Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ff452a4-3aa8-3248-be54-c8c1756eafc7.roa
File: 0ff452a4-3aa8-3248-be54-c8c1756eafc7.roa (raw, json)
Hash identifier: czR3svgQQP/n40Ji0OJjorLNPeAiYDOaNJ1l6Wat4E0=
Subject key identifier: 98:84:E8:18:B3:07:49:6B:CF:18:F8:98:24:86:9B:18:7E:B9:29:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB4D366B413B2E8DA552A7380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ff452a4-3aa8-3248-be54-c8c1756eafc7.roa
Signing time: Tue 25 Jan 2022 05:00:00 +0000
ROA not before: Tue 25 Jan 2022 05:00:00 +0000
ROA not after: Tue 01 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b4:d3:66:b4:13:b2:e8:da:55:2a:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 25 05:00:00 2022 GMT
Not After : Mar 1 05:00:00 2022 GMT
Subject: CN=33377d8c-e573-45d7-bbf2-91f2f865c44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:f2:10:2a:b1:8a:b4:2b:88:df:4f:ff:7a:
92:96:cb:1d:6c:cb:6b:33:3c:6a:d9:21:ea:d1:6e:
99:3a:57:03:77:0f:5b:4b:1f:53:f3:f6:b9:cf:8d:
19:6d:19:5b:97:58:ee:c8:1a:5e:38:29:4c:d7:d2:
4c:c4:49:35:8d:e5:8d:e0:9f:71:92:ab:90:28:29:
05:ba:f2:68:5b:d5:53:3a:96:be:c5:f3:fd:1e:c8:
88:98:a6:7b:0e:04:eb:c5:92:62:1b:b8:77:6b:0f:
e1:9c:6e:98:14:06:bf:2c:98:7f:ab:b7:70:63:2c:
5a:1c:45:e3:f5:f3:45:38:15:ac:ca:88:8f:9f:c9:
a4:9d:7a:25:1e:62:fa:dc:57:02:3f:b4:35:18:07:
00:bc:31:08:ce:04:dd:ec:89:51:17:6d:a8:9c:e1:
da:32:7a:0a:58:c7:f8:27:1a:76:32:5d:29:cc:e2:
a3:4a:c5:50:ff:32:3e:bd:f1:5f:ae:e4:65:34:c8:
f6:b4:0e:c1:54:6a:c7:0e:ca:c4:ff:34:38:93:eb:
93:b7:3d:5c:e6:4c:9e:fb:95:e4:52:2c:5e:35:32:
a7:79:ed:85:e2:36:e8:b8:91:73:6d:b1:9b:67:70:
a8:98:06:b7:8a:df:74:3e:6f:d6:6e:ec:dc:cc:b8:
e6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:84:E8:18:B3:07:49:6B:CF:18:F8:98:24:86:9B:18:7E:B9:29:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ff452a4-3aa8-3248-be54-c8c1756eafc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:c9:d8:ec:37:fc:33:d4:9c:c1:68:fd:7c:e4:ea:5d:fd:6d:
dc:bd:44:d8:7a:ef:53:f2:cc:5a:60:a6:36:6f:0f:74:5d:95:
9a:fd:24:23:e3:23:b6:9f:eb:08:0e:2b:a9:8f:ab:fb:e6:57:
95:34:55:cc:94:f9:af:0d:90:54:9d:f5:22:9e:fb:a1:54:61:
1c:97:fc:d0:e0:7d:4d:52:6d:b3:04:11:02:3f:88:ed:0c:cb:
58:13:00:f2:76:02:6e:06:26:4e:17:f0:51:9a:4e:ee:38:4b:
3c:66:a7:a3:71:5e:0b:c6:17:07:cd:4d:66:3a:0e:3b:a6:34:
0e:cd:11:25:d4:12:5c:1f:8b:b2:4a:bf:c2:c0:98:04:8e:53:
6a:9f:58:ff:c4:f1:97:0b:16:fc:49:0a:38:e7:11:22:00:38:
e9:05:d7:8e:c4:98:42:8f:65:78:0e:d4:3c:1b:97:74:6d:ab:
6d:4c:7b:fb:2b:8b:c5:be:4d:51:77:77:11:7a:01:43:4b:4c:
84:f8:34:d0:d7:be:20:9c:97:ed:70:fc:2e:5f:a8:59:43:5f:
3b:d4:90:66:d3:5d:4d:53:73:5d:f3:31:3f:66:d2:0c:af:20:
4d:fc:93:14:97:45:1d:b6:5b:fe:f7:ad:ea:63:69:e6:56:c8:
a4:2f:59:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:46 2025 by rpki-client