Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90b5ed7a-f93b-3b17-b332-836f1300f758.roa
File: 90b5ed7a-f93b-3b17-b332-836f1300f758.roa (raw, json)
Hash identifier: KzCwCQ+Pei/dn+znMspI31RI0zdeVNZPNdYm3Yhf/GY=
Subject key identifier: E7:E3:ED:F4:7D:76:D4:83:12:77:6F:EC:17:9E:B9:43:82:C2:24:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3EB033F1E460ACCF87F62DE4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90b5ed7a-f93b-3b17-b332-836f1300f758.roa
Signing time: Tue 13 Sep 2022 12:00:00 +0000
ROA not before: Tue 13 Sep 2022 12:00:00 +0000
ROA not after: Wed 19 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3e:b0:33:f1:e4:60:ac:cf:87:f6:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 13 12:00:00 2022 GMT
Not After : Oct 19 04:00:00 2022 GMT
Subject: CN=4168efb8-6836-4a09-8d4d-3d822968a3c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:39:db:fd:e5:b6:6a:16:3a:9e:bc:3d:a0:c1:
87:70:df:3b:4b:7f:7a:1f:66:3a:ef:3c:3b:37:2d:
1b:57:c0:55:e4:1c:40:60:81:e3:fd:d6:06:29:5e:
b4:4f:1e:d7:30:23:b7:cc:fb:67:db:3d:ed:4c:b0:
ba:0f:ad:1c:dd:c1:31:15:a6:e7:df:99:77:6d:0f:
1c:0e:d1:7d:c9:e6:9a:2b:60:4b:74:02:dd:20:6b:
f5:41:88:a8:92:bf:f9:3c:2b:9a:0b:52:a2:63:25:
f2:f2:b8:1e:4f:2e:39:c7:bd:f9:cb:48:e9:09:9c:
ea:2a:45:ec:92:53:7a:b7:dd:2c:45:7a:4b:ec:2b:
6d:fe:ec:ef:e2:50:f9:49:c8:94:73:be:40:16:49:
4d:1a:ca:ff:fd:0e:69:f6:8b:52:07:7f:4e:09:24:
88:4d:e3:6b:4b:89:1f:f3:41:2f:88:28:92:02:18:
e2:8a:b8:ad:51:c3:4d:f0:6f:e4:86:77:d6:f9:9e:
29:0e:2a:3b:96:06:da:c9:ea:77:60:42:70:67:3b:
64:37:25:fd:b0:d8:02:dc:17:ed:17:45:9d:95:ee:
0e:b2:b8:a6:6f:13:97:16:02:c4:e3:f2:fb:a6:f4:
a1:98:75:a7:2a:f5:fe:13:22:93:3e:f9:75:e1:37:
ce:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E3:ED:F4:7D:76:D4:83:12:77:6F:EC:17:9E:B9:43:82:C2:24:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/90b5ed7a-f93b-3b17-b332-836f1300f758.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:69:e6:9b:95:d8:bc:7f:e2:ae:54:2e:64:73:9b:57:1b:19:
b2:f7:ae:3b:e9:d4:5d:fc:9c:1d:d8:1f:a4:40:7a:f8:65:c6:
6a:d8:2b:c8:bf:9a:9b:c1:46:d4:0c:43:16:15:61:d5:7f:3e:
60:08:12:df:9f:86:0a:1c:cb:69:2e:d9:93:fd:5e:6f:d4:cb:
55:58:65:4e:38:78:82:9d:35:f8:04:6b:23:92:2b:ba:dc:52:
da:f4:46:00:b2:59:08:ec:b9:9d:16:89:37:fe:d1:9f:6e:94:
ff:aa:10:fa:02:28:80:cf:0f:ed:7a:73:c2:7d:e6:87:74:fa:
ec:2d:ca:bf:34:7b:9b:d5:bf:f1:28:5a:2e:9b:a2:de:57:15:
3d:fa:2f:32:3b:81:45:ef:0f:50:ae:90:12:86:02:1c:45:e8:
ac:34:a7:23:c5:8e:fa:06:c6:5a:b2:f9:d4:71:8f:6c:41:da:
bd:dd:6a:de:7c:b1:f9:1c:32:d8:c6:62:21:f4:4b:42:ad:ff:
97:51:b6:79:7f:65:71:6c:3d:32:da:de:81:64:ba:ec:17:f4:
5f:16:57:11:c1:8d:e2:c3:98:55:fe:fd:4a:a9:fb:32:a3:84:
e6:cd:fe:dd:07:87:71:59:31:b8:a6:2c:73:7f:c6:ab:0e:fe:
6d:04:53:21
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8+sDPx5GCsz4f2LeQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkxMzEyMDAwMFoXDTIyMTAxOTA0MDAwMFowLzEtMCsGA1UEAxMk
NDE2OGVmYjgtNjgzNi00YTA5LThkNGQtM2Q4MjI5NjhhM2M3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTnb/eW2ahY6nrw9oMGHcN87S396H2Y67zw7
Ny0bV8BV5BxAYIHj/dYGKV60Tx7XMCO3zPtn2z3tTLC6D60c3cExFabn35l3bQ8c
DtF9yeaaK2BLdALdIGv1QYiokr/5PCuaC1KiYyXy8rgeTy45x735y0jpCZzqKkXs
klN6t90sRXpL7Ctt/uzv4lD5SciUc75AFklNGsr//Q5p9otSB39OCSSITeNrS4kf
80EviCiSAhjiiritUcNN8G/khnfW+Z4pDio7lgbayep3YEJwZztkNyX9sNgC3Bft
F0Wdle4OsrimbxOXFgLE4/L7pvShmHWnKvX+EyKTPvl14TfOYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOfj7fR9dtSDEndv7BeeuUOCwiQPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTBiNWVkN2EtZjkzYi0z
YjE3LWIzMzItODM2ZjEzMDBmNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/UwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMGnmm5XYvH/irlQuZHObVxsZsveuO+nUXfycHdgfpEB6+GXGatgryL+a
m8FG1AxDFhVh1X8+YAgS35+GChzLaS7Zk/1eb9TLVVhlTjh4gp01+ARrI5IrutxS
2vRGALJZCOy5nRaJN/7Rn26U/6oQ+gIogM8P7Xpzwn3mh3T67C3KvzR7m9W/8Sha
Lpui3lcVPfovMjuBRe8PUK6QEoYCHEXorDSnI8WO+gbGWrL51HGPbEHavd1q3nyx
+Rwy2MZiIfRLQq3/l1G2eX9lcWw9MtregWS67Bf0XxZXEcGN4sOYVf79Sqn7MqOE
5s3+3QeHcVkxuKYsc3/Gqw7+bQRTIQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:42 2025 by rpki-client