Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec9f8f4-d519-3712-8211-36c10cb3e620.roa
File: 3ec9f8f4-d519-3712-8211-36c10cb3e620.roa (raw, json)
Hash identifier: Jim4pcoPfCWCspOEdfXe0uE0OMdEF4gRGPswXRtCClU=
Subject key identifier: 0A:33:26:A2:80:FC:E7:D1:9A:02:8C:5D:3E:96:C7:83:26:F8:DF:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3491825784851D1EDD3D1D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec9f8f4-d519-3712-8211-36c10cb3e620.roa
Signing time: Sat 10 Sep 2022 12:00:00 +0000
ROA not before: Sat 10 Sep 2022 12:00:00 +0000
ROA not after: Sun 16 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 150.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:34:91:82:57:84:85:1d:1e:dd:3d:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 10 12:00:00 2022 GMT
Not After : Oct 16 04:00:00 2022 GMT
Subject: CN=0fb3c873-6fef-4532-8653-e41055c0dc5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:e4:9c:00:51:21:65:93:c0:7f:f4:bc:e2:
46:b1:42:7f:68:30:7e:44:ac:0e:8a:7f:82:ab:4d:
29:8d:3a:6c:e4:b5:ac:41:79:9d:c7:6e:77:2c:09:
85:0f:e5:ae:78:2d:55:ec:ad:b8:fa:f5:20:cf:91:
b6:36:68:46:fe:44:c9:aa:0f:fb:91:ba:a0:59:46:
f5:dc:e9:d0:a6:6e:b8:34:50:08:a4:94:49:50:92:
7e:4e:79:d3:8b:3c:5c:a8:0c:96:89:41:d4:d3:e8:
5e:a9:9b:fe:01:80:1e:01:ca:fe:de:5f:89:fe:7a:
43:a3:24:21:19:db:be:21:14:b0:bd:7f:62:72:b9:
c7:c6:3f:5b:df:61:b7:c4:58:ac:a6:17:b6:6a:02:
1a:27:a1:24:23:25:5c:29:d4:9f:79:44:67:aa:e6:
99:32:92:07:d6:dd:3f:2a:79:56:d6:14:4a:dd:4e:
4a:0e:26:3b:af:29:6f:76:34:cb:3c:b6:34:17:79:
91:23:03:33:63:d5:a8:c4:e9:34:b5:1d:17:a8:a1:
27:4e:7f:4b:4b:79:0d:e2:c2:00:76:c5:21:6d:06:
15:f1:ee:a2:46:e1:68:7b:11:6b:e0:6f:f3:99:dc:
85:c7:66:50:de:aa:03:a0:40:fc:04:19:40:f5:54:
8c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:26:A2:80:FC:E7:D1:9A:02:8C:5D:3E:96:C7:83:26:F8:DF:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ec9f8f4-d519-3712-8211-36c10cb3e620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:63:d9:1d:31:fe:7f:5b:81:11:8d:54:63:74:d2:20:e1:39:
19:23:22:41:18:5c:3f:58:3b:ca:b4:38:5a:6a:23:58:9f:a2:
a4:cf:95:32:90:94:0e:25:82:42:c0:dc:a7:2c:c2:44:29:07:
bd:6c:bd:c7:85:1b:e4:5f:7e:48:7d:63:38:46:f5:63:18:83:
c0:4d:17:60:85:60:82:e1:22:24:2f:d1:93:16:3b:33:f7:c1:
29:5e:7c:86:c5:d3:c8:f6:b8:7b:90:51:25:96:6b:c7:8b:39:
cc:45:a4:93:80:9c:83:9d:94:25:fb:ca:e7:18:c0:28:39:87:
82:37:a5:bf:96:af:77:1c:41:17:41:ed:81:fa:a1:e6:6b:f8:
fa:30:9b:4d:6f:5d:61:85:ca:37:99:52:b3:23:6a:68:ea:ec:
69:bc:3b:91:17:45:5c:7d:20:07:c5:43:4d:cd:57:2a:05:42:
55:01:34:72:e4:be:54:2f:4a:c1:de:bb:7b:bb:ec:af:e6:14:
c0:e9:3c:97:e5:f0:4a:60:b2:bd:3c:37:49:41:cc:86:81:40:
3f:06:fc:d6:92:17:d8:16:1e:a8:05:78:0e:5e:ac:76:ee:24:
c6:a9:e3:20:fe:a3:c0:e5:00:4b:5a:96:8f:c5:61:08:3d:94:
2e:cb:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:16 2025 by rpki-client