Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea6558a5-b4c1-30c6-9896-abb40be3479c.roa
File: ea6558a5-b4c1-30c6-9896-abb40be3479c.roa (raw, json)
Hash identifier: BNRblDKb3eymQFcZ17qQmr1GE+Wd3cdyjudUzE9kyeQ=
Subject key identifier: 90:5B:5D:F4:B8:57:47:22:7F:A9:1C:2D:BD:62:36:11:FB:B4:16:01
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB86C684C61184AC7F1B0BC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea6558a5-b4c1-30c6-9896-abb40be3479c.roa
Signing time: Wed 27 Jul 2022 12:00:00 +0000
ROA not before: Wed 27 Jul 2022 12:00:00 +0000
ROA not after: Thu 01 Sep 2022 04:00:00 +0000
asID: 3209
IP address blocks: 15.145.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b8:6c:68:4c:61:18:4a:c7:f1:b0:bc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 27 12:00:00 2022 GMT
Not After : Sep 1 04:00:00 2022 GMT
Subject: CN=4d8fa4d5-3d4e-4eac-99f3-0aee3b06afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:16:80:f6:58:53:fb:54:1d:0e:4d:c9:d7:59:
7a:4e:c7:77:c8:7b:df:39:85:8f:0c:62:b3:b4:27:
f1:51:42:d4:b8:3b:7f:a9:ba:74:8a:fc:73:04:db:
50:f8:5f:37:35:3e:0e:2b:a5:9e:ee:ee:f8:e2:93:
8b:7c:86:cf:26:9f:4e:7f:ba:48:f7:01:7b:0e:24:
d1:76:e6:b8:ea:db:dd:50:c0:40:3b:1b:6c:88:74:
8d:84:24:66:91:74:69:48:c3:41:2c:4e:aa:1b:b6:
fe:1d:f7:1c:3e:58:fd:97:77:41:6b:81:e0:6b:7c:
f3:9b:b2:8d:3a:e7:be:fc:f2:9a:c0:23:cc:36:bc:
2c:7b:67:3e:10:e0:c9:bd:01:63:de:39:b2:62:8b:
01:15:21:fa:d2:b4:4f:13:94:73:f6:19:70:4b:3d:
81:79:fd:6d:b0:6e:ec:84:3c:72:d8:aa:87:63:ba:
a5:2a:a9:ca:a5:a5:9e:2a:bd:09:2f:b9:ba:f9:4f:
62:e6:c0:63:13:e6:bb:39:bd:0c:56:dd:9a:2e:61:
76:02:4f:96:8f:a2:93:35:18:10:6f:9b:92:1d:bf:
66:3d:45:96:0e:66:b8:99:32:7d:19:fd:54:50:02:
eb:cf:b0:a8:29:d6:6b:1b:54:db:39:7f:39:ec:cf:
45:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:5D:F4:B8:57:47:22:7F:A9:1C:2D:BD:62:36:11:FB:B4:16:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea6558a5-b4c1-30c6-9896-abb40be3479c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.145.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:d5:84:b0:90:a6:94:85:95:84:2f:27:da:e8:d0:3c:23:56:
8f:dc:cb:a9:3e:c9:ba:a9:e4:35:54:d3:5c:e6:23:d3:4e:e3:
06:c7:bf:86:70:dd:44:21:46:10:94:45:28:0b:21:98:67:a8:
c0:dc:a0:44:9a:51:14:e6:ce:39:60:1f:c1:84:11:5c:9b:32:
ee:21:ff:6c:8c:6c:9a:27:ee:ae:f7:35:f8:4c:25:a6:51:e4:
14:b6:4e:47:ec:ca:df:a7:27:8a:62:03:35:3f:14:b1:ed:d3:
77:42:87:c1:99:d5:01:e9:b8:e2:38:c7:ab:6f:2d:29:87:1a:
ec:d0:b8:5a:e1:bc:d6:c1:b5:57:33:af:02:09:9f:bf:c6:22:
00:01:fc:c7:68:b5:1a:b3:88:46:5f:80:7c:a9:1a:52:da:12:
3c:54:7a:d1:5b:65:47:69:a2:35:50:ac:e1:80:8c:28:f5:8c:
05:a2:69:1c:fd:9f:a6:3a:20:a6:a7:a6:b4:a9:c4:15:c3:a5:
04:44:d8:83:b3:d2:5a:b4:12:7d:6e:1b:c9:1b:f9:89:6d:67:
11:aa:c9:ef:84:12:ca:fb:e0:54:08:da:59:16:11:77:73:92:
01:af:8a:7f:ad:9a:95:b3:8f:a1:0e:5f:7d:c2:e5:4c:3b:0a:
8f:c8:90:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD64bGhMYRhKx/GwvIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyNzEyMDAwMFoXDTIyMDkwMTA0MDAwMFowLzEtMCsGA1UEAxMk
NGQ4ZmE0ZDUtM2Q0ZS00ZWFjLTk5ZjMtMGFlZTNiMDZhZmFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBaA9lhT+1QdDk3J11l6Tsd3yHvfOYWPDGKz
tCfxUULUuDt/qbp0ivxzBNtQ+F83NT4OK6We7u744pOLfIbPJp9Of7pI9wF7DiTR
dua46tvdUMBAOxtsiHSNhCRmkXRpSMNBLE6qG7b+HfccPlj9l3dBa4Hga3zzm7KN
Oue+/PKawCPMNrwse2c+EODJvQFj3jmyYosBFSH60rRPE5Rz9hlwSz2Bef1tsG7s
hDxy2KqHY7qlKqnKpaWeKr0JL7m6+U9i5sBjE+a7Ob0MVt2aLmF2Ak+Wj6KTNRgQ
b5uSHb9mPUWWDma4mTJ9Gf1UUALrz7CoKdZrG1TbOX857M9FZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJBbXfS4V0cif6kcLb1iNhH7tBYBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWE2NTU4YTUtYjRjMS0z
MGM2LTk4OTYtYWJiNDBiZTM0NzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCD5EIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDVhLCQppSFlYQvJ9ro0DwjVo/cy6k+ybqp5DVU01zmI9NO4wbHv4Zw
3UQhRhCURSgLIZhnqMDcoESaURTmzjlgH8GEEVybMu4h/2yMbJon7q73NfhMJaZR
5BS2Tkfsyt+nJ4piAzU/FLHt03dCh8GZ1QHpuOI4x6tvLSmHGuzQuFrhvNbBtVcz
rwIJn7/GIgAB/MdotRqziEZfgHypGlLaEjxUetFbZUdpojVQrOGAjCj1jAWiaRz9
n6Y6IKanprSpxBXDpQRE2IOz0lq0En1uG8kb+YltZxGqye+EEsr74FQI2lkWEXdz
kgGvin+tmpWzj6EOX33C5Uw7Co/IkAw=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:18:20 2025 by rpki-client