c:35:92:b5:f6:36:2a:
8d:ea:81:86:cf:4a:05:2e:ef:ce:6d:24:1a:57:38:44:c2:04:
b2:f0:29:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEADa2JwrmIb7IupXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyMzEyMDAwMFoXDTIyMTIyOTA1MDAwMFowLzEtMCsGA1UEAxMk
NTlmZTY5MTAtNzAzYi00ZDBkLWI1YTgtYTRjM2JiMjQ0ZmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTwV2fAjZxXws8EDPIG0QTCObb85jDbKCP0I
FtoBIfRlTgY8dVg8vAATVn0Fs3amlwt5GX16o6PBvdyVyXbp069nOmzPGBXFBMYt
OcjDCF52Kw2xSBdxXvIYhZCEKkjnUoL3Q+yXnuHbGD5TCp6xORhDz5u0I7wXzknO
Og/BLeB5eWVYXDItJV3fgD1ZTQ+vRNvpc3EH+GHg6Cijbu+MF9IhhNIZDU1ihXm0
2lA/EzU3iTcHuIoymxk46VxOZRFZvgLlxjEQJIGb4COoLFq7l/Xgk9wQIZz620BT
Mmsrrn3fIzGJQStvvP2DnGxEBVZA6q1vNNkG3K/GL8xa8XIihQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOSaccyXzWDO1lZE0Ihegl+G6lGxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjA2ZTgyYjMtZjZmYi0z
Mzc4LWIyNjMtZDkwNzRjYmFkMDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD5YwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAoS3GZykZfopKIwvyDbpZWgJ/bof0DFuIkXui99jvKO8GY3sN2UMY87wO
rcnKZ4rKN/Gva4SOM/WChPsRMXKwC8GhPrAE4Bzs0AfRRih0VpSrR8zfISXPwXlZ
npGkt4PzHyINP1ZCQzcDDY6G6p6V9V8X4ZfbJlKtPsR3/ttpXW5hlCu8BHmmRdyc
hXyqS78+i9qonRQRG5GnKTx9nVSLFLY6c3cNiIue6p7NRTdBKjEv8//zd8cGWk9n
jYtifAtBu1lferQR8hA+ZjbIKR1E3qv+6UyN5ZK9uTRRieFrK0Gg9FicNZK19jYq
jeqBhs9KBS7vzm0kGlc4RMIEsvApXA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:57:16 2025 by rpki-client