Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7f7b969-2928-34fd-915e-ecc9cc2030d8.roa
File: f7f7b969-2928-34fd-915e-ecc9cc2030d8.roa (raw, json)
Hash identifier: GlrXleFw+QTBdASFVkRbJNV05VnNdp6zIm7BN2o9+EA=
Subject key identifier: B4:F1:8C:F7:C9:57:FE:0F:A7:90:FB:59:AC:3C:6E:88:93:07:8A:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409C69503A88E2CC8497867180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7f7b969-2928-34fd-915e-ecc9cc2030d8.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 15.202.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:69:50:3a:88:e2:cc:84:97:86:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=0630723f-a564-4ea9-ba16-b6add6b59484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3a:d3:6b:2b:be:f6:4f:98:aa:6a:30:20:92:
2c:d9:40:75:09:8f:af:75:b8:85:af:2c:d0:01:b0:
20:d6:1b:2a:92:07:9b:d4:d2:7d:8d:04:09:6b:1f:
de:52:50:18:b8:2e:28:31:40:de:eb:18:23:8a:00:
8f:d1:dc:ec:2b:80:aa:4c:46:f7:bb:c4:b8:68:c2:
e6:f7:39:81:e7:2c:73:b8:d9:01:23:94:fa:d9:f8:
c5:61:9e:6c:aa:75:fe:9e:f3:41:84:fe:c7:5f:22:
ed:76:4a:1a:da:3e:b8:e7:41:1f:b3:0b:8a:36:47:
93:ae:fe:0e:17:ce:e1:d3:df:bd:ae:58:fd:24:1f:
bb:01:18:9e:c9:ef:5a:3f:dc:5d:28:4d:44:1e:32:
a8:a1:e1:b5:9d:a1:21:36:32:7f:16:8d:10:7d:0e:
0b:85:43:75:a3:df:28:57:7f:8e:06:80:35:c4:f9:
30:1b:e7:1b:95:df:fd:5b:55:2a:19:03:4d:ef:c7:
49:6f:a8:24:3e:34:c6:2f:11:c2:0f:bf:24:f3:47:
16:bd:06:89:70:40:26:ac:8e:c6:54:4c:7c:d3:15:
9b:4d:89:76:b2:d0:d7:bb:6c:b7:3c:99:c9:97:ff:
3e:df:f3:d7:14:b3:b5:c6:b8:df:a0:14:ac:09:22:
db:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F1:8C:F7:C9:57:FE:0F:A7:90:FB:59:AC:3C:6E:88:93:07:8A:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f7f7b969-2928-34fd-915e-ecc9cc2030d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.202.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:4e:f8:5f:8d:f7:c3:4e:ae:e6:8a:a0:aa:b8:78:77:b4:7c:
db:42:10:a8:ab:b5:bf:ba:12:27:35:a8:af:8d:03:0d:ce:d2:
46:dd:1e:dd:69:f2:c8:b2:c2:49:4d:0c:15:ae:1d:7f:d2:09:
8f:9e:4f:2b:3b:88:83:e9:bd:4e:38:05:b7:79:03:9d:73:08:
a1:ca:5e:9f:e8:50:0f:30:80:10:2f:a3:b5:26:c7:96:71:fc:
1f:66:ed:bc:6a:99:54:e3:dd:62:bf:fd:7e:02:fa:65:db:6e:
9d:69:04:a0:3e:7d:e2:8c:ab:7d:1e:0b:e9:5e:fc:f6:c6:0b:
21:bf:80:21:0b:ef:a9:bf:a5:76:1c:0e:64:f5:9c:b9:cb:a6:
98:83:33:71:bf:7c:8c:27:ad:9b:f4:bc:93:b9:3b:93:1c:88:
54:c3:27:fa:85:be:d0:ea:d7:52:de:fd:6e:0a:c5:c3:02:15:
ef:af:bc:40:b4:fa:f3:30:36:f6:26:c3:c1:63:2f:12:74:2b:
14:99:ad:2f:3f:4a:ea:13:a9:40:34:9c:3e:41:65:6f:c7:47:
b7:d5:c6:b2:2e:5b:de:3b:36:22:bc:47:87:99:21:1a:83:14:
01:af:86:9e:00:4b:ba:dc:64:bb:d3:3a:f7:ef:9d:de:c2:7e:
92:ae:43:d4
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWECcaVA6iOLMhJeGcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExNzEyMDAwMFoXDTIzMDIyMjA1MDAwMFowLzEtMCsGA1UEAxMk
MDYzMDcyM2YtYTU2NC00ZWE5LWJhMTYtYjZhZGQ2YjU5NDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjrTayu+9k+YqmowIJIs2UB1CY+vdbiFryzQ
AbAg1hsqkgeb1NJ9jQQJax/eUlAYuC4oMUDe6xgjigCP0dzsK4CqTEb3u8S4aMLm
9zmB5yxzuNkBI5T62fjFYZ5sqnX+nvNBhP7HXyLtdkoa2j6450EfswuKNkeTrv4O
F87h09+9rlj9JB+7ARieye9aP9xdKE1EHjKooeG1naEhNjJ/Fo0QfQ4LhUN1o98o
V3+OBoA1xPkwG+cbld/9W1UqGQNN78dJb6gkPjTGLxHCD78k80cWvQaJcEAmrI7G
VEx80xWbTYl2stDXu2y3PJnJl/8+3/PXFLO1xrjfoBSsCSLbQwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFLTxjPfJV/4Pp5D7Waw8boiTB4o0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjdmN2I5NjktMjkyOC0z
NGZkLTkxNWUtZWNjOWNjMjAzMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD8owVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANE74X433w06u5oqgqrh4d7R820IQqKu1v7oSJzWor40DDc7SRt0e3Wny
yLLCSU0MFa4df9IJj55PKzuIg+m9TjgFt3kDnXMIocpen+hQDzCAEC+jtSbHlnH8
H2btvGqZVOPdYr/9fgL6ZdtunWkEoD594oyrfR4L6V789sYLIb+AIQvvqb+ldhwO
ZPWcucummIMzcb98jCetm/S8k7k7kxyIVMMn+oW+0OrXUt79bgrFwwIV76+8QLT6
8zA29ibDwWMvEnQrFJmtLz9K6hOpQDScPkFlb8dHt9XGsi5b3js2IrxHh5khGoMU
Aa+GngBLutxku9M69++d3sJ+kq5D1A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:49:23 2025 by rpki-client