Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fba647b0-6969-3d3d-b5aa-2390010e32e4.roa
File: fba647b0-6969-3d3d-b5aa-2390010e32e4.roa (raw, json)
Hash identifier: vvjcPI/b6gOwqqjJtFccSi5v6jXZcPMu8GYQkpt2hJM=
Subject key identifier: 97:46:CB:62:FA:3F:59:A8:01:74:F2:9F:C8:8B:CD:40:AB:56:75:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB1D1AEA810347B3668448E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fba647b0-6969-3d3d-b5aa-2390010e32e4.roa
Signing time: Tue 25 Oct 2022 12:00:00 +0000
ROA not before: Tue 25 Oct 2022 12:00:00 +0000
ROA not after: Wed 30 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 15.144.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b1:d1:ae:a8:10:34:7b:36:68:44:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 25 12:00:00 2022 GMT
Not After : Nov 30 05:00:00 2022 GMT
Subject: CN=167ab2a5-d3e8-478c-a244-ef03b14c0413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:8f:bd:24:c8:41:13:58:a0:55:cd:6a:db:
2c:0a:0f:e8:d4:30:f9:70:29:cc:68:45:37:63:9c:
6a:4c:7b:8d:de:99:4b:9e:bd:76:de:b5:7d:cb:08:
f4:04:2f:0b:42:8b:f4:7c:a9:45:3a:67:71:82:dd:
7b:29:0d:42:3f:f0:45:5a:0e:b1:05:91:87:7a:ec:
fb:96:b3:6a:18:2e:9b:b4:77:7b:29:d0:4c:d3:31:
b3:e0:ec:6d:71:ee:a8:64:1a:59:45:65:dd:74:13:
bd:e1:ae:7f:27:87:11:56:e4:9c:5e:f2:be:44:c7:
c0:c5:93:9c:1d:e3:00:ed:eb:06:3e:3a:4b:c6:f3:
3a:0a:82:49:b8:2a:ae:73:2d:ec:a2:9f:42:a7:98:
33:8e:6d:85:e8:f1:77:c1:5f:31:40:bb:52:da:7b:
38:60:49:a9:1f:e5:1c:de:f1:cb:51:23:f6:8d:1f:
b4:b5:69:1e:4f:19:80:b2:ed:96:78:10:57:d9:1d:
f5:48:d4:ef:fc:1f:ce:ab:9b:de:2d:57:30:e3:40:
c3:f0:19:c7:b2:84:19:d6:5a:39:93:b1:d0:c4:33:
62:75:07:93:17:f8:14:5c:a9:07:73:2c:10:e5:16:
42:fe:f2:7c:79:df:83:0d:e6:9e:e1:82:70:76:8f:
69:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:46:CB:62:FA:3F:59:A8:01:74:F2:9F:C8:8B:CD:40:AB:56:75:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fba647b0-6969-3d3d-b5aa-2390010e32e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
15.144.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:61:60:18:fc:31:8c:72:18:ae:34:69:5b:49:98:16:f9:67:
45:d3:1c:dc:dd:0e:1c:32:3e:ca:3e:b2:44:61:67:e8:ca:fe:
eb:80:d0:77:44:cf:9d:1f:8a:a0:ca:e8:a2:1e:b0:2d:48:e0:
fc:b6:5d:5b:2c:18:20:99:c6:a5:cb:ba:2e:91:46:58:1b:40:
b0:fa:0e:78:bf:0d:d0:62:3b:4f:99:a0:11:7d:1b:59:c5:2b:
71:a4:b1:1c:9e:2c:34:77:95:47:ad:88:a1:b1:02:a1:aa:c3:
f7:e0:0c:39:1b:2e:96:14:3d:99:3a:2b:fc:22:05:26:79:c9:
93:30:85:52:3c:fd:ba:8d:e1:79:62:76:0e:cb:a3:80:2b:97:
53:2b:f6:f1:24:f9:6b:21:3d:b9:a6:b1:4f:80:8d:00:2a:91:
f3:1b:b2:82:01:b8:5b:9a:a3:cc:ae:7e:a9:ab:e7:f5:95:bf:
57:e2:18:ca:ff:61:5f:73:b5:8e:6f:62:a6:64:80:c5:07:ce:
76:e9:af:bd:e3:4e:a0:50:25:9f:95:7c:ef:ec:0d:19:82:ec:
85:29:2e:71:16:c4:af:dc:84:e6:fa:1d:d7:46:eb:83:7d:0a:
7c:be:5e:1c:c6:6d:03:3b:5a:0e:1c:f7:8d:ab:bc:9c:1b:74:
00:18:fa:5c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+x0a6oEDR7NmhEjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyNTEyMDAwMFoXDTIyMTEzMDA1MDAwMFowLzEtMCsGA1UEAxMk
MTY3YWIyYTUtZDNlOC00NzhjLWEyNDQtZWYwM2IxNGMwNDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn2PvSTIQRNYoFXNatssCg/o1DD5cCnMaEU3
Y5xqTHuN3plLnr123rV9ywj0BC8LQov0fKlFOmdxgt17KQ1CP/BFWg6xBZGHeuz7
lrNqGC6btHd7KdBM0zGz4Oxtce6oZBpZRWXddBO94a5/J4cRVuScXvK+RMfAxZOc
HeMA7esGPjpLxvM6CoJJuCqucy3sop9Cp5gzjm2F6PF3wV8xQLtS2ns4YEmpH+Uc
3vHLUSP2jR+0tWkeTxmAsu2WeBBX2R31SNTv/B/Oq5veLVcw40DD8BnHsoQZ1lo5
k7HQxDNidQeTF/gUXKkHcywQ5RZC/vJ8ed+DDeae4YJwdo9pSwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJdGy2L6P1moAXTyn8iLzUCrVnUbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmJhNjQ3YjAtNjk2OS0z
ZDNkLWI1YWEtMjM5MDAxMGUzMmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAD5AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAC2FgGPwxjHIYrjRpW0mYFvlnRdMc3N0OHDI+yj6yRGFn6Mr+64DQd0TP
nR+KoMrooh6wLUjg/LZdWywYIJnGpcu6LpFGWBtAsPoOeL8N0GI7T5mgEX0bWcUr
caSxHJ4sNHeVR62IobECoarD9+AMORsulhQ9mTor/CIFJnnJkzCFUjz9uo3heWJ2
DsujgCuXUyv28ST5ayE9uaaxT4CNACqR8xuyggG4W5qjzK5+qavn9ZW/V+IYyv9h
X3O1jm9ipmSAxQfOdumvveNOoFAln5V87+wNGYLshSkucRbEr9yE5vod10brg30K
fL5eHMZtAztaDhz3jau8nBt0ABj6XA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:17 2025 by rpki-client