Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca05c898-e3fb-3d6a-80b8-6ac9c66785b8.roa
File: ca05c898-e3fb-3d6a-80b8-6ac9c66785b8.roa (raw, json)
Hash identifier: MHBelz1cRqWtkBzl0h9DEqy8WNbLZaLDYuBNgUPwY44=
Subject key identifier: 33:1A:E2:09:6C:03:32:B4:F5:7E:09:96:52:30:FA:07:33:10:95:E3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7D7483AF38A1D2492F442980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca05c898-e3fb-3d6a-80b8-6ac9c66785b8.roa
Signing time: Thu 07 Apr 2022 04:00:00 +0000
ROA not before: Thu 07 Apr 2022 04:00:00 +0000
ROA not after: Thu 12 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 15.156.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7d:74:83:af:38:a1:d2:49:2f:44:29:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 7 04:00:00 2022 GMT
Not After : May 12 04:00:00 2022 GMT
Subject: CN=28477038-fbe3-4b98-982c-aea5fb652b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:12:09:63:53:05:9d:88:53:7d:f4:3a:7d:
4c:35:c6:13:46:1c:32:f7:48:20:34:f6:e0:34:e5:
91:d0:b0:c4:2b:f9:a1:12:d2:41:78:4e:fd:d1:ec:
6a:23:e9:3e:2c:56:34:37:a0:68:e6:e0:99:0b:cf:
df:33:50:c3:65:40:fa:c1:8c:cd:1b:7b:b9:74:5e:
bd:b4:73:3a:ee:63:c8:b4:22:7e:79:22:29:24:d2:
6a:e2:71:43:6a:85:9b:cb:00:da:eb:04:94:12:84:
2f:18:d5:9a:33:63:24:14:2a:bc:71:8d:7c:b3:3f:
25:94:e7:04:c1:a9:6f:1d:17:6a:c9:8b:5b:16:b3:
70:10:26:26:77:d9:b4:1f:53:81:e5:a4:f3:c9:be:
27:78:15:ed:c4:80:e8:26:87:f6:7f:0e:a0:79:f3:
bf:f4:36:08:84:11:88:c8:26:ce:83:07:d7:a6:a5:
da:42:82:73:7b:a2:c4:e9:9f:24:17:0a:87:eb:0f:
59:0c:2c:45:ff:6c:61:f2:bd:95:aa:dd:31:ce:36:
6b:0d:84:51:5d:f7:b6:67:d7:1d:4a:8e:50:8c:a3:
fe:0b:28:33:9d:3a:91:6a:46:c7:30:42:eb:11:19:
23:00:2f:a4:8b:8f:3e:51:df:4d:9b:94:6f:46:2c:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:1A:E2:09:6C:03:32:B4:F5:7E:09:96:52:30:FA:07:33:10:95:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca05c898-e3fb-3d6a-80b8-6ac9c66785b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.156.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:0b:97:2d:9b:91:ea:d6:69:84:12:95:82:7a:78:1e:13:83:
3d:70:b7:15:d2:16:ed:cc:b6:26:3b:a1:76:14:95:43:92:9f:
23:3b:36:86:13:74:59:f7:d9:5b:2c:00:10:61:e0:ec:b0:6c:
4d:7d:85:50:91:f9:1d:ec:3a:c0:3f:da:e3:be:a3:68:22:80:
50:c7:46:58:b4:7f:51:f4:8e:8c:2c:06:e9:94:99:5b:d5:5d:
2d:d7:42:9f:e3:ca:18:8b:cf:da:b4:06:51:67:a4:33:a8:be:
8b:8f:4d:19:64:dd:2f:5a:25:1c:8e:3d:4c:ac:6c:af:84:4e:
0c:29:c8:73:70:10:25:14:31:20:9a:91:1e:2f:85:a6:67:f9:
8e:84:00:3d:a2:e5:16:77:aa:e2:03:3a:ad:0f:60:cb:6a:d3:
96:cb:14:62:87:04:9f:e9:65:a7:66:52:33:40:bf:4b:7f:65:
1d:3a:01:a6:9f:3b:3c:76:dc:60:6f:d7:f3:67:a6:91:8e:c8:
ad:4c:45:bb:1b:b3:7c:13:c5:1e:3f:f2:5d:35:a3:0a:8a:51:
53:5b:14:24:20:3d:4a:e1:78:15:86:7b:16:21:f0:47:69:d1:
b8:bc:6d:00:52:25:51:7b:5c:cc:c4:36:32:ce:a1:6d:6c:3d:
1c:c2:97:79
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD19dIOvOKHSSS9EKYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwNzA0MDAwMFoXDTIyMDUxMjA0MDAwMFowLzEtMCsGA1UEAxMk
Mjg0NzcwMzgtZmJlMy00Yjk4LTk4MmMtYWVhNWZiNjUyYjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjISCWNTBZ2IU330On1MNcYTRhwy90ggNPbg
NOWR0LDEK/mhEtJBeE790exqI+k+LFY0N6Bo5uCZC8/fM1DDZUD6wYzNG3u5dF69
tHM67mPItCJ+eSIpJNJq4nFDaoWbywDa6wSUEoQvGNWaM2MkFCq8cY18sz8llOcE
walvHRdqyYtbFrNwECYmd9m0H1OB5aTzyb4neBXtxIDoJof2fw6gefO/9DYIhBGI
yCbOgwfXpqXaQoJze6LE6Z8kFwqH6w9ZDCxF/2xh8r2Vqt0xzjZrDYRRXfe2Z9cd
So5QjKP+CygznTqRakbHMELrERkjAC+ki48+Ud9Nm5RvRiyGmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDMa4glsAzK09X4JllIw+gczEJXjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2EwNWM4OTgtZTNmYi0z
ZDZhLTgwYjgtNmFjOWM2Njc4NWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBD5wwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATguXLZuR6tZphBKVgnp4HhODPXC3FdIW7cy2JjuhdhSVQ5KfIzs2hhN0
WffZWywAEGHg7LBsTX2FUJH5Hew6wD/a476jaCKAUMdGWLR/UfSOjCwG6ZSZW9Vd
LddCn+PKGIvP2rQGUWekM6i+i49NGWTdL1olHI49TKxsr4RODCnIc3AQJRQxIJqR
Hi+Fpmf5joQAPaLlFneq4gM6rQ9gy2rTlssUYocEn+llp2ZSM0C/S39lHToBpp87
PHbcYG/X82emkY7IrUxFuxuzfBPFHj/yXTWjCopRU1sUJCA9SuF4FYZ7FiHwR2nR
uLxtAFIlUXtczMQ2Ms6hbWw9HMKXeQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:57 2025 by rpki-client