Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/add66c22-5cbf-315e-86bf-f2340d612f07.roa
File: add66c22-5cbf-315e-86bf-f2340d612f07.roa (raw, json)
Hash identifier: hGJU+szi/3Or7FDWEQnLjPEj3ZGo9pS7MxF4OtMQJkc=
Subject key identifier: 5D:D0:7C:36:8B:7B:78:89:9D:D1:C6:0C:70:B8:CD:71:07:53:72:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F54012B942E8DBC5600E45F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/add66c22-5cbf-315e-86bf-f2340d612f07.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.238.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:54:01:2b:94:2e:8d:bc:56:00:e4:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=3980b91d-35d7-4271-ad67-9be69c1df89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:3c:a9:56:1a:0f:d2:c5:d7:ee:8f:a1:8d:
40:e4:42:46:c4:7a:5d:78:91:d3:ae:92:41:47:5c:
f7:72:3d:ca:62:ad:2b:f7:36:c3:1c:0c:34:39:de:
bb:9c:6d:af:87:53:37:50:7c:a0:dc:2d:71:9c:92:
9e:27:3b:a2:12:88:fc:20:07:11:6e:a0:52:44:7e:
85:66:19:bd:e1:bd:b1:f4:de:56:65:c2:84:68:1e:
5e:95:2c:de:ea:28:29:63:9c:78:b8:62:57:93:e9:
2c:54:cc:b9:10:ed:52:a3:23:b9:0e:f3:a8:04:11:
1d:a0:1d:1a:0a:7f:ba:fa:11:09:b0:c3:f7:35:83:
dc:4d:8a:04:75:87:ae:ec:40:f3:cf:a5:13:d1:79:
22:d1:1e:7d:7b:07:07:6f:c6:b7:8c:08:e3:5f:04:
a6:7b:d0:fa:4f:ea:ef:c8:bb:0e:63:a4:29:e3:bf:
41:77:e4:06:af:16:82:7e:bc:dc:ac:a8:e5:52:14:
a4:be:b4:b4:fa:10:96:32:36:ef:13:71:af:76:ff:
d8:a8:a7:02:76:6a:b1:8b:53:2d:21:66:84:91:2b:
34:0c:ba:54:8c:b1:9f:9f:84:c0:7a:d8:72:05:92:
6c:88:74:36:c5:e6:15:4f:b2:db:b5:bb:a7:37:f2:
14:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D0:7C:36:8B:7B:78:89:9D:D1:C6:0C:70:B8:CD:71:07:53:72:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/add66c22-5cbf-315e-86bf-f2340d612f07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.238.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:fc:f5:ec:7e:78:ff:e5:1d:7a:69:46:97:38:f7:a6:99:40:
13:79:f0:7d:03:30:d2:05:08:f0:77:17:42:90:62:31:cb:da:
48:03:6b:6b:59:0f:56:09:e0:33:6c:7c:22:19:67:dd:de:ab:
7d:99:21:b8:a5:37:cd:f7:26:9e:e8:f0:52:61:1c:e6:fd:a6:
a5:07:d3:7d:82:b3:33:3c:25:d2:b1:df:9e:75:48:f3:55:34:
60:2a:90:0c:dc:e2:f8:ad:36:f0:4c:63:ae:66:55:84:39:64:
37:de:c5:90:49:6d:6f:f6:9a:55:01:09:57:2c:3a:b1:98:46:
20:98:45:ea:de:69:8e:20:78:b4:57:2f:54:60:3a:8e:30:63:
7f:f7:c2:b4:ef:70:7b:33:a4:b8:e8:45:48:03:44:26:49:b6:
02:62:a8:9c:e0:55:9f:93:80:53:ad:05:f2:a4:76:22:21:1e:
d4:a6:50:8c:f8:c2:7e:ef:f8:44:34:1c:5b:f3:02:55:df:59:
f0:e4:44:f1:ca:86:62:7d:94:13:53:70:41:b7:53:7d:ca:ba:
0d:a7:7e:dc:20:4b:b3:2f:1c:2b:34:63:93:3c:d8:45:cb:94:
fa:06:ef:fb:a3:aa:d6:e3:2f:6f:70:e9:3a:47:b6:5f:46:98:
5a:d6:b3:36
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9UASuULo28VgDkX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMTEyMDAwMFoXDTIyMTAyNzA0MDAwMFowLzEtMCsGA1UEAxMk
Mzk4MGI5MWQtMzVkNy00MjcxLWFkNjctOWJlNjljMWRmODljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2Y8qVYaD9LF1+6PoY1A5EJGxHpdeJHTrpJB
R1z3cj3KYq0r9zbDHAw0Od67nG2vh1M3UHyg3C1xnJKeJzuiEoj8IAcRbqBSRH6F
Zhm94b2x9N5WZcKEaB5elSze6igpY5x4uGJXk+ksVMy5EO1SoyO5DvOoBBEdoB0a
Cn+6+hEJsMP3NYPcTYoEdYeu7EDzz6UT0Xki0R59ewcHb8a3jAjjXwSme9D6T+rv
yLsOY6Qp479Bd+QGrxaCfrzcrKjlUhSkvrS0+hCWMjbvE3Gvdv/YqKcCdmqxi1Mt
IWaEkSs0DLpUjLGfn4TAethyBZJsiHQ2xeYVT7LbtbunN/IUeQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF3QfDaLe3iJndHGDHC4zXEHU3J4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYWRkNjZjMjItNWNiZi0z
MTVlLTg2YmYtZjIzNDBkNjEyZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD+4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFvz17H54/+UdemlGlzj3pplAE3nwfQMw0gUI8HcXQpBiMcvaSANra1kP
VgngM2x8Ihln3d6rfZkhuKU3zfcmnujwUmEc5v2mpQfTfYKzMzwl0rHfnnVI81U0
YCqQDNzi+K028ExjrmZVhDlkN97FkEltb/aaVQEJVyw6sZhGIJhF6t5pjiB4tFcv
VGA6jjBjf/fCtO9wezOkuOhFSANEJkm2AmKonOBVn5OAU60F8qR2IiEe1KZQjPjC
fu/4RDQcW/MCVd9Z8ORE8cqGYn2UE1NwQbdTfcq6Dad+3CBLsy8cKzRjkzzYRcuU
+gbv+6Oq1uMvb3DpOke2X0aYWtazNg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:10:46 2025 by rpki-client