Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b9c873e-f4ff-30e9-99d8-1d91895d0586.roa
File: 8b9c873e-f4ff-30e9-99d8-1d91895d0586.roa (raw, json)
Hash identifier: //J5h54IEEBYJz3XV+daPKRJXMq6WJTP48y17P/YWdk=
Subject key identifier: 69:E2:6E:90:DA:8E:2C:6F:6A:51:3D:D1:47:31:BF:57:A9:0A:41:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403EDC1AF740CC4BF6C35F4E40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b9c873e-f4ff-30e9-99d8-1d91895d0586.roa
Signing time: Wed 14 Dec 2022 12:00:00 +0000
ROA not before: Wed 14 Dec 2022 12:00:00 +0000
ROA not after: Thu 19 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 15.239.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3e:dc:1a:f7:40:cc:4b:f6:c3:5f:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 14 12:00:00 2022 GMT
Not After : Jan 19 05:00:00 2023 GMT
Subject: CN=63e1e84a-b869-4d99-9f92-466e2dc75761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:dc:c3:f8:7e:a0:7b:12:38:74:a1:46:18:
59:08:17:5d:70:ee:5d:65:3e:9e:a7:7e:31:91:b7:
b2:28:ef:2a:8b:5e:43:86:a2:7f:bd:ff:5f:2a:40:
52:04:5c:93:95:72:86:70:ac:aa:59:10:00:19:97:
d3:07:a9:d4:77:db:f3:8f:07:c9:c2:a3:41:ca:0a:
65:b7:bb:78:c8:47:6c:b6:45:9c:7c:2d:40:ea:e8:
2a:57:09:a0:5b:5d:51:04:43:76:57:e0:6c:c6:b8:
cd:5a:68:72:15:46:fa:41:e8:1f:5e:82:4f:27:bf:
06:04:6c:ae:73:b4:48:d9:bc:4f:9a:10:22:3c:04:
95:66:8e:07:f6:ba:0b:55:92:d3:cb:b2:db:4e:2e:
24:f4:5e:31:07:00:0d:45:90:4e:c1:cc:b6:8c:f8:
1a:d4:6b:70:f9:93:a4:9c:e0:91:39:2c:e7:be:e9:
f1:6f:3b:eb:9b:e4:38:08:e9:30:a5:b6:de:2b:67:
a8:cc:ea:29:65:bf:89:ce:c9:45:e8:0d:0f:68:e2:
09:d0:32:24:94:75:be:96:87:40:35:1a:03:5e:e5:
4b:5e:fc:f7:89:30:77:54:1c:5c:00:17:fd:a1:66:
20:b1:5d:7a:ae:c4:d1:c9:6d:41:65:20:96:80:ca:
97:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E2:6E:90:DA:8E:2C:6F:6A:51:3D:D1:47:31:BF:57:A9:0A:41:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8b9c873e-f4ff-30e9-99d8-1d91895d0586.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.239.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:2d:5d:0f:35:ba:41:51:7f:03:c0:ce:b0:80:f9:fe:76:4f:
1a:51:7f:82:1d:f5:32:26:56:6c:e8:94:98:c4:03:6d:84:bf:
e3:7e:59:6e:0c:ce:8c:5e:26:16:94:d1:9b:f7:d2:34:cf:e7:
4b:77:c7:87:65:5e:dc:95:0c:30:3b:70:02:d7:b3:b1:11:63:
ce:e8:9d:16:a4:22:f6:99:26:5d:88:57:dc:c1:bf:be:5c:b3:
db:f1:f1:ca:04:dd:74:a0:fd:01:b4:ac:37:6e:11:fd:59:af:
06:a3:27:69:21:10:f3:34:74:54:ad:a2:bf:35:25:87:2f:fd:
4e:39:d8:9a:ff:a0:21:c8:a4:46:70:5f:fd:03:ff:cd:f2:9a:
ef:a1:73:18:6e:21:d8:8f:3a:2d:23:2c:79:70:b0:8e:f0:e6:
07:94:e9:71:35:cf:04:1e:fc:62:19:70:dd:ce:28:4a:81:47:
9f:87:d4:2a:84:e6:2c:ff:f6:b7:cc:28:a0:56:9d:b9:d5:21:
ff:5e:10:6c:ba:7f:67:c8:5c:b5:56:b3:14:4b:18:7b:7f:5b:
13:35:46:68:c1:af:59:56:0b:77:03:05:7f:2f:0a:97:95:9b:
1b:fd:4e:ea:98:5f:8e:64:26:5a:31:b4:c2:3d:6d:be:ec:39:
67:13:0c:af
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEA+3Br3QMxL9sNfTkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNDEyMDAwMFoXDTIzMDExOTA1MDAwMFowLzEtMCsGA1UEAxMk
NjNlMWU4NGEtYjg2OS00ZDk5LTlmOTItNDY2ZTJkYzc1NzYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXncw/h+oHsSOHShRhhZCBddcO5dZT6ep34x
kbeyKO8qi15DhqJ/vf9fKkBSBFyTlXKGcKyqWRAAGZfTB6nUd9vzjwfJwqNBygpl
t7t4yEdstkWcfC1A6ugqVwmgW11RBEN2V+BsxrjNWmhyFUb6QegfXoJPJ78GBGyu
c7RI2bxPmhAiPASVZo4H9roLVZLTy7LbTi4k9F4xBwANRZBOwcy2jPga1Gtw+ZOk
nOCROSznvunxbzvrm+Q4COkwpbbeK2eozOopZb+JzslF6A0PaOIJ0DIklHW+lodA
NRoDXuVLXvz3iTB3VBxcABf9oWYgsV16rsTRyW1BZSCWgMqXFQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGnibpDajixvalE90Ucxv1epCkGmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGI5Yzg3M2UtZjRmZi0z
MGU5LTk5ZDgtMWQ5MTg5NWQwNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD+8wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYy1dDzW6QVF/A8DOsID5/nZPGlF/gh31MiZWbOiUmMQDbYS/435ZbgzO
jF4mFpTRm/fSNM/nS3fHh2Ve3JUMMDtwAtezsRFjzuidFqQi9pkmXYhX3MG/vlyz
2/HxygTddKD9AbSsN24R/VmvBqMnaSEQ8zR0VK2ivzUlhy/9TjnYmv+gIcikRnBf
/QP/zfKa76FzGG4h2I86LSMseXCwjvDmB5TpcTXPBB78Yhlw3c4oSoFHn4fUKoTm
LP/2t8wooFadudUh/14QbLp/Z8hctVazFEsYe39bEzVGaMGvWVYLdwMFfy8Kl5Wb
G/1O6phfjmQmWjG0wj1tvuw5ZxMMrw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:21 2025 by rpki-client