Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9ae96eb-58f2-3c84-beaa-36144fe42f34.roa
File: b9ae96eb-58f2-3c84-beaa-36144fe42f34.roa (raw, json)
Hash identifier: ox8NjEqt/inqxkGHrJTbHk0e1ByQnbDw8ttnyDqehUE=
Subject key identifier: ED:6E:A9:66:D4:9A:C9:52:A3:AF:07:D6:85:5A:A4:B6:DA:F6:71:20
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F533FC36C0F90FB18B08E0200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9ae96eb-58f2-3c84-beaa-36144fe42f34.roa
Signing time: Wed 21 Sep 2022 12:00:00 +0000
ROA not before: Wed 21 Sep 2022 12:00:00 +0000
ROA not after: Thu 27 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.200.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:53:3f:c3:6c:0f:90:fb:18:b0:8e:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 21 12:00:00 2022 GMT
Not After : Oct 27 04:00:00 2022 GMT
Subject: CN=48e7fe37-9fbf-4fdf-becc-b11b3c751185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c1:7f:80:50:7e:9f:3f:11:3d:90:3c:d4:24:
c1:e6:3c:85:fb:89:1f:87:e3:07:84:8f:53:eb:0d:
5e:cf:a6:e1:a7:29:06:f5:bb:22:f5:f6:66:3b:f9:
57:50:98:d0:13:8c:e5:eb:f0:a3:7c:e5:8b:35:3d:
74:8a:f6:f9:51:9b:05:61:5a:85:41:bb:9b:04:4c:
cf:33:1e:2c:9e:d4:45:e8:32:f8:31:2e:46:67:cc:
40:69:2d:2d:09:84:5f:46:38:42:5d:58:4d:3b:8b:
e0:fb:c6:e3:80:36:fe:d7:48:99:c5:8b:e2:bc:1d:
fc:17:fd:79:17:b1:4a:42:85:d0:c5:43:9a:c7:56:
ab:0b:7f:a3:69:32:85:3b:92:42:26:6c:f9:5a:b8:
bd:3f:71:3f:eb:32:3a:a6:9c:a8:13:9c:ec:ca:56:
41:39:72:7d:5f:ed:4b:04:21:53:77:70:71:e9:9b:
c5:98:e6:9c:50:6a:e0:8f:37:c2:16:7f:00:24:92:
c9:2d:01:5e:88:1f:e0:7a:ed:9f:f7:44:f4:24:ca:
77:80:74:ee:0c:c3:db:cf:cc:8c:87:37:f6:24:cf:
ef:fa:9f:71:15:53:2e:ba:a6:0b:5b:f3:dc:f5:f1:
f2:db:f0:4b:50:35:b1:7b:8d:80:d8:78:6e:e5:a3:
6f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:6E:A9:66:D4:9A:C9:52:A3:AF:07:D6:85:5A:A4:B6:DA:F6:71:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9ae96eb-58f2-3c84-beaa-36144fe42f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.200.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:f3:58:55:ce:bb:65:ac:72:c3:83:08:a7:66:cf:8a:8a:df:
a9:f5:e6:c1:f7:19:95:4b:01:1c:b2:c4:ec:16:2c:e1:40:8c:
2e:0f:2a:d2:67:c6:35:7c:ce:d5:b1:84:6f:91:43:b6:ba:d2:
ae:56:0d:54:af:f8:7c:fe:a3:3f:79:35:4f:0c:e9:e1:24:d2:
17:8d:5d:f7:76:16:b0:50:1c:6b:9f:95:5c:85:dd:8e:08:a5:
ae:ed:09:df:f6:24:5f:0d:a0:b4:82:5b:6b:a2:6c:36:54:da:
45:f1:f8:66:ff:b2:be:13:54:be:77:a0:d8:7a:0f:49:c0:38:
c5:dc:b0:a4:f1:51:37:8e:af:58:dd:7f:be:d9:ac:3d:77:16:
59:e0:98:b2:bb:2e:9c:bf:d4:a7:7b:0b:69:4e:f6:65:38:fc:
2e:2a:a9:cc:96:9a:1f:d7:91:31:ad:be:cf:fa:b6:7d:14:76:
e4:da:0b:42:ea:f7:31:5f:ec:f5:6c:ca:5d:32:45:1f:f6:80:
70:8c:a9:fd:a8:6f:09:a3:8a:b7:78:c9:07:0f:e7:28:63:b2:
ea:4d:43:9f:37:c8:10:89:cd:8d:7a:52:73:5d:69:2b:a2:0a:
25:72:d6:a8:42:ef:4c:7f:b1:19:26:c2:38:01:d5:6d:c9:73:
90:be:d3:8a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD9TP8NsD5D7GLCOAgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyMTEyMDAwMFoXDTIyMTAyNzA0MDAwMFowLzEtMCsGA1UEAxMk
NDhlN2ZlMzctOWZiZi00ZmRmLWJlY2MtYjExYjNjNzUxMTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58F/gFB+nz8RPZA81CTB5jyF+4kfh+MHhI9T
6w1ez6bhpykG9bsi9fZmO/lXUJjQE4zl6/CjfOWLNT10ivb5UZsFYVqFQbubBEzP
Mx4sntRF6DL4MS5GZ8xAaS0tCYRfRjhCXVhNO4vg+8bjgDb+10iZxYvivB38F/15
F7FKQoXQxUOax1arC3+jaTKFO5JCJmz5Wri9P3E/6zI6ppyoE5zsylZBOXJ9X+1L
BCFTd3Bx6ZvFmOacUGrgjzfCFn8AJJLJLQFeiB/geu2f90T0JMp3gHTuDMPbz8yM
hzf2JM/v+p9xFVMuuqYLW/Pc9fHy2/BLUDWxe42A2Hhu5aNv6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFO1uqWbUmslSo68H1oVapLba9nEgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjlhZTk2ZWItNThmMi0z
Yzg0LWJlYWEtMzYxNDRmZTQyZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8gwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGfNYVc67Zaxyw4MIp2bPiorfqfXmwfcZlUsBHLLE7BYs4UCMLg8q0mfG
NXzO1bGEb5FDtrrSrlYNVK/4fP6jP3k1Twzp4STSF41d93YWsFAca5+VXIXdjgil
ru0J3/YkXw2gtIJba6JsNlTaRfH4Zv+yvhNUvneg2HoPScA4xdywpPFRN46vWN1/
vtmsPXcWWeCYsrsunL/Up3sLaU72ZTj8LiqpzJaaH9eRMa2+z/q2fRR25NoLQur3
MV/s9WzKXTJFH/aAcIyp/ahvCaOKt3jJBw/nKGOy6k1DnzfIEInNjXpSc11pK6IK
JXLWqELvTH+xGSbCOAHVbclzkL7Tig==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:06 2025 by rpki-client