Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c18353d-72cd-33ca-af5d-0585fb7ff4de.roa
File: 0c18353d-72cd-33ca-af5d-0585fb7ff4de.roa (raw, json)
Hash identifier: N7MPyk1daFM3AmvzHovoz68WhRgUkGw/78yXMWXFxNE=
Subject key identifier: 47:29:13:05:E6:F2:0B:0B:D4:CB:83:CB:3B:BC:8C:A5:9C:F9:A5:CB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FEA1E83402DF2A422169E5D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c18353d-72cd-33ca-af5d-0585fb7ff4de.roa
Signing time: Mon 14 Nov 2022 12:00:00 +0000
ROA not before: Mon 14 Nov 2022 12:00:00 +0000
ROA not after: Tue 20 Dec 2022 05:00:00 +0000
asID: 701
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ea:1e:83:40:2d:f2:a4:22:16:9e:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 14 12:00:00 2022 GMT
Not After : Dec 20 05:00:00 2022 GMT
Subject: CN=5f07717b-733e-46b9-88ec-10f580fb5e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:72:56:d6:03:2d:6b:48:c8:ce:4a:fe:c7:
be:d0:6c:b1:d5:39:14:cd:70:85:c2:f2:49:66:47:
42:c6:a7:4c:04:34:90:6e:44:11:1e:0e:fa:f6:d3:
3d:1b:df:65:14:1b:9a:01:8b:22:df:c9:70:ac:1b:
68:ec:b0:d3:66:88:2f:54:66:b0:58:9f:55:1e:38:
d7:53:e4:79:73:48:4a:8d:28:3c:0b:9d:86:0b:87:
09:13:ee:e1:a1:e4:b6:61:f8:2e:5e:45:1c:b0:f4:
84:76:65:56:d3:af:4f:5b:c8:0e:67:82:ae:0c:8e:
7e:44:cb:c1:a8:56:26:c4:44:9d:69:48:b2:26:1b:
0c:a1:12:89:08:6e:09:f9:e6:3e:6c:bd:55:51:9f:
4f:79:c1:4d:8e:f0:99:d0:79:a5:83:39:91:8c:09:
cb:26:09:f5:78:60:52:59:78:e4:cc:00:51:08:b4:
9f:80:5d:3a:8e:3c:2a:63:43:9a:d7:70:e2:b4:d6:
0d:a7:e2:dc:49:21:76:59:3e:16:5a:7a:bf:ad:85:
b8:54:b9:f6:55:52:bc:d7:34:3a:d3:52:21:fa:de:
2e:3c:92:1f:33:cf:74:25:9a:e3:cf:bb:32:92:a6:
9b:4e:2d:ad:bb:ac:e7:a0:77:e4:7a:43:79:81:9e:
af:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:29:13:05:E6:F2:0B:0B:D4:CB:83:CB:3B:BC:8C:A5:9C:F9:A5:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0c18353d-72cd-33ca-af5d-0585fb7ff4de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:7a:d4:08:d9:2b:b6:61:04:f7:59:0c:92:20:1b:f1:03:e4:
93:bb:e4:45:58:f2:b6:e0:3a:e4:82:03:e6:bf:c5:ef:03:02:
d1:72:d5:21:d5:8a:b6:3d:37:76:30:3f:1e:bb:d7:d7:bd:01:
e4:c2:bc:1a:f2:e4:05:71:0b:93:b7:00:d6:00:9e:48:a2:e3:
67:5e:d8:ea:3b:c3:34:6e:f4:55:70:cd:35:e5:64:10:80:f6:
a8:2d:df:73:89:47:fc:36:e0:a6:a0:59:32:2d:ad:d4:da:d5:
64:cc:01:d8:c3:8d:65:a8:23:7e:5c:eb:ee:51:5d:69:b4:f4:
0c:70:a5:6d:92:24:20:92:cf:bd:34:dc:1f:43:3c:d3:5c:32:
8f:cc:11:ea:c9:39:10:6e:8b:e2:4d:d3:e2:76:bd:f6:09:48:
2e:86:d1:2b:b8:e5:58:12:f2:47:9d:c3:67:11:8e:b0:9c:26:
2b:bd:5d:81:67:82:bc:a8:39:e7:4e:09:e7:f4:71:ab:a2:88:
ed:18:27:82:c6:eb:06:8f:bd:a8:8f:f6:d0:8f:7b:c9:4f:36:
74:e0:f3:07:b3:f5:06:c3:1e:99:a1:91:14:be:1f:7a:27:0e:
47:10:4e:95:b1:3f:65:15:0f:3f:12:8f:9c:68:16:b6:bb:27:
bc:05:5e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:20:20 2025 by rpki-client