Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e2eea578-8bb9-3471-b7a1-a79766556bc5.roa
File: e2eea578-8bb9-3471-b7a1-a79766556bc5.roa (raw, json)
Hash identifier: nhT5BgiX1o9p9ZKX6BFJ9zSWhUMIksog6bbtigK3o60=
Subject key identifier: 00:6A:89:74:82:88:67:42:D2:49:4F:8C:7B:D1:1B:09:53:8A:10:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F8A8F5FEDA5DA141EE9C3EC20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e2eea578-8bb9-3471-b7a1-a79766556bc5.roa
Signing time: Tue 11 Oct 2022 12:00:00 +0000
ROA not before: Tue 11 Oct 2022 12:00:00 +0000
ROA not after: Wed 16 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 15.245.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:8a:8f:5f:ed:a5:da:14:1e:e9:c3:ec:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 11 12:00:00 2022 GMT
Not After : Nov 16 05:00:00 2022 GMT
Subject: CN=d013a51c-8c76-40cd-975a-0f5954821aab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:11:0e:72:d8:58:f2:a6:c3:63:19:87:d4:
f0:4f:a2:72:e5:80:a4:ca:d2:00:86:ac:04:4e:31:
ce:fe:fa:a6:87:1f:73:0e:53:8d:bc:8b:13:bd:70:
f2:b6:1a:76:60:e7:6d:33:ad:ad:09:62:b8:3f:fe:
d1:95:4d:9a:dc:0c:ee:16:03:4e:d8:77:96:54:68:
cf:bf:77:70:09:d2:cd:85:45:9b:60:11:60:6f:72:
c1:21:61:e8:8a:23:b6:8c:e9:d0:a9:a7:4b:d2:82:
3b:f9:85:a5:b5:5b:64:14:a0:ce:39:6f:5d:b2:16:
18:6e:fe:de:51:65:e8:fa:c8:79:48:ab:64:b0:20:
67:3e:ff:d8:21:31:bf:b0:da:4a:0f:44:7b:f3:a8:
32:ac:10:13:bf:ae:36:d5:b4:1c:1a:05:03:ca:3d:
bd:29:51:4c:5c:8f:37:d2:d7:80:b6:b8:64:4b:21:
2d:7b:19:bf:14:59:24:7f:97:c1:b5:75:d5:7c:71:
e9:d5:94:c4:21:8e:84:8f:58:5f:53:9a:06:17:16:
9a:20:9a:89:3d:23:81:84:a6:2a:42:78:e2:31:e5:
9b:48:df:21:1a:b5:22:14:d1:4b:e4:f1:b1:99:ad:
64:85:32:3e:48:7f:58:14:fb:97:0a:65:5d:d1:ec:
d9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6A:89:74:82:88:67:42:D2:49:4F:8C:7B:D1:1B:09:53:8A:10:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e2eea578-8bb9-3471-b7a1-a79766556bc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.245.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:98:a2:2d:a0:9f:9d:2e:24:55:0c:bc:71:01:36:23:2b:1f:
54:79:6d:dd:69:73:70:d6:eb:7f:63:f7:07:da:05:29:64:bf:
83:f4:10:11:59:89:88:e1:20:12:99:10:ec:cb:70:c0:2d:f5:
17:1b:ba:99:98:e7:fd:fb:6c:49:18:c3:2c:6a:9f:7f:9e:f9:
21:b9:be:46:4e:10:3b:5f:58:09:7a:87:44:4a:cf:c7:4f:9c:
5b:fc:00:d5:3b:66:64:ff:ea:18:e8:03:5d:b9:86:ab:7e:41:
0d:73:59:a5:79:c7:43:74:4c:c5:b3:14:4e:25:64:7a:c4:9b:
c2:6a:f7:3d:1f:8f:e4:71:10:87:37:51:28:02:b1:cb:be:4f:
df:33:5a:3c:98:55:2a:a4:8d:ad:4e:74:92:56:c7:66:af:fe:
cf:76:32:16:4b:22:e3:4e:11:fd:36:ef:5a:08:9c:2f:d3:12:
1f:6b:49:a1:89:12:38:2c:35:92:d4:c7:ef:dc:fc:14:7f:c4:
77:5d:ee:ba:a5:6f:ea:bb:e0:fd:f9:96:19:5e:f4:50:97:89:
b8:3d:e2:a2:39:be:e4:1b:23:2a:8c:d9:b8:c0:6a:7d:b4:51:
5b:5d:be:2e:50:fd:d3:d7:6a:75:37:3f:2d:3d:d4:f5:1a:1d:
74:25:e3:b1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+Kj1/tpdoUHunD7CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxMTEyMDAwMFoXDTIyMTExNjA1MDAwMFowLzEtMCsGA1UEAxMk
ZDAxM2E1MWMtOGM3Ni00MGNkLTk3NWEtMGY1OTU0ODIxYWFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUQRDnLYWPKmw2MZh9TwT6Jy5YCkytIAhqwE
TjHO/vqmhx9zDlONvIsTvXDythp2YOdtM62tCWK4P/7RlU2a3AzuFgNO2HeWVGjP
v3dwCdLNhUWbYBFgb3LBIWHoiiO2jOnQqadL0oI7+YWltVtkFKDOOW9dshYYbv7e
UWXo+sh5SKtksCBnPv/YITG/sNpKD0R786gyrBATv6421bQcGgUDyj29KVFMXI83
0teAtrhkSyEtexm/FFkkf5fBtXXVfHHp1ZTEIY6Ej1hfU5oGFxaaIJqJPSOBhKYq
QnjiMeWbSN8hGrUiFNFL5PGxma1khTI+SH9YFPuXCmVd0ezZGQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFABqiXSCiGdC0klPjHvRGwlTihA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTJlZWE1NzgtOGJiOS0z
NDcxLWI3YTEtYTc5NzY2NTU2YmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/UwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAZiiLaCfnS4kVQy8cQE2IysfVHlt3WlzcNbrf2P3B9oFKWS/g/QQEVmJ
iOEgEpkQ7MtwwC31Fxu6mZjn/ftsSRjDLGqff575Ibm+Rk4QO19YCXqHRErPx0+c
W/wA1TtmZP/qGOgDXbmGq35BDXNZpXnHQ3RMxbMUTiVkesSbwmr3PR+P5HEQhzdR
KAKxy75P3zNaPJhVKqSNrU50klbHZq/+z3YyFksi404R/TbvWgicL9MSH2tJoYkS
OCw1ktTH79z8FH/Ed13uuqVv6rvg/fmWGV70UJeJuD3iojm+5BsjKozZuMBqfbRR
W12+LlD909dqdTc/LT3U9RoddCXjsQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:19 2025 by rpki-client