Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bafc95e-bd7c-3c83-bdf7-658baa0b0657.roa
File: 7bafc95e-bd7c-3c83-bdf7-658baa0b0657.roa (raw, json)
Hash identifier: ZW+IcnExeMZazoTWiJkn6bpVGVt/5tPa4QnmBiAnD10=
Subject key identifier: 84:18:DD:4F:A0:EC:62:24:2E:CF:BA:FC:CB:58:5E:FB:9A:98:01:77
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584051B40B0486BC28AB976BDD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bafc95e-bd7c-3c83-bdf7-658baa0b0657.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.162.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:b4:0b:04:86:bc:28:ab:97:6b:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=f4c38721-b587-42a1-af38-f51aa4b6c964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:2a:cf:6d:aa:69:d0:c5:62:7e:de:c6:81:15:
46:6e:22:5c:33:02:0e:cf:4c:11:08:24:c8:f4:7e:
de:f0:7a:03:a5:e1:44:8c:13:ec:32:73:46:73:f1:
85:67:b1:a4:25:93:6b:47:89:fe:50:8e:3b:45:fb:
aa:38:45:2b:df:18:62:bf:e5:f6:61:33:69:63:33:
ce:cc:6b:f6:b4:6d:9f:59:5b:ba:f4:5a:26:ff:fb:
68:c0:b1:69:7f:2f:9e:4b:da:dd:b2:74:29:8c:93:
14:d8:06:ab:18:ba:af:28:26:22:a9:57:8a:1e:c2:
cb:2a:f0:5c:1d:d9:a2:7b:87:69:39:31:47:e6:99:
76:d1:41:7d:a4:e3:04:f3:d7:8c:99:15:54:a7:89:
9c:fb:a6:fe:5a:ee:f2:9c:aa:d6:bd:ae:4a:0d:5d:
b5:9a:1b:ed:18:8f:55:75:bd:c5:e4:42:b7:c9:66:
2e:89:17:78:9f:a4:45:00:e6:2d:52:79:9d:57:61:
09:ef:22:72:f8:fa:8c:7d:f5:7a:f1:49:15:e5:a3:
08:c0:20:16:b3:f2:cf:ae:1a:d7:4f:19:7d:d5:b8:
ba:86:b6:fb:87:49:c1:89:37:3f:d4:d3:4c:5d:00:
be:7a:8d:31:84:12:fa:90:68:4b:58:c8:b1:db:1d:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:18:DD:4F:A0:EC:62:24:2E:CF:BA:FC:CB:58:5E:FB:9A:98:01:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7bafc95e-bd7c-3c83-bdf7-658baa0b0657.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.162.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:82:d9:af:8c:0c:23:eb:81:b8:7b:b8:f9:18:76:05:a5:bf:
16:d0:54:5c:de:d6:ac:65:75:e9:06:9f:8f:03:a2:81:7c:3e:
40:cd:56:87:e4:be:83:75:87:cf:7e:3d:9a:31:fe:fe:69:96:
61:e5:1e:a5:9a:c9:ce:a4:e5:07:49:e9:da:3e:a8:3c:cb:5a:
69:93:40:34:2c:59:ed:3e:72:52:68:b9:5d:7e:a0:20:fd:1b:
bd:ed:95:ab:48:ca:57:fe:53:30:65:8f:19:6c:80:a9:70:71:
05:54:1d:21:65:a7:5e:12:04:47:d4:41:23:79:07:ae:6a:56:
d7:33:19:73:25:57:90:a8:16:96:e9:3d:e6:af:56:41:76:76:
9c:2a:b7:4c:9b:aa:b5:da:07:77:8f:29:4b:a2:d3:c9:8e:07:
a6:6b:84:a4:e0:9a:76:16:32:29:c9:19:8f:19:2c:e3:11:19:
cd:17:e8:22:25:d7:d9:71:e2:9e:5c:3d:29:97:7a:24:0b:59:
bf:e3:15:e3:36:19:ab:b2:7b:ac:b4:48:41:65:72:8b:3d:d7:
a0:79:e8:3c:21:e1:57:5e:1a:9a:2b:72:47:18:15:65:39:e1:
2d:5b:a2:07:81:b9:66:b0:6f:6b:6d:e3:68:f7:e1:29:82:f3:
f7:50:b5:f1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBRtAsEhrwoq5dr3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyMTEyMDAwMFoXDTIzMDEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZjRjMzg3MjEtYjU4Ny00MmExLWFmMzgtZjUxYWE0YjZjOTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCrPbapp0MVift7GgRVGbiJcMwIOz0wRCCTI
9H7e8HoDpeFEjBPsMnNGc/GFZ7GkJZNrR4n+UI47RfuqOEUr3xhiv+X2YTNpYzPO
zGv2tG2fWVu69Fom//towLFpfy+eS9rdsnQpjJMU2AarGLqvKCYiqVeKHsLLKvBc
Hdmie4dpOTFH5pl20UF9pOME89eMmRVUp4mc+6b+Wu7ynKrWva5KDV21mhvtGI9V
db3F5EK3yWYuiRd4n6RFAOYtUnmdV2EJ7yJy+PqMffV68UkV5aMIwCAWs/LPrhrX
Txl91bi6hrb7h0nBiTc/1NNMXQC+eo0xhBL6kGhLWMix2x3BowIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIQY3U+g7GIkLs+6/MtYXvuamAF3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2JhZmM5NWUtYmQ3Yy0z
YzgzLWJkZjctNjU4YmFhMGIwNjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6IwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKYLZr4wMI+uBuHu4+Rh2BaW/FtBUXN7WrGV16QafjwOigXw+QM1Wh+S+
g3WHz349mjH+/mmWYeUepZrJzqTlB0np2j6oPMtaaZNANCxZ7T5yUmi5XX6gIP0b
ve2Vq0jKV/5TMGWPGWyAqXBxBVQdIWWnXhIER9RBI3kHrmpW1zMZcyVXkKgWluk9
5q9WQXZ2nCq3TJuqtdoHd48pS6LTyY4HpmuEpOCadhYyKckZjxks4xEZzRfoIiXX
2XHinlw9KZd6JAtZv+MV4zYZq7J7rLRIQWVyiz3XoHnoPCHhV14amityRxgVZTnh
LVuiB4G5ZrBva23jaPfhKYLz91C18Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:41 2025 by rpki-client