Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea1c48f5-ee07-32a2-bebd-e3a585981334.roa
File: ea1c48f5-ee07-32a2-bebd-e3a585981334.roa (raw, json)
Hash identifier: CpAY39895rVvQHsSqoLEVg0NzArYIYlfoLF2nynNttc=
Subject key identifier: AF:E2:3E:CA:DA:11:05:3B:24:AA:AB:65:8C:45:A7:DE:60:D2:49:FB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF2E12F772022440FD0DA1080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea1c48f5-ee07-32a2-bebd-e3a585981334.roa
Signing time: Wed 18 May 2022 12:00:00 +0000
ROA not before: Wed 18 May 2022 12:00:00 +0000
ROA not after: Thu 23 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 15.253.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f2:e1:2f:77:20:22:44:0f:d0:da:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 18 12:00:00 2022 GMT
Not After : Jun 23 04:00:00 2022 GMT
Subject: CN=5b769a5c-81ab-4041-954b-79d6d9a3eb0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9e:f7:a4:6c:34:eb:39:8c:ed:b6:13:5f:9e:
ee:dd:9b:9b:a3:16:ca:0b:aa:37:67:83:13:6b:90:
24:31:1f:b0:0b:4c:31:ea:69:65:b9:f0:2b:25:de:
32:5e:8f:3a:a2:23:5a:6d:fb:42:79:1d:a8:a1:82:
d8:ec:13:0d:99:d0:49:0d:e7:4f:f1:1a:f1:88:87:
d0:dd:40:39:83:75:84:c7:1a:66:06:dd:e0:52:5a:
64:42:f0:e2:f3:df:3a:ea:3f:77:5b:ac:a7:d3:8e:
c3:6d:4b:9d:d2:d7:26:ce:9a:28:13:3e:14:b0:10:
66:50:3f:27:22:48:21:68:35:83:81:2f:7b:b1:31:
e6:62:59:00:fe:84:9e:1c:1c:45:51:4c:6c:a1:e7:
19:a2:d6:2e:3c:f8:e8:fe:8b:f1:bc:e5:cf:03:2a:
9c:ca:e1:f7:76:0c:5d:df:16:49:31:e7:b2:b2:2c:
11:6e:d2:6a:c9:5e:d8:84:7f:d9:31:21:b6:2c:58:
64:27:78:32:eb:03:be:34:0c:de:96:b6:d7:2b:3d:
87:eb:74:91:e6:51:e4:3e:08:60:b3:b9:75:be:f3:
f6:c2:cc:4f:b5:ce:10:8a:9c:10:f2:15:0c:1b:56:
55:cd:37:80:5f:36:25:b2:3b:82:17:0c:67:f9:dc:
9c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E2:3E:CA:DA:11:05:3B:24:AA:AB:65:8C:45:A7:DE:60:D2:49:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea1c48f5-ee07-32a2-bebd-e3a585981334.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:42:4a:24:2e:b8:77:03:78:fe:f8:3f:d2:cd:0c:fa:5d:c3:
82:68:c6:23:02:dc:76:e4:2d:b5:ee:3e:04:47:9d:bc:6e:fe:
9e:77:bf:0e:df:0a:2d:ad:20:87:d3:58:f1:d6:82:df:0e:82:
ed:a6:8c:f8:2d:ab:3d:1a:22:aa:2f:3f:66:68:69:22:1e:1c:
6c:6a:a9:92:3f:94:da:41:be:91:44:87:68:d4:52:f8:d5:56:
a2:95:cf:1c:67:d1:56:d7:61:83:d9:ab:a3:d3:14:69:f9:e5:
64:f0:3d:e0:53:12:b1:3a:23:0c:7f:6f:da:00:e1:06:74:6f:
42:7a:f0:de:44:70:a5:d8:8a:62:6f:43:33:c6:8a:1d:20:13:
5c:56:d7:de:f4:aa:9d:72:93:a5:ea:dc:2c:89:68:12:56:c6:
bc:d4:2e:70:e3:37:93:77:0f:03:ee:f0:23:b9:78:c7:6a:27:
a0:7b:06:b1:68:07:98:f6:2c:66:b4:53:b6:af:30:5a:96:a2:
81:04:71:fc:9b:24:b6:a9:f6:0d:a2:c2:c6:c5:a7:4c:8e:40:
28:34:41:48:10:5f:8a:a0:39:da:88:40:c6:50:b7:e7:0b:fd:
ca:42:bd:57:8f:00:7b:39:a0:44:3a:39:b6:49:84:f3:68:4e:
bc:77:8e:fb
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3y4S93ICJED9DaEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUxODEyMDAwMFoXDTIyMDYyMzA0MDAwMFowLzEtMCsGA1UEAxMk
NWI3NjlhNWMtODFhYi00MDQxLTk1NGItNzlkNmQ5YTNlYjBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAip73pGw06zmM7bYTX57u3ZuboxbKC6o3Z4MT
a5AkMR+wC0wx6mllufArJd4yXo86oiNabftCeR2ooYLY7BMNmdBJDedP8RrxiIfQ
3UA5g3WExxpmBt3gUlpkQvDi89866j93W6yn047DbUud0tcmzpooEz4UsBBmUD8n
IkghaDWDgS97sTHmYlkA/oSeHBxFUUxsoecZotYuPPjo/ovxvOXPAyqcyuH3dgxd
3xZJMeeysiwRbtJqyV7YhH/ZMSG2LFhkJ3gy6wO+NAzelrbXKz2H63SR5lHkPghg
s7l1vvP2wsxPtc4QipwQ8hUMG1ZVzTeAXzYlsjuCFwxn+dycjwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK/iPsraEQU7JKqrZYxFp95g0kn7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWExYzQ4ZjUtZWUwNy0z
MmEyLWJlYmQtZTNhNTg1OTgxMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD/0wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAY0JKJC64dwN4/vg/0s0M+l3DgmjGIwLcduQtte4+BEedvG7+nne/Dt8K
La0gh9NY8daC3w6C7aaM+C2rPRoiqi8/ZmhpIh4cbGqpkj+U2kG+kUSHaNRS+NVW
opXPHGfRVtdhg9mro9MUafnlZPA94FMSsTojDH9v2gDhBnRvQnrw3kRwpdiKYm9D
M8aKHSATXFbX3vSqnXKTpercLIloElbGvNQucOM3k3cPA+7wI7l4x2onoHsGsWgH
mPYsZrRTtq8wWpaigQRx/Jsktqn2DaLCxsWnTI5AKDRBSBBfiqA52ohAxlC35wv9
ykK9V48AezmgRDo5tkmE82hOvHeO+w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:11 2025 by rpki-client