Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2868c5b3-3d47-3c35-a813-9d8b5531459e.roa
File: 2868c5b3-3d47-3c35-a813-9d8b5531459e.roa (raw, json)
Hash identifier: Q/oVixTEzbuRqQDVc5Po0DRzf0hdn068izuGFYu9E64=
Subject key identifier: D4:53:24:57:B4:A3:48:2C:55:04:6D:9F:1D:B1:9B:44:B4:20:AD:E2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F3EEBC6600C9EF7E215521880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2868c5b3-3d47-3c35-a813-9d8b5531459e.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.240.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:3e:eb:c6:60:0c:9e:f7:e2:15:52:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=18aa4efa-d3ec-44c3-a4a8-dd220706fd4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:cc:a9:a7:f4:ba:20:dd:df:d4:15:15:02:ee:
d1:d5:ec:fa:67:00:fe:0f:97:86:26:94:0c:61:d7:
a3:e7:9e:96:f2:a6:dd:16:d5:b0:2c:1c:02:4a:a6:
d9:9e:59:40:46:07:5b:eb:cf:e3:d5:a9:c4:93:6a:
5b:1c:b2:d5:b7:9b:48:5b:cc:2a:c8:91:e2:dd:41:
1a:64:af:2b:fa:1d:70:c4:c2:97:2f:24:15:15:4d:
d4:3b:34:35:36:fd:b2:55:79:45:5b:c5:01:45:db:
51:b6:82:85:34:de:58:b9:97:f3:1e:d9:6d:bd:d5:
aa:db:f9:5e:f0:df:61:38:2a:91:37:7f:9e:75:c4:
89:0d:6e:cc:28:c3:73:95:16:f9:1b:0f:d1:b4:e8:
7d:9b:26:1e:11:ae:93:3d:96:57:ba:24:fd:05:13:
8c:ac:01:5c:19:89:bd:85:b3:7e:b7:e9:ef:ab:5f:
c2:14:e6:1d:98:88:4a:ef:7c:9b:d2:55:82:5a:3b:
fc:cc:5f:cb:86:a8:48:2d:af:f5:d6:47:0b:56:f5:
44:3c:b2:56:04:3c:c3:9c:0b:db:1f:ad:ef:b3:e7:
3c:d4:00:05:6f:fb:c2:c6:ac:30:b1:4b:37:77:54:
e8:0d:fa:67:1e:dc:3d:f2:d9:89:21:51:54:9c:92:
ec:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:53:24:57:B4:A3:48:2C:55:04:6D:9F:1D:B1:9B:44:B4:20:AD:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2868c5b3-3d47-3c35-a813-9d8b5531459e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.240.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:8d:cd:a0:bd:9a:54:66:23:3e:08:bd:0f:21:15:f7:0d:e6:
35:4d:4b:8c:9e:b8:23:db:a7:fb:be:34:b6:32:04:e1:17:3d:
39:7e:58:b8:61:16:c1:6c:00:91:ba:72:1b:af:c8:4a:ec:ab:
87:28:2c:f5:d0:90:2a:ac:d3:18:bb:f1:a1:a8:1e:0d:24:75:
dd:3b:b7:e3:a6:d5:a5:6a:22:4a:09:ca:c9:5f:89:0d:8e:3d:
8f:c6:a7:2e:56:ff:28:67:82:76:ac:be:23:09:70:b4:c3:41:
dc:02:d9:22:db:32:cb:e3:ab:b0:79:7d:61:9c:18:b7:25:56:
44:6d:d9:7f:84:d2:7e:72:1a:3e:5b:f6:a9:da:02:f2:b8:fa:
33:a5:39:be:c4:0b:21:e3:ab:da:84:1c:03:27:f3:f6:1c:24:
7b:0c:f9:45:d2:28:9a:9f:4d:7d:09:15:a5:e4:1d:ee:2b:8d:
f5:ed:57:d3:1c:55:ed:52:45:1a:f3:0e:dd:b6:be:24:55:a3:
32:cd:04:49:b5:a2:df:e6:d3:bd:7e:42:0b:12:39:03:78:1e:
c0:93:4e:d4:58:f8:5f:df:9e:ef:c3:b7:8b:e5:5c:27:a1:40:
57:16:7a:1a:59:0d:0b:a7:c4:b6:7a:37:67:41:55:f9:d6:26:
b2:49:f2:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:11:02 2025 by rpki-client