Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94e7f20f-477b-3a47-9bd4-ab3136948ec2.roa
File: 94e7f20f-477b-3a47-9bd4-ab3136948ec2.roa (raw, json)
Hash identifier: PjldEgbcn29QkBzyyG3XbYAKRFULVwwWL/5dmJiy89k=
Subject key identifier: 98:11:8C:23:74:66:47:D4:5D:BE:58:90:23:C5:C4:33:B3:F5:29:5E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FEF175E57FB487B9BC209BF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94e7f20f-477b-3a47-9bd4-ab3136948ec2.roa
Signing time: Wed 16 Nov 2022 12:00:00 +0000
ROA not before: Wed 16 Nov 2022 12:00:00 +0000
ROA not after: Thu 22 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.228.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ef:17:5e:57:fb:48:7b:9b:c2:09:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 16 12:00:00 2022 GMT
Not After : Dec 22 05:00:00 2022 GMT
Subject: CN=b6444507-f1aa-413d-9ab3-0a0e085d5a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:79:24:1a:9f:bc:49:e7:28:b1:6e:41:ba:
bf:c6:80:a9:83:5d:4b:55:a0:39:86:cd:ae:3c:6f:
7a:e8:2c:8f:52:51:6c:8b:fe:64:05:dc:42:82:a8:
f8:54:e3:5b:8b:df:09:66:f1:71:ce:dd:96:76:bb:
ef:95:ac:a2:5a:d4:78:77:c3:1f:40:19:39:79:b9:
01:ba:78:42:8d:dc:73:4d:87:42:14:64:3a:00:6e:
2b:6e:e7:99:6f:a8:88:3d:cd:59:d1:d0:9a:fd:90:
3a:34:cc:62:1f:9b:76:d2:b2:52:b2:26:01:74:9b:
0b:28:7a:83:c0:31:6a:f4:00:db:d7:3a:32:b8:9f:
cd:30:61:a0:83:ed:0c:e9:46:10:98:32:f2:8a:64:
5a:f9:a4:03:34:37:1a:2c:ee:b8:47:67:da:b9:cb:
65:00:43:fe:54:7a:36:84:1d:80:46:d6:09:64:cb:
c9:01:a9:d0:01:a0:41:c5:2b:3f:61:3c:1d:6a:8c:
bd:12:dc:07:ea:94:57:69:07:d2:48:81:c7:02:ba:
94:e5:5c:04:e3:9b:75:85:36:f3:78:e5:7b:18:0b:
a3:41:fd:ca:0f:e7:1b:8e:4a:61:82:ed:8b:44:a3:
46:1f:70:d0:42:17:7b:d1:e7:e3:b5:c1:09:87:70:
fb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:11:8C:23:74:66:47:D4:5D:BE:58:90:23:C5:C4:33:B3:F5:29:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/94e7f20f-477b-3a47-9bd4-ab3136948ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.228.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:cf:a2:5f:87:75:4d:f6:a1:75:59:b0:4e:a7:d7:ba:86:c6:
e1:0f:7f:f5:39:56:76:d5:7f:61:e8:74:8e:ce:8a:ba:49:8e:
a4:94:07:f7:cc:10:9f:c2:e1:0f:ec:c2:88:80:78:32:e5:be:
6b:e4:88:b0:1a:a4:a9:49:09:57:2e:1f:d5:c4:eb:bb:0d:9a:
f0:50:8e:bb:4b:77:39:b9:a0:70:26:40:47:30:fa:ba:53:02:
0f:81:10:5b:3a:72:00:91:28:37:1b:b3:a6:e1:c6:55:bb:89:
6e:64:63:b7:b4:71:b5:03:31:51:8d:e6:ba:0c:2b:20:55:1a:
39:aa:3d:39:72:db:3d:1b:35:9f:fc:3a:14:2b:13:20:4a:5c:
a4:be:7c:4d:d1:74:2d:11:07:52:28:29:51:5b:aa:a4:39:26:
df:0f:e7:a5:9d:ce:58:c8:82:fa:4d:be:33:cd:7a:bf:86:7d:
25:7d:a6:a8:1d:ac:a8:84:12:81:34:69:31:c6:94:6a:50:02:
a4:81:9b:d0:1a:03:c6:7e:d7:8f:fb:7e:1d:9c:18:b8:6e:82:
3a:3c:4b:a6:35:32:e2:30:19:6e:60:3f:87:ec:6b:dc:b1:ff:
fb:d6:35:04:ed:a7:f4:b0:5e:f3:8f:6a:5e:4b:3b:08:a0:e5:
d3:28:14:f5
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/vF15X+0h7m8IJvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExNjEyMDAwMFoXDTIyMTIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
YjY0NDQ1MDctZjFhYS00MTNkLTlhYjMtMGEwZTA4NWQ1YTgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpB5JBqfvEnnKLFuQbq/xoCpg11LVaA5hs2u
PG966CyPUlFsi/5kBdxCgqj4VONbi98JZvFxzt2WdrvvlayiWtR4d8MfQBk5ebkB
unhCjdxzTYdCFGQ6AG4rbueZb6iIPc1Z0dCa/ZA6NMxiH5t20rJSsiYBdJsLKHqD
wDFq9ADb1zoyuJ/NMGGgg+0M6UYQmDLyimRa+aQDNDcaLO64R2fauctlAEP+VHo2
hB2ARtYJZMvJAanQAaBBxSs/YTwdaoy9EtwH6pRXaQfSSIHHArqU5VwE45t1hTbz
eOV7GAujQf3KD+cbjkphgu2LRKNGH3DQQhd70efjtcEJh3D77wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJgRjCN0ZkfUXb5YkCPFxDOz9SleMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOTRlN2YyMGYtNDc3Yi0z
YTQ3LTliZDQtYWIzMTM2OTQ4ZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBD+QwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAis+iX4d1TfahdVmwTqfXuobG4Q9/9TlWdtV/Yeh0js6KukmOpJQH98wQ
n8LhD+zCiIB4MuW+a+SIsBqkqUkJVy4f1cTruw2a8FCOu0t3ObmgcCZARzD6ulMC
D4EQWzpyAJEoNxuzpuHGVbuJbmRjt7RxtQMxUY3mugwrIFUaOao9OXLbPRs1n/w6
FCsTIEpcpL58TdF0LREHUigpUVuqpDkm3w/npZ3OWMiC+k2+M816v4Z9JX2mqB2s
qIQSgTRpMcaUalACpIGb0BoDxn7Xj/t+HZwYuG6COjxLpjUy4jAZbmA/h+xr3LH/
+9Y1BO2n9LBe849qXks7CKDl0ygU9Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 04:33:57 2025 by rpki-client