Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/915a3617-a0cb-3736-a165-b9cd14f137ad.roa
File: 915a3617-a0cb-3736-a165-b9cd14f137ad.roa (raw, json)
Hash identifier: 8EfoYjZ3AIlch88GZpwANL1aQGBk4JH1KJse5DANEsg=
Subject key identifier: 6B:25:6B:C3:43:A7:41:F0:AA:4D:7E:73:03:80:41:74:F8:32:F2:90
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F05578EE506A5E3884A8F25E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/915a3617-a0cb-3736-a165-b9cd14f137ad.roa
Signing time: Wed 24 Aug 2022 12:00:00 +0000
ROA not before: Wed 24 Aug 2022 12:00:00 +0000
ROA not after: Thu 29 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.168.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:05:57:8e:e5:06:a5:e3:88:4a:8f:25:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 24 12:00:00 2022 GMT
Not After : Sep 29 04:00:00 2022 GMT
Subject: CN=2e3dd52d-c77b-44f6-a7cf-abb3066b03bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0d:14:40:4d:d7:e8:56:44:f1:ba:8d:88:5e:
41:10:e9:ab:86:94:05:ac:be:f9:4d:32:c0:33:7f:
17:90:e5:9c:c4:56:f6:a4:46:9e:e0:1a:70:fe:07:
49:1c:52:e5:69:64:57:32:b6:8e:00:cd:00:4d:c4:
b5:7e:cb:79:94:32:ac:b7:22:62:2c:ef:c5:46:ce:
45:77:a3:93:27:c6:c3:e0:85:9c:a8:aa:6e:50:eb:
90:ca:8d:a0:61:ce:5f:9d:be:1c:bf:32:f2:95:41:
31:4a:a2:a4:6c:9c:c8:c0:69:4a:90:c0:c4:48:43:
c2:c4:38:92:40:1e:06:52:36:4d:4b:60:25:4b:db:
43:aa:1f:53:0b:45:77:21:8a:0d:af:a8:53:6c:fd:
10:85:5f:05:37:15:fb:cd:e5:1a:ba:80:43:b4:4a:
88:30:e1:91:cd:e4:8a:6f:d1:68:65:01:04:70:15:
d9:0a:a8:95:9a:52:9d:02:ad:4a:9c:03:e9:3d:dc:
61:a6:eb:56:f2:d5:71:a2:39:39:cf:85:21:d3:f8:
2f:b6:9f:ae:0d:22:d1:cc:97:8e:de:69:b9:c5:6e:
96:cb:30:a3:5a:ac:74:7e:30:66:ee:c5:7b:48:cf:
9b:2a:1c:87:00:37:b3:97:4b:1b:dc:48:82:cc:19:
ba:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:25:6B:C3:43:A7:41:F0:AA:4D:7E:73:03:80:41:74:F8:32:F2:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/915a3617-a0cb-3736-a165-b9cd14f137ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.168.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:69:ff:9f:13:f4:cb:f1:30:98:26:79:f8:3b:0b:1d:77:6a:
13:f9:da:1e:ac:7b:2a:5f:e7:7f:3a:d0:73:9e:58:2d:2d:a4:
06:c1:96:e7:4d:18:1f:ea:30:d6:30:df:28:c6:92:74:7a:ac:
bf:7c:5e:9f:79:70:4f:7a:7c:ed:8d:76:25:ad:45:96:23:e1:
82:28:f7:f9:cd:3e:b5:b3:84:7a:ab:62:ea:b2:4a:37:87:9b:
40:ea:28:4b:08:74:d3:f0:ff:63:47:a9:27:5f:44:1b:2d:da:
6c:e6:8d:9f:08:2e:1c:71:70:45:1f:3d:1f:5a:33:86:e8:bb:
ec:23:87:0a:22:00:ed:20:c1:b1:ea:f3:c9:79:04:43:e9:44:
97:21:1c:aa:b0:12:7f:30:b9:81:0b:b6:e3:78:f7:b2:80:ae:
71:c5:d7:1c:16:77:ce:75:7f:c7:d3:66:c6:4e:4a:f4:51:61:
61:55:ea:af:76:a5:19:d1:2c:ab:62:9e:6b:90:df:61:a1:39:
fe:70:1f:ec:ad:eb:cc:98:2a:c7:1b:49:bc:df:ef:ed:c0:c0:
88:83:c5:a9:67:43:58:94:db:3c:a4:35:b8:8c:cc:15:17:38:
ff:12:6c:4e:52:1e:0a:63:ff:92:2f:66:06:12:be:9e:7f:1e:
3d:a9:73:23
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8FV47lBqXjiEqPJeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyNDEyMDAwMFoXDTIyMDkyOTA0MDAwMFowLzEtMCsGA1UEAxMk
MmUzZGQ1MmQtYzc3Yi00NGY2LWE3Y2YtYWJiMzA2NmIwM2JmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmw0UQE3X6FZE8bqNiF5BEOmrhpQFrL75TTLA
M38XkOWcxFb2pEae4Bpw/gdJHFLlaWRXMraOAM0ATcS1fst5lDKstyJiLO/FRs5F
d6OTJ8bD4IWcqKpuUOuQyo2gYc5fnb4cvzLylUExSqKkbJzIwGlKkMDESEPCxDiS
QB4GUjZNS2AlS9tDqh9TC0V3IYoNr6hTbP0QhV8FNxX7zeUauoBDtEqIMOGRzeSK
b9FoZQEEcBXZCqiVmlKdAq1KnAPpPdxhputW8tVxojk5z4Uh0/gvtp+uDSLRzJeO
3mm5xW6WyzCjWqx0fjBm7sV7SM+bKhyHADezl0sb3EiCzBm62wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGsla8NDp0Hwqk1+cwOAQXT4MvKQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTE1YTM2MTctYTBjYi0z
NzM2LWExNjUtYjljZDE0ZjEzN2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAHWn/nxP0y/EwmCZ5+DsLHXdqE/naHqx7Kl/nfzrQc55YLS2kBsGW500Y
H+ow1jDfKMaSdHqsv3xen3lwT3p87Y12Ja1FliPhgij3+c0+tbOEeqti6rJKN4eb
QOooSwh00/D/Y0epJ19EGy3abOaNnwguHHFwRR89H1ozhui77COHCiIA7SDBserz
yXkEQ+lElyEcqrASfzC5gQu243j3soCuccXXHBZ3znV/x9Nmxk5K9FFhYVXqr3al
GdEsq2Kea5DfYaE5/nAf7K3rzJgqxxtJvN/v7cDAiIPFqWdDWJTbPKQ1uIzMFRc4
/xJsTlIeCmP/ki9mBhK+nn8ePalzIw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:08 2025 by rpki-client