Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bffe0591-f524-3ec6-921e-e0011fdfbd33.roa
File: bffe0591-f524-3ec6-921e-e0011fdfbd33.roa (raw, json)
Hash identifier: fUi6g6UZmv/lTwJrkKejgOVdqufKUTmAkukrrOlOmdU=
Subject key identifier: F1:FF:1E:FF:C1:26:C4:B9:04:86:5F:1D:98:08:7E:50:23:37:D0:D4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840169559FB75C675322363A200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bffe0591-f524-3ec6-921e-e0011fdfbd33.roa
Signing time: Wed 30 Nov 2022 12:00:00 +0000
ROA not before: Wed 30 Nov 2022 12:00:00 +0000
ROA not after: Thu 05 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.192.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:16:95:59:fb:75:c6:75:32:23:63:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 30 12:00:00 2022 GMT
Not After : Jan 5 05:00:00 2023 GMT
Subject: CN=6fddfb3e-a3ae-4cce-890f-a05fa096cc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:a1:0f:ca:5f:f7:53:7b:8e:79:27:99:2f:
54:3c:b7:84:c6:70:c5:9c:ed:73:af:91:64:18:1d:
9b:02:19:1a:17:f2:8a:24:f9:f2:81:28:e3:6e:69:
8b:b0:99:a0:e5:fa:7e:b3:f3:f7:ad:cf:18:d9:02:
32:89:19:d3:3a:71:74:f8:11:54:fe:74:44:f8:70:
86:6c:e1:22:b4:3d:4a:ac:4e:22:95:34:99:94:2e:
fb:0d:6a:cb:25:47:10:e4:77:69:5c:60:6a:08:8c:
16:fe:6c:58:d8:30:38:b1:94:8a:6d:d5:f9:c5:ed:
f3:44:f7:ed:8a:c8:0f:0c:35:1b:8a:ee:48:9c:69:
b6:b6:3d:ad:cc:26:18:28:c3:cd:4d:2a:e0:50:b1:
b7:69:ab:eb:b2:25:2c:35:41:23:d9:af:e0:63:0d:
17:28:3d:c3:1b:80:79:aa:98:df:8c:f1:3e:e4:0e:
03:94:67:aa:10:74:f0:92:9d:e6:c3:de:cf:3f:b6:
1b:e4:bd:7a:25:2b:d2:de:81:83:c0:c1:ae:e6:91:
e7:ac:2c:57:65:45:46:4b:d5:4f:a9:ae:3e:4c:d1:
f6:d7:cc:9c:64:a6:ad:1b:ba:5f:84:5e:d5:26:0e:
b2:02:eb:be:24:77:d9:49:af:09:86:26:51:b3:54:
b2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FF:1E:FF:C1:26:C4:B9:04:86:5F:1D:98:08:7E:50:23:37:D0:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bffe0591-f524-3ec6-921e-e0011fdfbd33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.192.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:82:c6:48:3c:d1:d3:a5:e2:45:a2:c5:31:09:3e:ee:3d:e0:
2d:77:93:6b:1b:f6:1f:9d:69:3d:b1:0a:52:52:37:e9:0e:68:
cb:8b:ab:5a:65:f8:01:7e:68:4f:78:b6:9c:9c:d4:99:55:7b:
b9:17:e4:cc:f5:92:f5:fa:4a:9d:e5:85:01:c5:81:94:02:e0:
ff:cf:ce:84:46:5c:94:c4:a7:e1:68:4f:d5:61:95:de:b4:77:
cb:9e:f1:09:cf:f1:19:84:55:9d:5c:1c:b9:32:64:b0:9f:a0:
3a:30:6c:b9:58:a5:f5:9d:37:fa:cb:8d:d1:a4:a1:9e:7e:e7:
2d:8b:83:85:c0:a2:cf:6a:23:2a:0d:8c:b7:20:13:e0:0e:b1:
fa:60:cd:85:0b:c0:5e:5f:c2:2c:08:5c:71:e3:e3:cc:d8:49:
54:e9:48:d5:1e:71:0a:2e:6e:f0:05:0d:94:01:2a:55:ee:59:
44:12:e2:c6:db:43:ad:87:b5:07:7a:12:ac:1d:ad:31:56:d6:
a1:f5:46:36:e9:ca:28:c5:f6:4a:ec:76:3b:1e:44:4e:aa:7e:
02:7a:a8:cd:37:fa:34:57:6c:e4:d1:d9:38:33:75:f1:2f:c1:
e4:dc:21:2d:17:9b:f9:3d:97:d1:fe:59:20:31:bf:12:a2:f5:
4f:e3:64:a1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAWlVn7dcZ1MiNjogAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEzMDEyMDAwMFoXDTIzMDEwNTA1MDAwMFowLzEtMCsGA1UEAxMk
NmZkZGZiM2UtYTNhZS00Y2NlLTg5MGYtYTA1ZmEwOTZjYzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mehD8pf91N7jnknmS9UPLeExnDFnO1zr5Fk
GB2bAhkaF/KKJPnygSjjbmmLsJmg5fp+s/P3rc8Y2QIyiRnTOnF0+BFU/nRE+HCG
bOEitD1KrE4ilTSZlC77DWrLJUcQ5HdpXGBqCIwW/mxY2DA4sZSKbdX5xe3zRPft
isgPDDUbiu5InGm2tj2tzCYYKMPNTSrgULG3aavrsiUsNUEj2a/gYw0XKD3DG4B5
qpjfjPE+5A4DlGeqEHTwkp3mw97PP7Yb5L16JSvS3oGDwMGu5pHnrCxXZUVGS9VP
qa4+TNH218ycZKatG7pfhF7VJg6yAuu+JHfZSa8JhiZRs1Sy4wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPH/Hv/BJsS5BIZfHZgIflAjN9DUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmZmZTA1OTEtZjUyNC0z
ZWM2LTkyMWUtZTAwMTFmZGZiZDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgYLGSDzR06XiRaLFMQk+7j3gLXeTaxv2H51pPbEKUlI36Q5oy4urWmX4
AX5oT3i2nJzUmVV7uRfkzPWS9fpKneWFAcWBlALg/8/OhEZclMSn4WhP1WGV3rR3
y57xCc/xGYRVnVwcuTJksJ+gOjBsuVil9Z03+suN0aShnn7nLYuDhcCiz2ojKg2M
tyAT4A6x+mDNhQvAXl/CLAhccePjzNhJVOlI1R5xCi5u8AUNlAEqVe5ZRBLixttD
rYe1B3oSrB2tMVbWofVGNunKKMX2Sux2Ox5ETqp+AnqozTf6NFds5NHZODN18S/B
5NwhLReb+T2X0f5ZIDG/EqL1T+NkoQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:54 2025 by rpki-client