Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68a2cbfe-2974-30c1-95e0-8cf63e1d9315.roa
File: 68a2cbfe-2974-30c1-95e0-8cf63e1d9315.roa (raw, json)
Hash identifier: QcSgAFyipCFAJ+YFNUzB/4Clw4DrpZqLy3bLbX/EHis=
Subject key identifier: 85:82:39:35:FC:00:C9:07:1B:F4:FD:49:4A:A0:3E:6D:C8:31:4D:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840033E7E41C852A5970C3AEDE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68a2cbfe-2974-30c1-95e0-8cf63e1d9315.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:3e:7e:41:c8:52:a5:97:0c:3a:ed:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=98301fc7-a4a2-4414-b216-3ee3761fe087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e2:09:01:78:da:0a:c1:1e:b1:4f:45:6c:b9:
f7:d8:d0:12:de:58:4a:3f:ad:28:99:96:de:2f:6f:
ef:69:35:4c:c1:4d:65:83:43:33:57:71:50:82:2b:
20:82:55:51:c7:40:24:6b:f3:47:3c:48:de:ff:cf:
4c:c9:f4:f5:f2:f3:fd:30:44:d7:d3:7b:e6:b1:6b:
de:2e:35:47:ca:38:d3:52:c0:34:c8:98:32:65:04:
96:d6:f2:72:d5:15:12:1d:73:d1:3f:08:92:0d:8d:
bd:b4:b5:41:d9:7d:24:de:d8:69:43:1c:5e:15:4c:
82:af:f6:7c:a9:b6:06:b4:94:66:08:26:2b:b0:59:
a6:2c:55:80:06:c6:39:78:cb:d3:47:40:2e:ea:05:
f6:5c:37:7e:bd:ea:ff:ac:0d:05:08:2b:c9:a2:0b:
46:08:da:97:65:1a:5f:9a:5b:71:61:58:a8:02:20:
96:61:6a:99:26:b5:72:a8:45:66:e2:07:76:6f:58:
36:fd:02:c1:7a:5c:3a:0d:2f:32:34:62:56:e9:b5:
85:e0:d4:d7:81:71:23:04:94:97:14:c5:39:40:3e:
c9:93:71:64:c1:52:4f:61:a8:78:11:71:bc:cd:75:
63:e4:2f:a2:bd:70:9b:54:08:9b:d8:f7:16:95:f8:
ae:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:82:39:35:FC:00:C9:07:1B:F4:FD:49:4A:A0:3E:6D:C8:31:4D:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68a2cbfe-2974-30c1-95e0-8cf63e1d9315.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.212.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:14:7b:ab:53:47:4a:25:bf:11:fb:5f:cc:8b:b0:22:39:2d:
b5:d3:24:73:ec:f9:43:c4:55:06:39:48:3a:b6:61:38:df:21:
9c:a4:3f:7a:5a:e3:a3:2a:8a:72:5a:fe:76:61:bc:d6:26:2b:
41:5e:c4:3e:29:f7:6a:60:00:c9:13:4d:93:7a:2a:3b:5b:d0:
64:d7:cb:e4:e3:33:da:2d:9a:d8:6a:c3:1c:3f:0e:74:bc:58:
2a:a8:25:d4:89:a4:c0:e1:2a:11:f9:aa:f1:6d:2a:6b:51:60:
de:18:ff:cf:f7:1b:1c:93:69:80:66:e5:18:cc:80:c2:8e:26:
97:16:d1:bc:d2:56:f6:72:43:2c:78:34:2c:4b:fc:b2:db:74:
72:d1:64:e3:1e:fb:b4:e3:91:27:56:c9:67:46:fb:f2:40:8d:
55:49:44:de:a7:88:2a:54:cb:3d:f9:f2:e2:7c:14:6f:41:b2:
be:51:92:c2:ea:f9:d9:b9:ce:44:da:ce:fc:ba:f6:0d:03:33:
fe:57:e5:0b:14:e7:f1:f1:c2:3e:0a:19:d6:52:7c:ac:24:69:
cd:51:df:c0:cc:e5:2f:73:4a:71:f7:b6:a1:7b:04:20:04:36:
03:56:98:d4:a4:34:84:5e:88:82:9d:cf:49:72:56:ea:1d:df:
d6:04:80:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEADPn5ByFKllww67eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyMzEyMDAwMFoXDTIyMTIyOTA1MDAwMFowLzEtMCsGA1UEAxMk
OTgzMDFmYzctYTRhMi00NDE0LWIyMTYtM2VlMzc2MWZlMDg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+IJAXjaCsEesU9FbLn32NAS3lhKP60omZbe
L2/vaTVMwU1lg0MzV3FQgisgglVRx0Aka/NHPEje/89MyfT18vP9METX03vmsWve
LjVHyjjTUsA0yJgyZQSW1vJy1RUSHXPRPwiSDY29tLVB2X0k3thpQxxeFUyCr/Z8
qbYGtJRmCCYrsFmmLFWABsY5eMvTR0Au6gX2XDd+ver/rA0FCCvJogtGCNqXZRpf
mltxYVioAiCWYWqZJrVyqEVm4gd2b1g2/QLBelw6DS8yNGJW6bWF4NTXgXEjBJSX
FMU5QD7Jk3FkwVJPYah4EXG8zXVj5C+ivXCbVAib2PcWlfiulQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIWCOTX8AMkHG/T9SUqgPm3IMU1WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjhhMmNiZmUtMjk3NC0z
MGMxLTk1ZTAtOGNmNjNlMWQ5MzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD9QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMBR7q1NHSiW/EftfzIuwIjkttdMkc+z5Q8RVBjlIOrZhON8hnKQ/elrj
oyqKclr+dmG81iYrQV7EPin3amAAyRNNk3oqO1vQZNfL5OMz2i2a2GrDHD8OdLxY
Kqgl1ImkwOEqEfmq8W0qa1Fg3hj/z/cbHJNpgGblGMyAwo4mlxbRvNJW9nJDLHg0
LEv8stt0ctFk4x77tOORJ1bJZ0b78kCNVUlE3qeIKlTLPfny4nwUb0GyvlGSwur5
2bnORNrO/Lr2DQMz/lflCxTn8fHCPgoZ1lJ8rCRpzVHfwMzlL3NKcfe2oXsEIAQ2
A1aY1KQ0hF6Igp3PSXJW6h3f1gSAmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:39 2025 by rpki-client