Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f59998ff-e54f-389b-b9eb-37af02623c3c.roa
File: f59998ff-e54f-389b-b9eb-37af02623c3c.roa (raw, json)
Hash identifier: u1GoX8XZjnYraYix1p1idhBqMUbneBJwxT3cw7nj7pM=
Subject key identifier: 49:DE:30:CE:86:85:C9:FA:9A:5C:6E:79:51:A1:D3:52:AC:A5:A9:22
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B3AD3A6E0DAFFDB2028411C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f59998ff-e54f-389b-b9eb-37af02623c3c.roa
Signing time: Wed 25 Jan 2023 12:00:00 +0000
ROA not before: Wed 25 Jan 2023 12:00:00 +0000
ROA not after: Thu 02 Mar 2023 05:00:00 +0000
asID: 14618
IP address blocks: 15.231.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b3:ad:3a:6e:0d:af:fd:b2:02:84:11:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 25 12:00:00 2023 GMT
Not After : Mar 2 05:00:00 2023 GMT
Subject: CN=d430dedd-a4fe-40a6-abc8-c9cf66449ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:08:56:5a:57:85:aa:b6:f4:36:2e:93:f6:
a6:f1:1a:7f:17:e7:fc:06:8a:0d:35:90:70:3d:1e:
d3:8e:cb:b9:f5:bf:01:b1:46:4a:9d:28:d2:b9:fc:
75:fe:96:31:8a:67:2e:59:a3:29:26:74:e2:2f:a2:
5b:c8:0f:2f:06:64:95:62:50:1b:ca:d3:ce:d2:e0:
fa:f3:d7:9e:ac:7a:3a:cf:df:ce:f5:29:79:84:87:
d1:d5:6c:ed:a3:43:f5:7b:d0:93:58:bd:a9:4c:bb:
15:97:85:1c:3f:dc:48:cd:66:6a:7a:7e:b2:f3:9b:
66:4c:48:ad:09:e2:95:ac:6d:50:21:ea:da:c3:9c:
d9:64:f7:52:7c:41:f0:ef:37:ed:1a:89:3e:1e:5e:
0e:3a:2b:f7:a3:84:d2:f1:84:23:cf:2f:9b:dc:ca:
11:78:1c:65:dc:07:98:b5:d1:6f:69:63:04:ed:08:
09:8e:ca:37:46:c0:0a:80:33:69:e4:60:79:4a:9a:
2f:f3:59:bb:93:dd:1b:af:18:0c:07:cf:5f:2a:82:
d1:75:2c:af:4c:c3:63:5e:c0:d4:44:b5:d2:d9:fc:
03:4d:1c:7b:06:c3:f8:05:d1:66:35:07:9f:e7:5f:
93:4b:b4:1e:fb:99:df:17:9c:d1:05:f0:7f:64:c9:
8f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:DE:30:CE:86:85:C9:FA:9A:5C:6E:79:51:A1:D3:52:AC:A5:A9:22
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f59998ff-e54f-389b-b9eb-37af02623c3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:c7:9c:e5:0a:8a:46:f5:ba:72:33:8b:36:06:e8:55:ff:15:
b2:67:7c:8d:1e:ef:87:bb:6c:4a:f1:40:17:80:3e:b7:ca:de:
f1:db:d6:54:52:83:91:34:24:11:0f:90:2e:b6:f1:db:fe:6c:
16:ac:48:dc:50:c3:b0:64:c3:9f:1e:09:70:c9:2b:07:1f:9f:
a6:96:0e:40:d2:95:c8:e8:06:90:4c:ce:5e:23:27:f0:69:b9:
73:9a:a2:35:68:1c:c6:a8:1d:7b:8e:01:ec:c4:15:ed:cc:60:
a1:12:15:4b:10:65:7a:70:a4:4b:a6:f7:78:e8:57:15:e3:4e:
50:2e:d7:cb:06:07:c9:10:7d:fd:ed:df:e8:b0:bf:1d:99:79:
e4:5b:fd:09:0b:5e:4f:04:d0:47:ce:81:41:53:9c:62:4e:93:
d6:97:56:a8:9e:b1:c3:27:f1:b2:1d:0f:2b:76:31:b0:d3:ef:
e2:33:15:3f:fb:f9:6e:0b:b8:17:21:e0:56:27:53:c5:2d:33:
b4:59:3f:b3:14:bb:c2:ab:a1:b1:b9:5e:0a:b4:a3:a0:f1:17:
df:69:9c:c0:4f:e9:8a:86:18:93:b0:9b:e6:f3:fc:46:5b:ba:
83:10:3f:4d:ca:05:b8:e6:a5:47:25:9e:f6:70:8e:85:05:93:
37:61:3b:1f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECzrTpuDa/9sgKEEcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEyNTEyMDAwMFoXDTIzMDMwMjA1MDAwMFowLzEtMCsGA1UEAxMk
ZDQzMGRlZGQtYTRmZS00MGE2LWFiYzgtYzljZjY2NDQ5Y2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe8IVlpXhaq29DYuk/am8Rp/F+f8BooNNZBw
PR7Tjsu59b8BsUZKnSjSufx1/pYximcuWaMpJnTiL6JbyA8vBmSVYlAbytPO0uD6
89eerHo6z9/O9Sl5hIfR1Wzto0P1e9CTWL2pTLsVl4UcP9xIzWZqen6y85tmTEit
CeKVrG1QIeraw5zZZPdSfEHw7zftGok+Hl4OOiv3o4TS8YQjzy+b3MoReBxl3AeY
tdFvaWME7QgJjso3RsAKgDNp5GB5Spov81m7k90brxgMB89fKoLRdSyvTMNjXsDU
RLXS2fwDTRx7BsP4BdFmNQef51+TS7Qe+5nfF5zRBfB/ZMmPPQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEneMM6Ghcn6mlxueVGh01KspakiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjU5OTk4ZmYtZTU0Zi0z
ODliLWI5ZWItMzdhZjAyNjIzYzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD+cwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAL8ec5QqKRvW6cjOLNgboVf8Vsmd8jR7vh7tsSvFAF4A+t8re8dvWVFKD
kTQkEQ+QLrbx2/5sFqxI3FDDsGTDnx4JcMkrBx+fppYOQNKVyOgGkEzOXiMn8Gm5
c5qiNWgcxqgde44B7MQV7cxgoRIVSxBlenCkS6b3eOhXFeNOUC7XywYHyRB9/e3f
6LC/HZl55Fv9CQteTwTQR86BQVOcYk6T1pdWqJ6xwyfxsh0PK3YxsNPv4jMVP/v5
bgu4FyHgVidTxS0ztFk/sxS7wquhsbleCrSjoPEX32mcwE/pioYYk7Cb5vP8Rlu6
gxA/TcoFuOalRyWe9nCOhQWTN2E7Hw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:57 2025 by rpki-client