Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/845ba621-bf70-37bd-b025-a2a1b4990edb.roa
File: 845ba621-bf70-37bd-b025-a2a1b4990edb.roa (raw, json)
Hash identifier: xAzY2DbgJUPM/jDlPjC3HtNTa+OX8BZfC081RhO8WOI=
Subject key identifier: DD:14:2E:B2:2B:3F:7C:77:FA:EB:09:0E:E1:EC:F1:D2:81:10:EF:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403DF531DFEF8D24EF5D49C4D8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/845ba621-bf70-37bd-b025-a2a1b4990edb.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.184.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3d:f5:31:df:ef:8d:24:ef:5d:49:c4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=fe2450cd-f6d0-4b33-a910-7a9963e934f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:39:83:b7:ab:84:48:fe:09:fc:6b:94:8d:36:
ef:49:b0:d3:9f:e7:9f:55:89:c7:03:ad:9d:d8:3c:
4d:f8:08:e8:c4:86:f0:fa:a5:5d:6b:75:72:78:88:
8f:cd:da:89:aa:bf:ab:a2:98:54:eb:ae:4d:8d:b4:
28:22:1e:e8:7a:26:28:5c:95:26:43:eb:06:f5:56:
4e:59:d3:2a:c7:1c:b2:4e:8f:9d:fb:62:db:b1:41:
37:be:9f:f3:82:1e:41:91:7e:35:ba:f3:59:f1:4c:
d4:98:97:b5:49:bd:e8:5e:aa:dc:b6:c5:f1:b2:3c:
a9:e3:03:49:5f:38:2d:87:c5:7e:bf:ff:f1:cb:2a:
6c:21:b0:26:57:3d:08:a2:85:0a:6a:2c:83:24:ff:
6f:49:e5:8e:6d:51:35:2c:2c:5c:c6:3c:5d:69:f9:
32:b4:b1:6c:c8:96:f9:50:16:72:5e:32:f3:27:30:
69:2f:d6:1f:e4:10:5c:79:e7:7f:21:5e:b5:4c:f0:
0a:f9:f9:58:c1:70:8f:67:b2:3b:fb:05:bd:70:60:
37:41:3b:b8:fc:75:db:b6:e7:ef:79:d8:3a:cd:84:
10:06:65:3a:6f:51:11:fa:16:d7:24:8c:f7:f1:d2:
a1:50:b7:f8:25:15:66:22:c5:5f:0a:61:8e:e2:52:
fd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:14:2E:B2:2B:3F:7C:77:FA:EB:09:0E:E1:EC:F1:D2:81:10:EF:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/845ba621-bf70-37bd-b025-a2a1b4990edb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.184.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:87:41:4a:bc:d4:7a:43:f2:60:1a:12:b2:7b:15:e0:02:e8:
36:6d:f8:fa:57:c9:5c:6c:8d:84:62:f2:93:b8:35:bb:5b:05:
c9:d2:b5:00:44:e5:9a:28:72:08:91:78:27:fd:aa:bc:45:49:
ee:e0:bd:68:e8:36:e2:72:29:89:a0:03:d1:14:42:3d:cd:43:
18:1c:b9:04:bd:43:b0:b8:ce:4e:06:cc:41:e2:fa:10:32:2b:
6c:c5:3b:56:1c:e0:e7:73:c6:97:45:13:10:a0:d9:1e:15:58:
41:fe:2d:e1:6b:aa:ce:a2:10:b1:28:7c:99:f1:a6:79:e9:6d:
8f:1f:d2:61:05:34:0a:91:1c:71:4c:f4:c3:1b:17:ae:a2:83:
ad:f7:4c:01:74:f8:7c:a6:a5:1e:5e:57:b4:a5:ef:6b:f6:88:
bd:ac:86:b6:bc:e3:68:58:53:f6:f3:da:7a:1b:5a:0f:e1:41:
6f:89:e1:2a:13:70:57:b7:30:c1:6d:7e:32:71:dd:6f:53:6e:
55:6d:2f:fe:8f:04:a5:f9:e8:ec:98:b3:79:1f:f9:56:22:6b:
e5:40:9f:d4:fd:41:50:29:08:0a:7f:77:1e:5f:f1:a1:bd:16:
18:45:a8:b1:1f:3d:4f:6d:b0:de:66:55:1e:1d:5f:ff:40:35:
2a:be:9b:cd
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA99THf740k711JxNgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
ZmUyNDUwY2QtZjZkMC00YjMzLWE5MTAtN2E5OTYzZTkzNGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTmDt6uESP4J/GuUjTbvSbDTn+efVYnHA62d
2DxN+AjoxIbw+qVda3VyeIiPzdqJqr+rophU665NjbQoIh7oeiYoXJUmQ+sG9VZO
WdMqxxyyTo+d+2LbsUE3vp/zgh5BkX41uvNZ8UzUmJe1Sb3oXqrctsXxsjyp4wNJ
Xzgth8V+v//xyypsIbAmVz0IooUKaiyDJP9vSeWObVE1LCxcxjxdafkytLFsyJb5
UBZyXjLzJzBpL9Yf5BBceed/IV61TPAK+flYwXCPZ7I7+wW9cGA3QTu4/HXbtufv
edg6zYQQBmU6b1ER+hbXJIz38dKhULf4JRVmIsVfCmGO4lL9PwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN0ULrIrP3x3+usJDuHs8dKBEO+fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODQ1YmE2MjEtYmY3MC0z
N2JkLWIwMjUtYTJhMWI0OTkwZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD7gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPYdBSrzUekPyYBoSsnsV4ALoNm34+lfJXGyNhGLyk7g1u1sFydK1AETl
mihyCJF4J/2qvEVJ7uC9aOg24nIpiaAD0RRCPc1DGBy5BL1DsLjOTgbMQeL6EDIr
bMU7Vhzg53PGl0UTEKDZHhVYQf4t4WuqzqIQsSh8mfGmeeltjx/SYQU0CpEccUz0
wxsXrqKDrfdMAXT4fKalHl5XtKXva/aIvayGtrzjaFhT9vPaehtaD+FBb4nhKhNw
V7cwwW1+MnHdb1NuVW0v/o8Epfno7JizeR/5ViJr5UCf1P1BUCkICn93Hl/xob0W
GEWosR89T22w3mZVHh1f/0A1Kr6bzQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:20 2025 by rpki-client