Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f942aa8-74e4-35c7-a331-bf1bdf1528d2.roa
File: 0f942aa8-74e4-35c7-a331-bf1bdf1528d2.roa (raw, json)
Hash identifier: znEbWOv2dAsv6sqxwW00I7shUZGaUynUuxVq8aSFfoA=
Subject key identifier: A0:24:BC:66:0F:56:F2:0B:B3:5B:AB:34:3B:E7:08:C5:67:78:A2:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3BE689701EF59282200A7200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f942aa8-74e4-35c7-a331-bf1bdf1528d2.roa
Signing time: Mon 13 Jun 2022 12:00:00 +0000
ROA not before: Mon 13 Jun 2022 12:00:00 +0000
ROA not after: Tue 19 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3b:e6:89:70:1e:f5:92:82:20:0a:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 13 12:00:00 2022 GMT
Not After : Jul 19 04:00:00 2022 GMT
Subject: CN=777eaf01-0fc6-46d6-a95f-3e97af8bb3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:6a:be:0a:c3:21:10:18:64:86:ba:dd:9b:9d:
89:49:a1:c1:76:cd:eb:aa:8d:d4:91:9a:35:47:78:
f7:62:bc:b6:ff:8c:55:a1:17:11:02:4e:80:3c:4b:
03:4c:3b:f7:b9:69:5a:3b:23:5d:cc:f6:33:6f:26:
47:d5:70:09:b3:21:f4:7c:e4:cc:68:39:88:db:ae:
4f:9b:09:21:8f:20:a1:19:c6:1e:24:0d:1e:4f:27:
74:ed:f0:1e:ad:ad:25:c1:50:f2:d8:0c:73:d3:d9:
b2:58:3a:53:ce:81:20:1b:af:ef:fe:ba:fc:fa:4e:
ea:7d:47:7c:c5:2c:3a:f8:09:ef:41:9a:56:20:c2:
bc:dc:97:9c:40:ea:6e:75:95:0e:72:69:5b:8e:4f:
72:18:34:c8:51:44:fb:e8:a8:24:35:36:31:09:fe:
2f:b1:94:06:6a:0e:f3:17:5f:cf:3d:57:8e:74:8a:
49:8a:dc:e5:6f:f0:a2:36:62:f9:ed:59:21:f8:2e:
d4:3b:76:f9:88:c3:89:e6:5c:3f:ed:bc:21:12:8a:
a1:d2:4b:34:77:b8:a2:04:5e:3c:e6:6b:56:f1:7e:
f2:6a:28:a6:33:ce:2c:01:5d:db:37:8e:61:b8:21:
71:ea:06:59:c2:7f:30:9f:c8:e8:b4:5d:48:ea:ed:
59:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:24:BC:66:0F:56:F2:0B:B3:5B:AB:34:3B:E7:08:C5:67:78:A2:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0f942aa8-74e4-35c7-a331-bf1bdf1528d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:6e:68:4d:1c:51:01:97:a0:67:32:61:a9:a9:4a:e7:e5:3d:
61:d0:e0:71:51:3a:3b:47:78:5f:95:b2:be:71:6d:79:f6:58:
fc:8d:85:9b:da:87:48:80:89:e1:53:0c:d7:07:59:00:2e:5c:
c7:e9:88:f0:53:eb:cd:df:e5:10:62:17:77:b7:d2:1e:8b:a6:
8e:77:56:24:a6:f3:46:4c:25:19:f9:d4:bb:f2:27:4c:25:07:
fd:fe:65:ba:5c:56:df:1b:4c:d7:6e:9c:84:13:41:02:c0:5a:
53:db:68:61:df:aa:79:ed:9d:fd:6b:6a:23:4e:72:8a:6c:58:
dc:07:cc:44:b6:45:7a:9d:a6:6d:c2:db:58:8f:6d:41:0e:e1:
c2:04:1f:b9:88:18:f5:32:1c:af:53:ec:a3:56:04:af:ed:eb:
8e:83:2a:e3:0e:a9:e6:ba:86:bd:5e:ce:95:3a:5c:40:1b:11:
5d:29:78:11:ef:6e:d8:a4:48:ff:db:e3:1a:42:26:8c:b5:b6:
63:9c:bc:bc:ee:11:bd:39:68:1c:91:a7:77:3b:80:eb:32:d7:
8a:3a:73:16:f7:4a:61:7d:fe:db:c3:47:a9:69:94:4f:2a:9b:
05:5a:4b:53:6d:0f:2e:58:01:01:2e:64:66:7a:16:8f:b1:75:
0f:be:e4:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:40:07 2025 by rpki-client