Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f7aaf3b-7b31-36f1-8c26-fd2db187389e.roa
File: 6f7aaf3b-7b31-36f1-8c26-fd2db187389e.roa (raw, json)
Hash identifier: JFnEOo6Cr/bHwWs7A8dzv2E9q0NxhOQYQ+GwCbC1s/k=
Subject key identifier: 1D:E8:C1:20:C5:19:0D:52:27:BC:7D:5A:99:CF:46:58:F8:36:F8:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2F48B559C5342755E7AC72C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f7aaf3b-7b31-36f1-8c26-fd2db187389e.roa
Signing time: Thu 10 Mar 2022 05:00:00 +0000
ROA not before: Thu 10 Mar 2022 05:00:00 +0000
ROA not after: Thu 14 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.228.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2f:48:b5:59:c5:34:27:55:e7:ac:72:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 10 05:00:00 2022 GMT
Not After : Apr 14 04:00:00 2022 GMT
Subject: CN=3a4e23c2-edec-473c-8b0c-e804c5526e39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:04:ab:2f:33:76:f9:b9:11:a0:91:59:56:f4:
05:ce:af:26:54:d3:37:07:3d:f5:08:7f:af:e5:c2:
f2:a6:80:93:02:2a:c2:6c:1b:d0:4f:53:a7:d8:a8:
29:9f:10:a3:69:97:eb:2c:e9:df:c0:27:f6:a8:f1:
7c:dc:c2:cb:83:4c:55:8a:66:67:41:9a:f2:1a:09:
45:ba:69:60:49:f3:b3:a8:ce:4a:83:3d:47:6c:4e:
a3:c3:34:cb:7e:f5:cd:7e:22:4b:53:68:be:c1:5a:
42:28:ce:f5:c0:69:1c:57:5f:d5:e8:eb:8a:39:ad:
45:75:1b:10:28:ae:09:32:38:39:fd:91:db:87:c6:
fd:6b:f8:b2:69:78:76:bb:49:c4:f7:4a:e5:e6:dd:
41:78:f3:d8:a9:67:8c:df:82:28:e3:8a:0e:ad:40:
d7:08:ab:f1:aa:e3:21:47:9d:e6:c3:a9:cb:3e:80:
98:9a:df:75:81:ae:9b:6d:e1:06:20:19:3f:b2:fb:
c9:a3:31:7a:ac:7e:55:fc:1d:80:86:4e:9c:79:37:
1f:79:7f:79:21:64:a3:c8:c3:3e:1c:7f:11:ce:d0:
5a:07:d6:72:fc:83:d8:fc:f9:a7:cc:95:ca:04:24:
79:0b:15:80:2d:9b:a7:db:ed:8e:34:3e:ee:14:51:
77:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E8:C1:20:C5:19:0D:52:27:BC:7D:5A:99:CF:46:58:F8:36:F8:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f7aaf3b-7b31-36f1-8c26-fd2db187389e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.228.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:f4:77:c7:44:bc:6f:48:12:ca:55:cf:3d:5d:d3:19:ab:97:
c8:3a:80:f2:db:30:f2:d7:47:7c:92:c0:a9:b1:e5:98:40:0c:
e5:46:8a:c9:d1:c7:bf:bf:31:5b:00:f8:21:42:92:c8:de:0f:
40:e3:db:8b:3a:8a:53:64:db:67:ed:7c:5b:07:37:44:72:eb:
34:46:54:37:19:93:93:ca:7b:83:52:0d:93:09:9a:7c:76:ed:
a9:c9:78:58:a8:ae:d7:0e:98:8d:ee:26:8b:12:e4:ca:62:c1:
61:cc:5f:4f:b7:50:17:a0:ac:2d:8a:7b:e3:47:a6:1d:f1:19:
7d:ed:e7:b6:55:5a:ca:de:52:96:20:94:6d:dd:d3:09:ca:68:
90:42:99:0a:37:5b:98:ca:b2:f4:64:df:81:94:27:d1:c5:1a:
3e:f5:b5:79:7f:23:55:b0:a2:ae:22:4c:54:05:e2:b8:59:db:
0f:72:a3:19:10:09:aa:4e:5d:89:f9:b9:2a:90:bb:c0:b2:fd:
5a:84:43:17:bd:5e:b3:9a:b6:e1:ae:14:6f:1d:14:d9:b9:26:
ce:e1:5b:19:1a:35:ab:62:1a:7d:bb:23:75:66:67:c3:6b:87:
6b:da:bf:88:d5:0a:00:9a:de:6c:af:6e:4d:a3:00:f5:6b:a9:
19:1f:7d:ad
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD0vSLVZxTQnVeescsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMxMDA1MDAwMFoXDTIyMDQxNDA0MDAwMFowLzEtMCsGA1UEAxMk
M2E0ZTIzYzItZWRlYy00NzNjLThiMGMtZTgwNGM1NTI2ZTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwSrLzN2+bkRoJFZVvQFzq8mVNM3Bz31CH+v
5cLypoCTAirCbBvQT1On2KgpnxCjaZfrLOnfwCf2qPF83MLLg0xVimZnQZryGglF
umlgSfOzqM5Kgz1HbE6jwzTLfvXNfiJLU2i+wVpCKM71wGkcV1/V6OuKOa1FdRsQ
KK4JMjg5/ZHbh8b9a/iyaXh2u0nE90rl5t1BePPYqWeM34Io44oOrUDXCKvxquMh
R53mw6nLPoCYmt91ga6bbeEGIBk/svvJozF6rH5V/B2Ahk6ceTcfeX95IWSjyMM+
HH8RztBaB9Zy/IPY/PmnzJXKBCR5CxWALZun2+2OND7uFFF3BQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFB3owSDFGQ1SJ7x9WpnPRlj4NvirMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNmY3YWFmM2ItN2IzMS0z
NmYxLThjMjYtZmQyZGIxODczODllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBD+QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvfR3x0S8b0gSylXPPV3TGauXyDqA8tsw8tdHfJLAqbHlmEAM5UaKydHH
v78xWwD4IUKSyN4PQOPbizqKU2TbZ+18Wwc3RHLrNEZUNxmTk8p7g1INkwmafHbt
qcl4WKiu1w6Yje4mixLkymLBYcxfT7dQF6CsLYp740emHfEZfe3ntlVayt5SliCU
bd3TCcpokEKZCjdbmMqy9GTfgZQn0cUaPvW1eX8jVbCiriJMVAXiuFnbD3KjGRAJ
qk5difm5KpC7wLL9WoRDF71es5q24a4Ubx0U2bkmzuFbGRo1q2IafbsjdWZnw2uH
a9q/iNUKAJrebK9uTaMA9WupGR99rQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:09 2025 by rpki-client