Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e66dcab7-68dd-3b75-a104-319ead6d7560.roa
File: e66dcab7-68dd-3b75-a104-319ead6d7560.roa (raw, json)
Hash identifier: V/bKs09rWEzwTjYH4ux7yjXd0a0KcpzT5QZg7MrbNCM=
Subject key identifier: EA:D2:54:63:96:31:82:88:C0:69:D2:45:72:3D:92:E4:9A:F1:4A:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E7B107A82B36312D396B6B380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e66dcab7-68dd-3b75-a104-319ead6d7560.roa
Signing time: Tue 05 Jul 2022 12:00:00 +0000
ROA not before: Tue 05 Jul 2022 12:00:00 +0000
ROA not after: Wed 10 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 15.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:7b:10:7a:82:b3:63:12:d3:96:b6:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 5 12:00:00 2022 GMT
Not After : Aug 10 04:00:00 2022 GMT
Subject: CN=870e2690-1ff7-4ee0-942b-6180f13a9086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:78:66:e3:5d:85:4d:b6:13:9f:f2:4e:68:
22:84:1e:a6:73:af:03:17:43:e0:61:c9:78:c2:8b:
88:75:76:bc:7a:5c:e2:9e:67:ae:d8:13:9a:08:5e:
b0:17:12:17:5d:27:38:3e:63:8d:71:cb:8d:bf:b7:
66:2f:e8:d5:fa:56:33:1a:46:8f:b8:c2:3a:c8:bd:
b6:5f:e6:0f:b6:db:f3:4c:84:32:64:24:8f:87:c0:
1d:95:d4:cf:76:24:b8:b3:a5:64:5a:ec:36:a9:95:
86:55:f1:6b:17:7e:cd:1c:37:96:c6:2b:ea:9e:ff:
bf:6a:cb:c5:9c:05:2f:88:75:ce:87:c2:d8:2f:0d:
ed:50:ae:3e:7b:92:3f:e8:55:2f:91:99:1a:b1:f0:
5e:c8:2f:33:12:22:c9:08:ce:11:29:be:93:ef:b7:
ee:37:1d:9e:be:5f:25:bc:0a:b9:6f:a2:29:58:c6:
39:b3:3b:04:bd:b3:24:af:3d:8d:1c:bc:80:55:8b:
60:d2:a1:79:d6:b5:46:bd:b0:11:96:68:47:08:01:
33:ad:47:94:50:2b:5e:97:bb:b1:af:e3:78:82:18:
1e:b0:07:f6:6f:9e:2e:00:af:db:b4:3f:df:aa:97:
69:dc:7c:4e:9b:d2:97:ff:9c:60:51:22:0c:48:6b:
87:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:54:63:96:31:82:88:C0:69:D2:45:72:3D:92:E4:9A:F1:4A:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e66dcab7-68dd-3b75-a104-319ead6d7560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:2e:0c:cc:66:af:cd:b1:6f:67:e0:16:97:98:3f:ea:65:81:
fb:0d:95:d9:82:25:4c:e2:ae:c8:ae:c9:a2:76:21:ef:e5:e5:
8b:d0:d3:c7:3d:1e:7f:74:dd:87:b7:ea:8d:e7:06:d0:0e:5b:
db:e3:c5:85:54:52:74:47:5c:0e:af:cd:aa:da:af:5e:7d:9f:
4f:d5:bf:06:0b:17:53:84:25:54:dc:21:70:14:e3:5e:a7:24:
c2:5b:3f:7d:03:e9:3c:eb:59:48:08:6f:74:75:48:e7:6d:3d:
50:3f:31:33:c4:f4:e4:a1:99:18:25:7b:a6:72:bd:cc:cc:a9:
73:f7:1b:e4:04:20:b6:30:75:fc:f2:1c:51:bd:3b:4f:85:99:
06:d0:35:79:09:23:d8:5f:ab:59:9c:18:7e:b2:1c:25:e5:d7:
4c:00:a1:43:10:d7:69:3c:fe:aa:be:a2:53:29:e7:13:3a:a8:
d5:88:60:5a:5e:ea:9c:f4:cb:c3:01:75:d6:77:18:d6:55:46:
08:10:b0:74:d4:bc:33:d5:29:d2:54:df:7b:0f:15:90:45:61:
2e:80:6d:c1:9d:4a:81:b5:9d:80:26:b3:23:e5:a5:fa:99:d0:
b7:d7:b9:1e:78:ba:9c:d2:87:c1:ba:ca:7e:ec:6d:4b:d7:96:
4a:bc:cc:d9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD57EHqCs2MS05a2s4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcwNTEyMDAwMFoXDTIyMDgxMDA0MDAwMFowLzEtMCsGA1UEAxMk
ODcwZTI2OTAtMWZmNy00ZWUwLTk0MmItNjE4MGYxM2E5MDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGx4ZuNdhU22E5/yTmgihB6mc68DF0PgYcl4
wouIdXa8elzinmeu2BOaCF6wFxIXXSc4PmONccuNv7dmL+jV+lYzGkaPuMI6yL22
X+YPttvzTIQyZCSPh8AdldTPdiS4s6VkWuw2qZWGVfFrF37NHDeWxivqnv+/asvF
nAUviHXOh8LYLw3tUK4+e5I/6FUvkZkasfBeyC8zEiLJCM4RKb6T77fuNx2evl8l
vAq5b6IpWMY5szsEvbMkrz2NHLyAVYtg0qF51rVGvbARlmhHCAEzrUeUUCtel7ux
r+N4ghgesAf2b54uAK/btD/fqpdp3HxOm9KX/5xgUSIMSGuHcwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOrSVGOWMYKIwGnSRXI9kuSa8UqSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTY2ZGNhYjctNjhkZC0z
Yjc1LWExMDQtMzE5ZWFkNmQ3NTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD5AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASC4MzGavzbFvZ+AWl5g/6mWB+w2V2YIlTOKuyK7JonYh7+Xli9DTxz0e
f3Tdh7fqjecG0A5b2+PFhVRSdEdcDq/NqtqvXn2fT9W/BgsXU4QlVNwhcBTjXqck
wls/fQPpPOtZSAhvdHVI5209UD8xM8T05KGZGCV7pnK9zMypc/cb5AQgtjB1/PIc
Ub07T4WZBtA1eQkj2F+rWZwYfrIcJeXXTAChQxDXaTz+qr6iUynnEzqo1YhgWl7q
nPTLwwF11ncY1lVGCBCwdNS8M9Up0lTfew8VkEVhLoBtwZ1KgbWdgCazI+Wl+pnQ
t9e5Hni6nNKHwbrKfuxtS9eWSrzM2Q==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:20 2025 by rpki-client