Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e821b24-cb49-3b7f-bbab-d12c099de1b3.roa
File: 1e821b24-cb49-3b7f-bbab-d12c099de1b3.roa (raw, json)
Hash identifier: JaEIkb0qX/P8xqu6nRSnql1lWLJ9d8QYJnVNLI+pjOY=
Subject key identifier: 4A:90:C2:11:17:0E:C4:C1:20:DB:75:3E:0B:A0:87:FA:63:6C:FF:34
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EFF868D39139E29CAAF28D400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e821b24-cb49-3b7f-bbab-d12c099de1b3.roa
Signing time: Mon 22 Aug 2022 12:00:00 +0000
ROA not before: Mon 22 Aug 2022 12:00:00 +0000
ROA not after: Tue 27 Sep 2022 04:00:00 +0000
asID: 22394
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ff:86:8d:39:13:9e:29:ca:af:28:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 22 12:00:00 2022 GMT
Not After : Sep 27 04:00:00 2022 GMT
Subject: CN=f826ef07-e7f9-4c0c-af67-7a4879c43448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:d0:47:77:7f:75:e8:12:b2:66:53:54:f7:
35:44:e4:b4:fc:70:38:34:65:4a:28:13:85:44:1d:
a5:ee:2f:cc:0d:a4:3d:62:c2:9e:6f:fd:d7:2d:59:
70:eb:dc:0d:82:da:03:2a:9f:8f:9d:37:1b:fd:86:
0e:ff:36:cb:b4:84:f4:93:6d:45:9c:c1:d2:7a:d2:
96:e4:fd:9d:7c:1e:10:4c:cf:5e:3c:3a:c8:58:88:
e8:8d:1d:dc:fd:3e:aa:82:ac:17:c3:67:c2:1b:e8:
69:86:f8:93:37:94:01:9d:e5:3d:30:6a:57:1d:c7:
dc:88:42:33:a0:cd:8c:fa:31:73:fd:8c:7d:b8:72:
17:e5:21:98:6e:1a:0b:2d:9e:77:65:22:7f:31:91:
bc:f0:c8:bb:3d:a9:6d:d7:a8:04:7c:da:db:65:cb:
d4:6f:78:fb:6c:c3:1e:53:6c:26:8b:4b:8e:d2:45:
9c:51:b4:14:b5:e7:32:b8:00:07:a1:f7:92:6f:62:
27:e4:ca:59:8f:6f:b4:70:b1:7c:5b:43:36:43:66:
32:f8:61:39:00:c2:5c:5f:ce:a4:7c:1f:4e:bd:51:
cc:94:9d:92:fc:69:0e:c2:e0:5a:1b:3d:ec:fe:c0:
d9:0f:0d:3e:4c:10:3d:d5:60:e4:5e:56:e1:ad:90:
b6:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:90:C2:11:17:0E:C4:C1:20:DB:75:3E:0B:A0:87:FA:63:6C:FF:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e821b24-cb49-3b7f-bbab-d12c099de1b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:36:45:59:99:df:21:95:3e:c3:79:65:95:6b:74:8d:be:40:
aa:8c:66:3f:f0:20:c7:c1:c8:1a:28:f3:c7:72:74:25:e3:31:
81:e6:9c:e4:01:27:79:15:7a:ec:b8:e5:a6:60:fb:92:5a:2f:
f7:b5:73:86:1c:8d:a5:0c:b8:ea:cd:ae:8e:b0:34:ef:55:14:
ea:10:e9:7b:78:c0:b0:50:46:30:82:63:71:c3:b4:03:14:97:
17:82:6c:7e:22:d7:4d:0e:14:ca:17:57:b1:81:ac:15:96:94:
04:e5:b7:6e:6a:a1:b0:32:b8:7b:2d:90:5d:32:78:c4:e3:69:
55:30:25:47:ce:c6:fa:9c:dc:65:38:89:62:ef:25:e7:f1:13:
6e:6a:b8:b0:76:11:f9:9f:6a:eb:b8:f9:8f:b9:4f:90:de:b6:
7f:ee:b5:cd:d1:c4:12:ce:77:a5:45:90:ec:d7:26:ac:30:af:
05:85:a5:e0:66:9f:96:1a:c5:bd:af:21:ad:73:b1:f9:e7:c4:
d7:d7:d7:27:f6:6a:bb:5f:13:2d:15:c6:87:f5:5c:31:ae:c4:
28:0c:a4:17:0f:8e:2b:32:15:b1:a1:d2:cf:29:c1:bf:ec:c3:
8b:a6:a0:a7:cd:29:2b:b5:a7:8f:b6:f7:64:cd:6b:d8:4e:9b:
1f:db:53:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:34:11 2025 by rpki-client