Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ad0e7c7-75e3-360c-a9cb-3915f3161f5e.roa
File: 5ad0e7c7-75e3-360c-a9cb-3915f3161f5e.roa (raw, json)
Hash identifier: eSStDLxUEZloWbGJiGy7a3uY27gAG606rBoo1HbwcyU=
Subject key identifier: DD:86:A4:04:9A:D9:EE:DC:04:DF:00:6E:C3:F5:E9:06:1F:A1:1F:3A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6CA3BC6DE0C6EC97933C5900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ad0e7c7-75e3-360c-a9cb-3915f3161f5e.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 150.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6c:a3:bc:6d:e0:c6:ec:97:93:3c:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=1c87e9d6-b3fa-4ca5-8918-fabe451c6421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:81:3a:20:9c:07:c9:44:13:be:00:97:81:71:
5e:56:c4:6e:61:b6:a6:b5:c7:7e:86:66:84:4d:bb:
18:88:d1:fb:ce:d7:cb:d3:a0:0d:b1:e5:10:64:de:
b4:80:33:97:23:73:1e:a3:56:38:cf:5c:36:a8:a9:
85:90:61:3f:f9:53:83:db:de:87:57:d9:c3:94:d2:
2c:1d:a6:25:86:14:f5:e4:b3:0b:ce:53:e7:e0:28:
6e:d9:14:c6:ec:28:fd:3b:7d:e2:92:fa:8a:86:6b:
bb:8f:fb:3f:e7:f3:30:37:72:04:8f:0a:3d:c1:32:
51:4e:26:91:d5:83:da:a1:76:5b:dd:25:f0:6f:ab:
1d:c0:79:d7:32:b7:8f:5e:18:c4:8c:9e:f5:65:0d:
45:d2:15:cd:b5:d2:42:f4:30:a1:b4:b7:e9:e5:4b:
21:29:f8:d8:a8:c4:58:d8:4b:95:d2:1f:b2:33:57:
ea:2d:11:14:b8:cf:06:65:27:cf:5c:75:96:6c:22:
f2:bf:66:dc:8b:58:e6:5f:2d:58:16:e5:70:57:18:
26:47:c5:b8:75:a6:ee:9a:84:67:36:a7:de:57:42:
3b:a1:a1:35:20:3b:92:53:ae:dc:61:6a:d0:62:48:
06:86:9b:4a:fc:13:3d:b4:6e:70:22:a9:52:d8:84:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:86:A4:04:9A:D9:EE:DC:04:DF:00:6E:C3:F5:E9:06:1F:A1:1F:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ad0e7c7-75e3-360c-a9cb-3915f3161f5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e1:8f:f6:87:49:52:b0:82:eb:2f:d8:a0:1b:c4:34:34:4e:
c6:c3:c3:21:71:9b:99:b5:ea:d0:e1:60:41:2e:80:f4:e5:6b:
81:3c:66:e0:52:20:d6:6d:59:f6:0d:53:b6:eb:82:b6:30:33:
68:c2:bc:43:ce:ed:48:5e:28:76:cb:47:28:a8:d2:75:0e:ba:
bb:81:e9:a1:b7:21:72:2d:a5:4d:27:a8:3e:be:52:68:0d:fe:
1b:ef:e5:d4:9d:ed:90:34:02:2d:20:b5:3e:f6:2c:22:9e:a8:
e7:2c:d7:71:00:d6:e3:94:b9:c7:36:49:c6:e4:70:46:9f:b7:
02:ba:20:a1:f8:f5:9f:82:2e:97:d5:a7:a7:43:7c:d1:7a:3d:
6b:d1:df:14:bb:df:83:8d:e3:6a:df:10:42:93:20:c8:5f:1d:
20:a3:1b:5b:a1:37:29:6c:c5:f5:e6:6c:2e:2a:f8:1a:f4:61:
ca:2b:23:02:dc:fe:26:95:c9:76:70:59:b0:f8:9b:68:39:a1:
97:c0:a9:a6:98:80:66:84:82:55:a8:29:89:7d:b4:dc:51:52:
e2:f8:e5:19:de:f4:15:91:cb:ca:db:0a:8c:ec:31:d7:36:65:
00:76:6c:b8:4b:84:77:54:53:f0:16:80:71:49:fb:dc:f9:68:
43:01:00:de
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5so7xt4Mbsl5M8WQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYzMDEyMDAwMFoXDTIyMDgwNTA0MDAwMFowLzEtMCsGA1UEAxMk
MWM4N2U5ZDYtYjNmYS00Y2E1LTg5MTgtZmFiZTQ1MWM2NDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYE6IJwHyUQTvgCXgXFeVsRuYbamtcd+hmaE
TbsYiNH7ztfL06ANseUQZN60gDOXI3Meo1Y4z1w2qKmFkGE/+VOD296HV9nDlNIs
HaYlhhT15LMLzlPn4Chu2RTG7Cj9O33ikvqKhmu7j/s/5/MwN3IEjwo9wTJRTiaR
1YPaoXZb3SXwb6sdwHnXMrePXhjEjJ71ZQ1F0hXNtdJC9DChtLfp5UshKfjYqMRY
2EuV0h+yM1fqLREUuM8GZSfPXHWWbCLyv2bci1jmXy1YFuVwVxgmR8W4dabumoRn
NqfeV0I7oaE1IDuSU67cYWrQYkgGhptK/BM9tG5wIqlS2ISOvwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFN2GpASa2e7cBN8AbsP16QYfoR86MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWFkMGU3YzctNzVlMy0z
NjBjLWE5Y2ItMzkxNWYzMTYxZjVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlt4wVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWeGP9odJUrCC6y/YoBvENDROxsPDIXGbmbXq0OFgQS6A9OVrgTxm4FIg
1m1Z9g1TtuuCtjAzaMK8Q87tSF4odstHKKjSdQ66u4Hpobchci2lTSeoPr5SaA3+
G+/l1J3tkDQCLSC1PvYsIp6o5yzXcQDW45S5xzZJxuRwRp+3Arogofj1n4Iul9Wn
p0N80Xo9a9HfFLvfg43jat8QQpMgyF8dIKMbW6E3KWzF9eZsLir4GvRhyisjAtz+
JpXJdnBZsPibaDmhl8CpppiAZoSCVagpiX203FFS4vjlGd70FZHLytsKjOwx1zZl
AHZsuEuEd1RT8BaAcUn73PloQwEA3g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:35:15 2025 by rpki-client