Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a120b539-4824-34d7-b7f2-4cc6f1040597.roa
File: a120b539-4824-34d7-b7f2-4cc6f1040597.roa (raw, json)
Hash identifier: +lXezshRYqf0trWvO5ptMDFKqtXM0IkYWGOBgrw4Tcc=
Subject key identifier: DD:00:75:9B:A6:DF:87:77:5B:F8:E6:26:2C:98:2F:3B:15:09:F3:73
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E68BE217CFF0D71E03271D680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a120b539-4824-34d7-b7f2-4cc6f1040597.roa
Signing time: Wed 29 Jun 2022 12:00:00 +0000
ROA not before: Wed 29 Jun 2022 12:00:00 +0000
ROA not after: Thu 04 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.222.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:68:be:21:7c:ff:0d:71:e0:32:71:d6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 29 12:00:00 2022 GMT
Not After : Aug 4 04:00:00 2022 GMT
Subject: CN=09f976cd-1613-4faf-a281-c6bf66900387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e2:5b:54:d3:d7:c2:b4:d5:b8:c4:ba:00:32:
31:42:7f:3b:70:2a:dd:e1:20:2b:9b:ab:a2:5f:8a:
9e:bb:18:98:72:83:3e:8a:62:9e:e0:f0:60:63:1e:
8f:7a:ce:ea:ca:01:57:b5:57:3b:d7:cd:72:b7:df:
11:bd:5f:cd:a3:c1:8e:cb:3d:af:4d:b4:4e:39:34:
46:ef:f6:9c:c3:c1:41:64:4a:4d:6e:6b:50:06:77:
48:51:e2:cf:11:fb:53:38:3c:7b:60:26:36:49:12:
2f:52:10:ad:39:24:81:f2:ab:ab:37:79:fd:95:27:
09:ba:67:ce:f7:2f:78:1b:22:ef:40:c6:b9:a6:d8:
20:77:b0:73:92:d4:f8:c8:8a:84:54:06:09:84:28:
82:04:96:42:14:5c:d7:40:b3:f5:0d:1f:2d:84:81:
46:79:5d:5e:0f:63:c3:f9:4e:c7:a2:71:fc:1f:e2:
53:f5:22:05:22:a4:1c:34:a3:c5:4e:21:74:6e:92:
76:eb:78:06:25:c1:8e:62:2d:a7:fd:84:64:e8:82:
e3:a4:09:f7:b0:3a:bb:77:ed:22:12:6c:3c:56:01:
35:2d:2e:99:4b:ce:00:85:91:64:6e:c7:ed:f0:4e:
2d:8d:2d:43:fb:cc:67:8b:8b:b4:49:bb:28:91:94:
b0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:00:75:9B:A6:DF:87:77:5B:F8:E6:26:2C:98:2F:3B:15:09:F3:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a120b539-4824-34d7-b7f2-4cc6f1040597.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.222.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b7:74:6d:d3:51:c8:2f:88:e3:fc:f9:89:ea:3d:f9:97:63:
58:79:36:7e:9f:94:ba:7f:0a:61:2e:1e:bb:dc:f0:5e:7f:81:
67:43:31:2a:49:9d:0b:cc:45:93:34:c9:26:1a:28:39:d1:32:
9f:ca:e1:4f:df:5e:a6:0b:17:26:55:bb:77:ec:37:82:12:a6:
2a:c7:38:99:87:64:04:0e:e2:c5:31:50:33:a1:56:79:9d:c5:
c4:70:0d:46:42:e9:3d:85:de:f0:3b:e1:34:77:ae:e9:fb:bf:
89:28:86:24:89:5c:03:6b:6f:c4:b0:c2:ee:97:be:11:28:e6:
2b:57:3b:5b:52:bb:34:a0:54:47:a8:a9:99:dd:db:37:c1:9c:
e7:73:1d:70:bd:8a:35:d7:ea:ae:f8:6d:ef:41:81:73:3d:11:
2e:e7:f4:8e:47:f6:e5:98:7d:3a:37:6f:ce:2c:fc:a0:55:13:
eb:3b:d5:b3:67:91:b2:94:57:85:89:fa:88:94:56:b2:64:a2:
25:e4:25:ec:e0:40:65:53:c4:a5:e3:2a:ad:e0:e6:ba:03:d2:
a0:a2:9e:f3:50:6e:2a:9c:2e:8c:66:47:60:f1:6f:2a:3d:ac:
2d:9f:cc:ed:29:8f:4e:4b:1b:5a:f5:0c:1c:43:61:c8:66:ad:
60:76:f6:43
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5oviF8/w1x4DJx1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYyOTEyMDAwMFoXDTIyMDgwNDA0MDAwMFowLzEtMCsGA1UEAxMk
MDlmOTc2Y2QtMTYxMy00ZmFmLWEyODEtYzZiZjY2OTAwMzg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+JbVNPXwrTVuMS6ADIxQn87cCrd4SArm6ui
X4qeuxiYcoM+imKe4PBgYx6Pes7qygFXtVc7181yt98RvV/No8GOyz2vTbROOTRG
7/acw8FBZEpNbmtQBndIUeLPEftTODx7YCY2SRIvUhCtOSSB8qurN3n9lScJumfO
9y94GyLvQMa5ptggd7BzktT4yIqEVAYJhCiCBJZCFFzXQLP1DR8thIFGeV1eD2PD
+U7HonH8H+JT9SIFIqQcNKPFTiF0bpJ263gGJcGOYi2n/YRk6ILjpAn3sDq7d+0i
Emw8VgE1LS6ZS84AhZFkbsft8E4tjS1D+8xni4u0SbsokZSwtQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN0AdZum34d3W/jmJiyYLzsVCfNzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTEyMGI1MzktNDgyNC0z
NGQ3LWI3ZjItNGNjNmYxMDQwNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBD94wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFrd0bdNRyC+I4/z5ieo9+ZdjWHk2fp+Uun8KYS4eu9zwXn+BZ0MxKkmd
C8xFkzTJJhooOdEyn8rhT99epgsXJlW7d+w3ghKmKsc4mYdkBA7ixTFQM6FWeZ3F
xHANRkLpPYXe8DvhNHeu6fu/iSiGJIlcA2tvxLDC7pe+ESjmK1c7W1K7NKBUR6ip
md3bN8Gc53MdcL2KNdfqrvht70GBcz0RLuf0jkf25Zh9Ojdvziz8oFUT6zvVs2eR
spRXhYn6iJRWsmSiJeQl7OBAZVPEpeMqreDmugPSoKKe81BuKpwujGZHYPFvKj2s
LZ/M7SmPTksbWvUMHENhyGatYHb2Qw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:11 2025 by rpki-client