Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca9b8df4-87c5-39bb-bc5f-6a8a0dab48a9.roa
File: ca9b8df4-87c5-39bb-bc5f-6a8a0dab48a9.roa (raw, json)
Hash identifier: bELgVuCx37IpaIQcGBpW1+p7SacCqWMifCIbKo898sY=
Subject key identifier: 49:B2:AB:F6:3E:81:B8:1C:AE:1A:D9:0A:03:DD:1B:72:C8:24:81:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE55CD6572C84EEF473BF47E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca9b8df4-87c5-39bb-bc5f-6a8a0dab48a9.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 150.222.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:5c:d6:57:2c:84:ee:f4:73:bf:47:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=bdf90d95-2b54-4dce-a0a6-075e7ef558ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:1a:af:57:7b:8f:00:00:09:69:6d:f3:92:
b2:42:d4:c8:f8:a3:c8:b3:fb:0f:27:c6:cb:b5:8f:
ef:65:ca:4e:c3:4b:dd:62:e4:df:cc:d2:51:94:57:
9c:c6:21:bf:b1:8b:eb:68:c9:59:eb:9d:e6:e5:84:
ee:02:16:05:a0:87:52:6f:41:b5:e9:2e:1d:c9:d7:
fa:e8:87:ab:bb:8b:4b:37:36:3d:d8:ca:52:0e:55:
af:10:be:02:72:4e:92:ff:09:bd:df:1b:11:55:cb:
94:7c:d3:4c:3f:dc:3f:b2:45:b0:7d:59:11:0a:40:
95:60:10:d1:ce:3f:c3:15:bc:3e:b2:59:a7:a8:29:
77:b7:3d:52:fe:21:5c:38:b7:09:0c:a7:03:12:22:
ac:c8:e9:be:44:75:af:3b:8f:da:f0:c6:3d:46:54:
e3:67:9b:45:87:19:e5:3e:cb:41:e9:05:f2:b5:d1:
e4:58:f0:9d:8d:4c:cf:86:24:99:b4:37:f9:9b:53:
cd:28:a0:ca:9e:2a:7c:4e:7a:6e:90:cf:27:a3:17:
8e:ee:53:96:9a:7d:3a:af:49:d2:63:52:6d:a0:df:
c2:c8:d2:a4:9f:57:84:74:f7:b7:81:7c:cf:03:8f:
a2:8e:ed:2c:29:94:0d:0d:bd:24:36:73:1f:13:56:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B2:AB:F6:3E:81:B8:1C:AE:1A:D9:0A:03:DD:1B:72:C8:24:81:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ca9b8df4-87c5-39bb-bc5f-6a8a0dab48a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
150.222.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:52:32:46:c9:1f:65:4f:95:3e:7b:a1:12:3d:8f:35:0f:50:
59:6a:34:3c:9c:ae:c0:db:71:74:6d:35:90:1f:84:2e:cb:98:
b5:34:ae:a1:f3:b7:8f:08:b8:fe:c7:01:a1:88:06:c2:e3:04:
75:30:f2:ee:4f:04:8e:8d:f2:4a:89:35:8e:d1:11:90:f6:7e:
81:1e:7f:fb:c7:6e:82:b7:34:bf:be:64:1a:2b:14:9a:c3:80:
bb:8e:f4:87:d1:f6:0c:fd:3b:fe:54:71:61:ce:b8:36:a1:ff:
6a:b0:f7:57:0b:bc:8b:63:a9:95:d3:5e:47:2b:b5:34:6a:60:
3a:0e:02:7d:a0:3b:bd:48:a0:a1:ea:5c:0e:5d:9d:2c:13:27:
f9:33:78:3b:d2:13:21:c1:f5:92:e2:ec:15:81:39:6d:f5:19:
7e:6d:c6:1d:39:10:21:07:8b:a5:20:65:2c:7f:f8:af:a6:18:
8d:e0:c0:31:ff:69:43:28:70:5d:ba:5e:b5:76:02:60:5d:e1:
e1:1d:0d:22:1b:c5:82:99:ca:b3:e7:20:2a:49:af:6f:98:0c:
2d:28:6c:e0:4d:3b:37:59:a6:7c:fd:fb:e7:ef:a3:8b:ab:6f:
94:9c:47:23:5a:66:8e:75:4d:d5:b7:1b:46:ce:cb:ac:50:e6:
32:d3:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:57 2025 by rpki-client