Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ecaeed2-cb91-3131-9752-13bc3df3b638.roa
File: 9ecaeed2-cb91-3131-9752-13bc3df3b638.roa (raw, json)
Hash identifier: P3m+hxHn4xIDlRHZctzrW6VS2mWKB71apffVHuQzE+Y=
Subject key identifier: 1A:43:20:60:2A:32:DF:DB:1F:0F:BB:CA:01:02:8F:CF:E0:A7:64:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E12F48A746BBBBBBBA5742880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ecaeed2-cb91-3131-9752-13bc3df3b638.roa
Signing time: Sun 29 May 2022 12:00:00 +0000
ROA not before: Sun 29 May 2022 12:00:00 +0000
ROA not after: Mon 04 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.251.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:12:f4:8a:74:6b:bb:bb:bb:a5:74:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 29 12:00:00 2022 GMT
Not After : Jul 4 04:00:00 2022 GMT
Subject: CN=08fb4ad2-faf7-4422-bf89-7196942b35b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:94:06:5f:01:ac:28:ca:d4:6b:de:c0:d7:57:
16:26:dd:01:5f:67:f2:28:38:6e:39:81:05:87:e6:
6e:6f:e4:4e:e5:63:80:53:36:01:0d:3b:0c:86:ec:
32:e5:a2:41:d3:42:8a:84:77:d1:c9:97:54:38:db:
1d:01:56:33:71:2d:f2:ee:84:31:f9:7a:96:37:ec:
6d:e6:4f:3a:e5:3b:3c:a5:16:5a:61:36:95:3e:3f:
52:45:76:c0:f7:ef:65:d7:10:cf:6f:9e:85:44:4f:
79:2b:a7:be:79:4c:ee:66:2d:9f:2a:e4:36:90:d7:
14:22:84:9f:63:13:ec:7d:37:8d:ef:76:43:05:d7:
ca:c4:41:a3:19:fa:b3:48:59:cc:e3:d3:09:b1:81:
ad:59:b6:2d:b3:72:8e:33:f7:41:f3:39:ef:98:04:
7f:70:7b:6e:26:77:e4:ad:52:5d:f5:46:a7:5e:b5:
83:9b:9c:94:26:81:72:5a:0a:36:46:b5:a0:da:77:
c6:42:11:3e:74:85:77:48:d9:64:93:25:8d:c4:c3:
b1:3d:61:14:bd:97:b5:66:80:2a:b0:fb:ec:05:4d:
b6:8d:74:d8:b0:1a:86:09:02:49:02:41:94:11:b3:
f0:ec:4a:25:88:2f:33:c0:42:2a:3e:d3:55:e0:21:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:43:20:60:2A:32:DF:DB:1F:0F:BB:CA:01:02:8F:CF:E0:A7:64:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9ecaeed2-cb91-3131-9752-13bc3df3b638.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.251.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:ed:20:62:73:4c:5a:64:5a:a8:30:40:6d:bc:30:60:9c:aa:
dd:f4:6b:3e:2e:4e:f4:e0:21:ed:88:24:d3:d5:ca:aa:97:63:
a2:de:6c:de:64:15:59:d6:7b:97:36:b1:57:0f:d3:8a:77:9d:
06:21:a2:c1:26:5f:f7:05:08:18:8d:81:46:1f:65:03:c8:6b:
5b:64:ff:ad:31:f3:07:6d:66:c9:b1:d4:ab:49:ba:b6:09:3a:
96:5c:43:76:db:58:19:9c:7b:ed:8f:10:6a:dd:5a:42:8f:19:
ac:04:c8:b6:c7:cb:13:74:a7:9e:39:1f:a6:f1:0e:8c:aa:f6:
20:85:b8:5c:d8:c4:b5:dd:74:13:b5:2f:ec:49:0a:d7:88:b5:
91:f9:ba:ce:32:a2:39:f2:fa:d8:c5:3d:f5:8e:8f:70:de:3e:
ab:7f:cf:33:f3:b8:80:ab:29:dc:5f:8c:ca:a0:d6:3b:a6:42:
65:27:09:43:6f:05:fe:44:1c:8f:52:61:68:87:da:49:e0:12:
31:b7:7a:df:5e:02:b3:9b:93:9e:38:1c:99:49:0f:5d:af:a3:
4b:52:4f:9b:1f:e0:b1:3b:b1:e8:d8:c6:bf:1f:c4:12:db:a6:
a3:71:41:bf:f0:2b:dd:7d:76:50:d5:d6:9b:46:5c:04:6d:7c:
87:f3:c2:0a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4S9Ip0a7u7u6V0KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUyOTEyMDAwMFoXDTIyMDcwNDA0MDAwMFowLzEtMCsGA1UEAxMk
MDhmYjRhZDItZmFmNy00NDIyLWJmODktNzE5Njk0MmIzNWI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJQGXwGsKMrUa97A11cWJt0BX2fyKDhuOYEF
h+Zub+RO5WOAUzYBDTsMhuwy5aJB00KKhHfRyZdUONsdAVYzcS3y7oQx+XqWN+xt
5k865Ts8pRZaYTaVPj9SRXbA9+9l1xDPb56FRE95K6e+eUzuZi2fKuQ2kNcUIoSf
YxPsfTeN73ZDBdfKxEGjGfqzSFnM49MJsYGtWbYts3KOM/dB8znvmAR/cHtuJnfk
rVJd9UanXrWDm5yUJoFyWgo2RrWg2nfGQhE+dIV3SNlkkyWNxMOxPWEUvZe1ZoAq
sPvsBU22jXTYsBqGCQJJAkGUEbPw7EoliC8zwEIqPtNV4CE/KwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBpDIGAqMt/bHw+7ygECj8/gp2Q1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWVjYWVlZDItY2I5MS0z
MTMxLTk3NTItMTNiYzNkZjNiNjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/swVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAYe0gYnNMWmRaqDBAbbwwYJyq3fRrPi5O9OAh7Ygk09XKqpdjot5s3mQV
WdZ7lzaxVw/TinedBiGiwSZf9wUIGI2BRh9lA8hrW2T/rTHzB21mybHUq0m6tgk6
llxDdttYGZx77Y8Qat1aQo8ZrATItsfLE3SnnjkfpvEOjKr2IIW4XNjEtd10E7Uv
7EkK14i1kfm6zjKiOfL62MU99Y6PcN4+q3/PM/O4gKsp3F+MyqDWO6ZCZScJQ28F
/kQcj1JhaIfaSeASMbd6314Cs5uTnjgcmUkPXa+jS1JPmx/gsTux6NjGvx/EEtum
o3FBv/Ar3X12UNXWm0ZcBG18h/PCCg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:37:21 2025 by rpki-client