Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d5c22a1-a985-32a0-9ffc-8b378704962b.roa
File: 1d5c22a1-a985-32a0-9ffc-8b378704962b.roa (raw, json)
Hash identifier: CrJatVHtSC9ec3QseHZ5EVN+zYp3Jj6oUOAsZNBA0fs=
Subject key identifier: 41:E6:9F:0C:04:36:E7:34:21:74:17:EE:CC:DD:3B:BA:8D:B9:5A:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D9F46028345714576A7111A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d5c22a1-a985-32a0-9ffc-8b378704962b.roa
Signing time: Tue 19 Apr 2022 04:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:00:00 +0000
ROA not after: Tue 24 May 2022 04:00:00 +0000
asID: 701
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:9f:46:02:83:45:71:45:76:a7:11:1a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 19 04:00:00 2022 GMT
Not After : May 24 04:00:00 2022 GMT
Subject: CN=c4a95aa0-a7ec-4859-b5e9-16556bdfa24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:9e:f1:84:f0:88:b0:be:5c:9a:37:b1:3e:b6:
c1:6b:c0:93:e8:9d:bb:03:49:71:07:e0:a0:54:bb:
9e:cb:95:b5:ce:ea:62:3c:24:35:e3:b7:50:92:5b:
18:e4:c1:df:a0:82:8c:85:5a:5e:08:22:aa:38:44:
69:ff:3a:95:4a:97:0c:63:1a:24:a8:63:ec:ef:1b:
63:c0:ce:3d:53:d9:dc:1b:e3:6f:b5:5f:50:92:12:
a9:9e:83:2c:d2:95:c2:10:6c:cb:74:3b:09:87:8b:
f8:3f:b4:98:5f:38:45:56:5d:3f:31:5e:f8:65:07:
5a:29:fc:a7:40:7f:ed:23:c1:78:d3:c4:52:1c:2c:
77:19:4b:34:1e:3a:57:fe:e7:84:8f:22:14:54:f1:
9d:62:09:75:88:e8:e8:1d:b5:19:1f:46:dc:bc:33:
f0:ca:92:73:51:2b:43:f0:fc:f6:0a:dc:51:b2:e7:
0d:42:d8:5e:9b:a9:db:a0:70:e3:ae:7d:78:57:5d:
25:28:2c:34:b6:b6:22:07:3a:7d:b1:c2:e7:29:1a:
d0:c7:bd:af:9d:fd:17:39:f0:d0:9b:f6:e2:50:20:
9a:6c:69:07:c2:2b:3b:e8:2b:47:62:50:88:04:d5:
f5:cf:8e:4c:0e:aa:e8:27:96:7c:85:de:48:11:db:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E6:9F:0C:04:36:E7:34:21:74:17:EE:CC:DD:3B:BA:8D:B9:5A:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1d5c22a1-a985-32a0-9ffc-8b378704962b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:2f:e3:78:44:78:a8:cb:e9:19:1c:92:1e:c8:e4:27:91:fe:
d3:44:99:5f:e7:3c:ab:14:39:ba:66:ad:83:f0:04:5f:19:50:
0b:2e:1f:5c:8b:f0:d9:2f:bb:6c:bc:83:6d:40:da:af:e4:83:
ca:8a:25:15:a3:94:b2:e5:ea:b4:69:e2:08:24:21:e8:05:f3:
af:16:d4:df:34:c9:19:3b:30:9b:f5:ab:14:a0:8d:67:90:1b:
20:dd:3c:63:01:b6:8a:18:07:0b:48:48:1e:63:69:07:cf:e3:
65:63:e1:f9:8b:45:6b:e0:f3:b5:bc:2b:8d:f0:39:75:aa:5b:
cf:c8:ea:15:fb:58:21:33:88:69:35:5f:52:42:96:8b:ad:d4:
a7:0b:61:94:d5:32:e8:e4:9b:f2:ea:9d:df:a9:31:cf:ea:33:
27:ea:22:87:92:08:3b:2e:81:a1:87:7e:c2:43:b3:b9:f3:2d:
87:8a:67:8c:8a:19:82:5f:e7:ea:36:77:35:f4:3f:90:92:c6:
5e:36:9a:cb:bc:cf:0e:31:6b:43:26:0a:4c:dc:99:9a:e0:38:
a1:b3:11:1e:50:d0:7b:c6:eb:d6:62:21:b6:c4:84:8b:49:40:
c1:33:68:62:70:86:8e:95:6c:59:80:02:e5:fa:9d:8c:bd:fa:
a3:d5:53:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:23 2025 by rpki-client