Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0aa4641b-6a26-3df9-b517-edc3f11298c6.roa
File: 0aa4641b-6a26-3df9-b517-edc3f11298c6.roa (raw, json)
Hash identifier: EKhO1ZPE+Fflaebz1lPKWobsShCUgx+sNsTITfgDWBU=
Subject key identifier: 9E:CB:7B:14:29:A6:FB:AE:C0:3F:45:09:F0:6A:D2:5D:65:5C:F2:B7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EE21FFF2CD4690026DE45CCA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0aa4641b-6a26-3df9-b517-edc3f11298c6.roa
Signing time: Thu 11 Aug 2022 12:00:00 +0000
ROA not before: Thu 11 Aug 2022 12:00:00 +0000
ROA not after: Fri 16 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 150.126.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:e2:1f:ff:2c:d4:69:00:26:de:45:cc:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 11 12:00:00 2022 GMT
Not After : Sep 16 04:00:00 2022 GMT
Subject: CN=5278d477-47f5-4231-b853-41707ec5eb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d6:97:b9:69:2d:62:73:36:1a:01:ae:80:e6:
06:d2:28:39:c6:35:54:10:e5:d8:4a:fd:92:d1:8a:
fb:7b:34:4b:99:3c:ff:55:74:8b:ca:67:0c:3b:54:
24:b4:e1:ad:b5:8e:51:51:99:e3:f4:2d:01:38:e5:
45:dc:5c:09:e0:9d:20:23:a2:03:e2:5e:a8:15:d0:
5a:90:bb:18:25:02:a5:8d:08:99:33:d5:c0:01:52:
f2:ca:70:7f:76:fb:76:69:cb:77:cd:b3:3f:82:13:
d1:b5:67:26:21:d8:27:63:13:15:22:fd:4d:72:86:
72:0e:44:4b:4c:ea:b4:75:47:f5:bc:45:14:53:17:
7c:7a:3b:11:1d:2b:d4:c3:34:03:b4:bf:b4:76:78:
28:fa:09:5a:19:b3:cc:04:8c:f1:64:82:e1:fc:d4:
d0:f5:92:a1:b7:39:c9:3f:33:33:73:35:ca:2b:5e:
43:3d:17:ba:7d:0c:cd:a8:81:94:1d:e9:e2:e7:59:
2b:ca:ed:dc:5f:d2:52:7e:3f:24:cb:9b:7b:20:35:
fd:6c:7c:23:de:57:ed:6d:8c:2d:49:25:71:c1:39:
dd:71:2b:de:3e:16:a5:1a:dd:1c:a1:22:f0:eb:af:
1d:6c:56:8f:91:3e:50:94:9c:38:29:df:8e:5c:c0:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CB:7B:14:29:A6:FB:AE:C0:3F:45:09:F0:6A:D2:5D:65:5C:F2:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0aa4641b-6a26-3df9-b517-edc3f11298c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.126.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:8e:6e:af:67:e4:d1:9b:f5:a8:ef:f9:16:a2:1f:65:05:57:
79:1f:ed:1a:d8:f3:42:f0:82:73:32:e5:39:42:f8:b9:f8:37:
16:85:21:df:35:d2:ff:70:66:50:f2:6b:ad:ba:10:6e:a2:f7:
f9:d1:d5:ea:8b:54:21:3b:a8:7a:9b:70:f3:e8:ac:7a:76:e8:
3f:73:63:ed:b0:2d:9b:14:ee:e0:63:e9:e1:7e:25:c4:f3:66:
7d:64:0e:7e:8b:9e:d1:b5:81:ad:1f:9f:fa:70:67:be:a4:cd:
a8:02:bc:f5:c3:1f:02:6d:15:a0:9a:38:3a:6d:b6:8f:58:b7:
b9:5e:03:1e:e0:1d:ae:c8:19:89:12:ee:cc:7e:69:21:d1:41:
73:84:80:85:77:cd:e6:df:1d:84:3e:f1:ef:8f:7f:ae:b1:53:
a2:b7:b2:44:31:ef:20:ef:bb:eb:01:aa:88:16:bf:cc:29:50:
35:11:02:7c:36:a6:82:dd:a5:3e:2f:4c:7f:4f:a0:64:fa:7c:
7d:a6:8e:e1:8d:ea:af:96:04:6d:d5:d3:d5:e0:c4:5b:77:78:
6a:bb:5e:40:24:f1:71:56:d8:31:68:68:27:e6:33:73:7f:d8:
a6:c5:06:c1:a5:eb:9a:1b:4e:ab:43:a4:27:2e:83:b3:d7:3b:
77:6e:f1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:47:42 2025 by rpki-client