Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e684022-1ee4-34d3-8b47-c8c8f7e6b809.roa
File: 0e684022-1ee4-34d3-8b47-c8c8f7e6b809.roa (raw, json)
Hash identifier: /GLiqpV6ZDKnbGpp5vJGxKMwi7o8r/rEd3Xs1ZWo5iw=
Subject key identifier: 16:81:EA:41:4B:FF:FC:92:59:AD:D4:80:D4:4D:58:5A:A8:28:C3:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD0AC77F59B465DBE64A9DF30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e684022-1ee4-34d3-8b47-c8c8f7e6b809.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 150.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d0:ac:77:f5:9b:46:5d:be:64:a9:df:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=92f50d5e-f18d-401c-90fb-868025644e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:ee:a4:4b:79:27:d0:22:df:08:c6:ba:8f:
c8:77:01:93:40:20:d4:f4:1e:d4:58:b9:fd:02:0f:
4a:7f:7b:17:d5:dd:a3:c7:50:e4:fd:91:e8:2e:ad:
91:8c:62:17:21:65:de:1d:37:89:d7:57:4e:8a:2e:
e6:5e:2d:4b:24:a7:b9:1f:8c:61:b3:3d:3b:99:cd:
e5:84:3a:10:a1:83:32:ee:87:54:fc:9c:0e:59:92:
a2:86:c8:9b:3c:e3:31:44:46:f0:cf:75:be:1b:18:
2f:78:6b:3e:5c:3e:86:05:00:22:50:d1:e0:56:75:
20:68:3a:39:84:68:d2:01:4f:59:82:26:01:62:0b:
32:e8:aa:df:39:54:3b:01:e2:28:3d:51:bc:27:a2:
35:90:54:b4:8c:f0:82:5c:1e:75:5b:2b:e2:41:7d:
1c:70:5a:a6:ca:30:ff:6c:e9:fe:a6:8d:99:ab:b5:
03:1f:8e:90:71:2a:4b:88:6b:24:a2:d6:37:3d:12:
07:d1:6c:ae:71:57:98:c6:97:c2:c1:77:e5:3e:f9:
f4:9f:d4:f5:c5:e9:44:ea:b6:58:74:58:c1:98:b8:
a4:37:ad:0d:be:59:29:21:40:15:dc:02:71:6b:27:
5f:2a:42:c0:47:ca:db:5f:9b:fa:48:82:bf:71:9b:
3c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:81:EA:41:4B:FF:FC:92:59:AD:D4:80:D4:4D:58:5A:A8:28:C3:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e684022-1ee4-34d3-8b47-c8c8f7e6b809.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:46:eb:2f:59:35:40:6e:4f:8d:db:e7:2e:ac:35:cd:38:49:
43:21:b6:a2:4b:b6:e3:b3:6c:7a:b5:f4:d8:24:f4:43:0b:72:
fd:6a:39:34:95:34:4b:9d:94:7c:ef:f7:86:8a:61:85:a0:13:
ed:82:8a:6d:b8:22:00:96:0b:e0:54:2a:cd:8b:a6:4f:4c:2a:
1f:86:fd:90:bd:57:04:ae:af:3d:68:7c:9c:35:b2:a4:a7:34:
b9:dc:3e:d6:a5:ee:9c:67:a0:8f:96:57:46:ce:d2:df:89:fd:
40:31:c6:69:96:15:8c:38:43:ca:f5:e7:00:9e:b8:42:0b:1e:
b9:c0:68:82:67:53:d1:b6:8c:11:8d:e1:4f:b5:69:74:67:f3:
de:47:55:f5:a2:ff:03:f4:0c:3b:c1:0b:86:2a:aa:b7:76:b7:
f4:eb:d0:f1:cf:7f:c6:fc:8e:56:c2:54:7d:dc:93:c2:8f:0a:
5d:dc:af:86:86:9e:10:d8:1a:3a:63:a7:a2:97:69:a2:2d:bb:
13:a7:1c:ed:7a:6e:b5:ef:3d:8c:5d:1b:b8:c9:1a:d8:1c:b6:
78:ec:6a:6d:80:00:64:56:3f:7e:fd:51:a5:2f:50:2e:75:9e:
1c:fd:27:66:65:0d:0e:75:94:bc:9d:b3:70:95:22:3c:69:ac:
57:85:96:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:40:39 2025 by rpki-client