Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1facb0bf-c664-3d3b-af4a-49d2f22ece6c.roa
File: 1facb0bf-c664-3d3b-af4a-49d2f22ece6c.roa (raw, json)
Hash identifier: IGtHRj082NHWM9+AB449olru90vA3WjDQB6vK+5BavA=
Subject key identifier: E6:35:05:D5:A9:5B:6E:A9:E4:A2:2F:E5:74:B2:67:23:FB:A4:84:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584038334A8E114DA2CB8F7FB800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1facb0bf-c664-3d3b-af4a-49d2f22ece6c.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:33:4a:8e:11:4d:a2:cb:8f:7f:b8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=00da4d78-5a5b-4577-b527-539c3821b411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:64:a1:7f:c6:d3:6e:65:72:42:63:7e:5b:
8e:a2:2a:13:9e:b6:27:17:2a:8b:c6:fa:9a:9c:1e:
fa:fd:ce:d9:41:01:91:71:f2:da:a9:a7:cc:95:43:
a4:9d:1b:ae:47:1c:bd:61:3b:8b:74:1f:ba:c0:c4:
07:8f:04:2b:6a:c1:7c:6c:17:4d:14:c9:97:fe:17:
bf:9d:5d:73:47:51:f4:ee:0d:7f:a0:17:98:0b:2f:
09:3a:02:07:26:55:7d:b1:43:42:c0:2e:80:a5:4a:
6b:ed:a3:e7:81:5d:5e:7d:5d:a1:4f:55:9b:f4:8a:
51:2e:6e:bf:f6:a7:13:bb:b5:23:f0:80:65:2b:c4:
61:14:34:ee:eb:57:6b:c6:56:d9:20:e7:8c:88:3c:
88:66:79:5c:8b:f1:91:40:cc:a9:c0:17:11:99:36:
f1:7a:14:bb:fd:9b:03:82:c4:03:06:2c:96:cb:27:
62:25:78:c3:e6:92:4e:9e:85:bf:8f:2e:f0:18:f9:
47:98:10:23:c8:a5:9d:a5:96:71:df:c2:81:56:ed:
3e:b5:4f:4f:df:b1:35:66:a2:34:b4:84:3b:68:42:
28:0f:57:81:9f:8b:44:9a:8b:bd:fc:78:22:e9:8c:
b9:64:0f:95:e3:79:87:1c:65:4c:9c:21:d0:99:5c:
e2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:35:05:D5:A9:5B:6E:A9:E4:A2:2F:E5:74:B2:67:23:FB:A4:84:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1facb0bf-c664-3d3b-af4a-49d2f22ece6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:ce:6c:61:a5:e3:a7:48:bc:84:96:ec:7e:17:ae:6c:ab:d3:
7c:87:a9:4b:d2:ca:3c:42:bc:71:4f:2d:e3:c4:57:41:84:76:
5c:df:ef:fe:e5:97:c3:51:d2:d6:9e:64:1a:b9:ae:16:16:f1:
45:43:2a:c9:0e:07:24:82:63:39:e2:2a:86:42:c9:1a:00:b4:
6e:4c:d5:59:7c:7e:be:61:44:eb:79:76:9b:5b:bc:1e:76:33:
c3:69:73:41:01:9d:04:73:34:1b:38:4f:ba:e6:9b:a0:bf:68:
02:c9:8f:60:87:ae:ef:d9:4e:8b:8b:65:42:e6:be:18:96:bc:
d4:37:20:54:dc:07:2e:20:88:ef:9f:32:28:34:47:0e:74:ea:
4d:f6:b0:51:65:75:6e:f9:b3:60:c9:76:04:fe:58:8f:66:c5:
fe:b7:ff:9e:91:22:6f:cb:4a:d1:18:9c:4d:7e:3f:fb:fc:fc:
8f:05:b1:77:88:80:26:05:7b:98:f0:9a:99:15:8d:38:14:65:
64:c9:61:34:fb:a6:d1:be:6b:b8:6c:ec:45:dd:59:24:bb:b1:
00:19:27:d2:69:cd:61:d0:9a:75:9c:fa:60:30:ec:18:90:b0:
80:ea:2c:88:b1:11:48:50:26:87:5c:8f:26:95:6c:5a:1b:a9:
4c:19:4f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:47:07 2025 by rpki-client