Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb080d7a-5be1-3c6b-9a1a-3d51a6c051e1.roa
File: cb080d7a-5be1-3c6b-9a1a-3d51a6c051e1.roa (raw, json)
Hash identifier: NIvAbvhptRslLyh6GzLwRsspP9Fv11HsnERX8Emh1Ek=
Subject key identifier: B2:0A:79:2D:A0:83:29:26:61:1B:FC:6D:5B:00:E8:C9:9B:30:23:4E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EC942DA40E461FE2016894600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb080d7a-5be1-3c6b-9a1a-3d51a6c051e1.roa
Signing time: Tue 02 Aug 2022 12:00:00 +0000
ROA not before: Tue 02 Aug 2022 12:00:00 +0000
ROA not after: Wed 07 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.179.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c9:42:da:40:e4:61:fe:20:16:89:46:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 2 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2022 GMT
Subject: CN=20c573bd-e3ea-45de-953c-57aa2a65dc69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:73:03:9d:a2:3b:07:a2:13:b5:17:4e:b3:b5:
55:57:36:75:60:1d:25:74:ce:99:d5:89:74:af:4a:
32:e5:e4:7d:4c:a7:bb:2c:cf:71:3c:8a:ee:88:ad:
98:98:18:66:67:f4:93:98:3c:14:fc:29:cd:1e:19:
21:1d:a5:9b:4f:cd:ba:ea:34:be:89:37:11:8e:b9:
54:2a:0c:23:1c:cd:b5:1e:20:ae:54:95:ef:f9:19:
30:11:36:4b:c7:88:6a:dc:40:59:0b:de:fd:7a:94:
c4:f8:11:2a:74:ad:e6:1e:a5:a1:10:0d:ba:24:d1:
15:60:0a:56:2d:fc:58:cb:fc:f8:85:b5:9f:04:99:
49:9e:d2:31:23:e4:2f:63:0f:e8:4c:05:ea:7e:0e:
95:0a:b0:52:44:83:47:7b:19:7e:e0:43:46:1a:40:
c0:bc:73:ee:0e:9b:f4:57:52:28:04:78:d5:e7:e2:
4b:79:57:8b:cd:fa:3d:b7:bb:b5:2b:47:1b:6c:63:
87:6a:54:b5:de:33:b7:76:85:ac:01:92:f5:9a:3f:
9a:11:ff:58:fe:46:b7:a2:5a:91:a2:57:a2:7f:31:
38:55:3e:9a:d5:66:9d:e4:81:a9:2f:2f:d1:8c:2c:
9c:b8:22:cd:45:f6:88:db:1e:34:b1:49:a7:40:4f:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0A:79:2D:A0:83:29:26:61:1B:FC:6D:5B:00:E8:C9:9B:30:23:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb080d7a-5be1-3c6b-9a1a-3d51a6c051e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.179.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:05:99:19:6c:90:94:ea:71:a2:06:ef:9e:85:68:f3:ae:8e:
38:33:5a:64:d9:2f:14:f4:bf:dd:7a:45:ba:a0:13:bb:61:73:
70:66:7a:e4:76:b5:92:30:8b:e7:76:b4:13:0b:9c:35:6a:8c:
ae:50:44:c4:30:88:0d:70:c8:92:74:6c:27:49:63:7b:0e:be:
cc:22:6a:54:81:0a:fc:78:7d:82:17:24:7b:61:bc:08:b3:5c:
97:f4:58:0e:26:5f:56:cd:b0:83:77:db:7d:b9:d0:87:85:e9:
b4:71:4f:11:42:60:06:ab:8c:6d:b8:f3:f7:b8:29:20:34:12:
d8:60:40:8c:08:d2:e2:85:97:3c:30:b5:37:69:f5:60:e8:d4:
f6:08:b6:36:9e:f0:a8:71:2c:99:4b:c5:3c:5c:02:13:b7:9e:
b0:a0:c1:ed:22:2f:0d:40:af:66:b9:bb:cc:b0:39:42:ca:ed:
9a:90:29:22:c5:80:5e:dd:0e:b7:40:a4:e0:be:39:80:2b:fa:
26:6c:d6:89:22:35:5c:93:96:6f:f2:66:a2:a2:28:bf:98:65:
09:ff:4d:bd:7b:44:06:00:da:12:23:6a:21:c7:f7:de:c8:c6:
be:8e:03:36:20:ea:8b:1e:76:45:b3:79:5b:87:05:67:96:04:
4d:7d:9d:e9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7JQtpA5GH+IBaJRgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgwMjEyMDAwMFoXDTIyMDkwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MjBjNTczYmQtZTNlYS00NWRlLTk1M2MtNTdhYTJhNjVkYzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHMDnaI7B6ITtRdOs7VVVzZ1YB0ldM6Z1Yl0
r0oy5eR9TKe7LM9xPIruiK2YmBhmZ/STmDwU/CnNHhkhHaWbT8266jS+iTcRjrlU
KgwjHM21HiCuVJXv+RkwETZLx4hq3EBZC979epTE+BEqdK3mHqWhEA26JNEVYApW
LfxYy/z4hbWfBJlJntIxI+QvYw/oTAXqfg6VCrBSRINHexl+4ENGGkDAvHPuDpv0
V1IoBHjV5+JLeVeLzfo9t7u1K0cbbGOHalS13jO3doWsAZL1mj+aEf9Y/ka3olqR
oleifzE4VT6a1Wad5IGpLy/RjCycuCLNRfaI2x40sUmnQE/S5wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLIKeS2ggykmYRv8bVsA6MmbMCNOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvY2IwODBkN2EtNWJlMS0z
YzZiLTlhMWEtM2Q1MWE2YzA1MWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD7MwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFAWZGWyQlOpxogbvnoVo866OODNaZNkvFPS/3XpFuqATu2FzcGZ65Ha1
kjCL53a0EwucNWqMrlBExDCIDXDIknRsJ0ljew6+zCJqVIEK/Hh9ghcke2G8CLNc
l/RYDiZfVs2wg3fbfbnQh4XptHFPEUJgBquMbbjz97gpIDQS2GBAjAjS4oWXPDC1
N2n1YOjU9gi2Np7wqHEsmUvFPFwCE7eesKDB7SIvDUCvZrm7zLA5QsrtmpApIsWA
Xt0Ot0Ck4L45gCv6JmzWiSI1XJOWb/JmoqIov5hlCf9NvXtEBgDaEiNqIcf33sjG
vo4DNiDqix52RbN5W4cFZ5YETX2d6Q==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:26:35 2025 by rpki-client