Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a62e9ba-e96d-303a-8edf-9cc8bc114de2.roa
File: 9a62e9ba-e96d-303a-8edf-9cc8bc114de2.roa (raw, json)
Hash identifier: PSDQb6ENziAZavVnRJyvhZXw60XqyvgHcxXrL8SlTsA=
Subject key identifier: 21:31:DF:7D:E5:3F:EA:F1:5B:16:39:D0:F1:4C:61:34:87:5D:00:8B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC853B0E68EC99C6C3905DE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a62e9ba-e96d-303a-8edf-9cc8bc114de2.roa
Signing time: Wed 02 Nov 2022 12:00:00 +0000
ROA not before: Wed 02 Nov 2022 12:00:00 +0000
ROA not after: Thu 08 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.172.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c8:53:b0:e6:8e:c9:9c:6c:39:05:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 2 12:00:00 2022 GMT
Not After : Dec 8 05:00:00 2022 GMT
Subject: CN=76eda611-bcf3-46f8-a39b-74b3fe3a2240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:36:eb:35:10:b9:af:6c:33:f0:cf:6f:0e:12:
c8:46:65:29:83:19:08:61:79:3a:4e:8a:45:51:78:
d1:59:ec:2d:20:e5:1e:b7:e0:42:45:e5:fb:b3:19:
d0:c6:32:3f:3c:23:f3:82:9f:84:2e:63:1e:1d:ed:
9a:63:02:5f:9b:d8:49:10:0b:f3:82:db:be:b8:4b:
9f:53:f8:7f:09:01:5d:85:1a:de:d8:80:73:d8:58:
fb:01:c3:0c:dc:d8:07:65:a8:ae:f7:37:1a:48:15:
26:67:b6:1e:f9:e2:96:24:48:df:17:01:fc:4a:5c:
86:6d:5f:b2:85:83:5a:f7:6d:c9:d3:be:9a:71:69:
06:e5:48:94:6f:d0:6b:28:70:30:fb:b7:9d:20:8c:
ac:bf:8f:66:7d:27:d6:22:f1:d8:d1:33:24:78:93:
d4:81:5b:12:c5:3d:5c:72:2b:85:b1:1d:54:04:96:
c3:a2:ad:b1:ef:fc:25:26:37:ba:fe:09:10:73:0e:
2f:19:dc:f7:4a:95:92:d7:47:94:c5:7a:38:5d:b9:
7d:40:fd:c9:a9:ec:d9:98:29:d6:2b:21:33:a8:c2:
0d:d6:82:5e:57:88:3b:41:22:35:2a:6e:23:7b:eb:
da:0a:0a:02:ef:2b:0b:96:75:53:f2:e6:a5:e9:f8:
c8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:31:DF:7D:E5:3F:EA:F1:5B:16:39:D0:F1:4C:61:34:87:5D:00:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9a62e9ba-e96d-303a-8edf-9cc8bc114de2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.172.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:11:79:5e:d0:72:85:f6:50:5e:f3:fd:44:63:78:66:92:3f:
ec:2a:b6:1a:96:36:df:71:df:04:7f:53:ab:ba:56:99:5e:ce:
f1:90:fd:db:f5:a1:5b:5c:5f:10:5e:fe:0d:fc:49:3f:34:15:
ec:d4:b9:17:cf:33:cb:cb:9a:b7:ff:6f:7b:7e:0b:78:97:50:
a3:38:a8:f7:69:9c:63:c4:8a:76:36:6d:ea:c7:2e:1f:78:f9:
36:19:e9:81:b0:93:2f:3e:c5:b1:e1:81:31:b8:c5:01:9c:11:
75:05:4b:6a:be:70:3d:d1:1c:b3:bc:aa:59:d4:5e:f4:e9:17:
87:c9:ff:12:1d:12:66:40:52:0e:bc:52:c5:0a:70:90:94:ae:
c8:81:34:4a:3e:af:5a:ae:c3:20:ea:b3:05:e6:bb:72:92:c1:
64:91:fe:57:c4:9d:e5:39:5a:68:4f:b5:f8:7b:09:b2:28:b1:
e2:fe:36:2f:43:e9:2a:c1:db:52:e2:78:6a:d6:87:eb:d7:bd:
00:87:e7:a5:c7:ca:07:43:dc:c1:df:52:49:ce:8b:24:63:fc:
ea:b1:c7:e9:ac:6c:c1:78:5c:10:4e:12:64:31:f2:78:b6:5a:
09:d0:a2:71:16:42:f9:71:36:87:1f:73:e2:00:6a:b1:8e:0b:
ab:93:bf:20
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/IU7DmjsmcbDkF3gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMjEyMDAwMFoXDTIyMTIwODA1MDAwMFowLzEtMCsGA1UEAxMk
NzZlZGE2MTEtYmNmMy00NmY4LWEzOWItNzRiM2ZlM2EyMjQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjbrNRC5r2wz8M9vDhLIRmUpgxkIYXk6TopF
UXjRWewtIOUet+BCReX7sxnQxjI/PCPzgp+ELmMeHe2aYwJfm9hJEAvzgtu+uEuf
U/h/CQFdhRre2IBz2Fj7AcMM3NgHZaiu9zcaSBUmZ7Ye+eKWJEjfFwH8SlyGbV+y
hYNa923J076acWkG5UiUb9BrKHAw+7edIIysv49mfSfWIvHY0TMkeJPUgVsSxT1c
ciuFsR1UBJbDoq2x7/wlJje6/gkQcw4vGdz3SpWS10eUxXo4Xbl9QP3JqezZmCnW
KyEzqMIN1oJeV4g7QSI1Km4je+vaCgoC7ysLlnVT8ual6fjI7wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCEx333lP+rxWxY50PFMYTSHXQCLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWE2MmU5YmEtZTk2ZC0z
MDNhLThlZGYtOWNjOGJjMTE0ZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD6wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAUhF5XtByhfZQXvP9RGN4ZpI/7Cq2GpY233HfBH9Tq7pWmV7O8ZD92/Wh
W1xfEF7+DfxJPzQV7NS5F88zy8uat/9ve34LeJdQozio92mcY8SKdjZt6scuH3j5
NhnpgbCTLz7FseGBMbjFAZwRdQVLar5wPdEcs7yqWdRe9OkXh8n/Eh0SZkBSDrxS
xQpwkJSuyIE0Sj6vWq7DIOqzBea7cpLBZJH+V8Sd5TlaaE+1+HsJsiix4v42L0Pp
KsHbUuJ4ataH69e9AIfnpcfKB0Pcwd9SSc6LJGP86rHH6axswXhcEE4SZDHyeLZa
CdCicRZC+XE2hx9z4gBqsY4Lq5O/IA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:21 2025 by rpki-client