Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aae65f31-a618-3cff-9ad9-353e5b29f4b1.roa
File: aae65f31-a618-3cff-9ad9-353e5b29f4b1.roa (raw, json)
Hash identifier: L/5Hpb0niwGAsiwKuNLp/KF0LlUi5X4ezt7xIlRnCrU=
Subject key identifier: 3B:51:E9:5E:2A:4C:6D:D8:0A:DB:CD:33:8F:82:3E:C9:D1:03:03:D3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA996E0B7FA7E54891741CD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aae65f31-a618-3cff-9ad9-353e5b29f4b1.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 150.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a9:96:e0:b7:fa:7e:54:89:17:41:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=83b4a899-5175-43ea-80c8-c9bd937c87f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:56:4b:ab:2a:8d:8d:f9:1a:bb:56:9e:d8:3c:
88:53:96:ef:57:0d:11:ec:84:1a:fc:74:60:69:07:
b1:5e:2b:b7:0d:c1:22:58:a7:ea:65:8f:09:ad:a7:
c2:a3:6d:f0:e3:85:ab:77:8a:94:ac:a6:e8:d4:bf:
25:13:ba:f4:12:e5:cf:2c:7b:54:78:fa:91:19:10:
9f:2f:75:2f:3d:98:16:3f:6d:44:41:01:8e:8b:35:
eb:d2:cd:b7:e0:77:ee:23:b4:a7:c1:23:32:32:79:
81:5e:97:1d:76:7f:db:e6:21:7a:aa:41:21:20:54:
1c:50:85:6b:ba:7b:87:ff:98:21:73:06:e8:61:85:
90:4a:1d:d6:0f:70:f9:6c:67:5d:66:54:17:ce:e2:
dc:df:b8:c2:e2:5d:c8:33:f0:5b:df:28:98:b4:38:
42:88:f9:ad:bd:36:fd:e4:73:0e:71:b6:16:08:b1:
36:2a:5d:d2:8f:7c:90:27:9c:d2:b6:44:62:be:78:
0b:f7:9d:46:cd:7f:31:85:40:44:c7:d8:04:00:e7:
9c:df:c8:8f:26:d4:47:c0:1d:99:14:d6:07:ed:87:
54:24:38:63:18:f2:c9:b8:e3:36:3a:85:97:41:83:
6d:de:40:97:33:44:fc:f1:e1:ad:d8:cc:34:c6:ad:
87:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:51:E9:5E:2A:4C:6D:D8:0A:DB:CD:33:8F:82:3E:C9:D1:03:03:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aae65f31-a618-3cff-9ad9-353e5b29f4b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:dc:88:1e:47:0f:38:43:b1:d6:9b:7f:48:77:aa:bf:c0:9f:
8c:53:52:e3:00:8b:ac:05:a8:2a:3f:b0:7d:43:93:0b:72:a3:
66:4c:d2:3a:fb:47:67:79:43:2f:8b:8a:81:3a:37:60:2f:18:
28:f1:6e:98:68:32:d6:e9:6d:b3:fd:28:b7:c0:b7:50:75:9a:
6c:0b:d7:b7:a3:7d:b2:07:27:e6:b7:e7:d6:1f:7e:f9:d8:19:
61:95:7a:b9:b3:3f:3b:3d:cc:b2:77:5a:aa:8c:ae:ff:74:d1:
cb:40:9a:2c:91:73:0a:71:30:1e:a8:65:42:3f:1e:5e:03:5d:
12:61:da:de:94:83:91:19:ff:c5:78:e4:24:a6:ae:9d:b8:08:
00:e9:68:fe:ab:aa:d8:c3:dd:c6:ad:b9:b0:fd:ea:6f:1e:e0:
63:a0:b9:72:b5:16:59:a0:08:ff:7d:b1:58:5d:b9:1f:32:3a:
5a:f0:e8:c4:be:2d:02:ab:fe:04:e4:78:a6:0f:e0:28:60:70:
1a:78:d0:0a:72:15:5b:43:c3:ee:c1:2f:f1:d4:cb:ae:74:39:
0f:a9:91:33:a5:59:c1:1f:0a:1a:46:1f:28:e9:8e:e8:b2:03:
00:bc:63:1f:88:e1:91:ec:8d:c7:1d:d1:62:18:10:f9:d1:31:
20:97:6e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:50 2025 by rpki-client