Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2db5739f-4506-3fc5-8631-5acd5690e7da.roa
File: 2db5739f-4506-3fc5-8631-5acd5690e7da.roa (raw, json)
Hash identifier: LZd/sg3wWQLi/1dHk/ggr1iUfS4pe3mMfrzG7g5FU9k=
Subject key identifier: 1E:68:1B:9E:10:60:E5:56:62:C5:87:C7:F0:A0:BC:98:9F:38:1C:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840114A828A9E5037CAF25A4A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2db5739f-4506-3fc5-8631-5acd5690e7da.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:11:4a:82:8a:9e:50:37:ca:f2:5a:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=09cf760d-abbd-41a9-aa26-fde3241bb5b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:28:2a:35:45:51:2e:0f:c5:7d:66:c9:87:ce:
4d:3f:ac:42:bd:e7:17:b4:83:0b:9d:f8:ae:52:5d:
17:90:19:a3:1a:44:2f:d3:63:11:9b:06:ab:35:c0:
a4:75:a7:f5:12:0f:6c:eb:97:9f:16:7f:6c:b2:7d:
dc:a7:2d:b6:cc:6e:02:79:f0:4e:7c:86:15:af:ba:
65:13:38:68:98:cc:aa:6c:63:d2:3d:58:68:b1:5c:
e9:87:65:e9:ec:b9:29:c4:e4:34:17:6f:34:c7:99:
e0:c4:9b:5b:db:41:55:00:39:28:93:0a:c3:97:e0:
27:23:98:3e:67:cc:aa:67:67:89:83:9a:c0:a6:e6:
e7:e2:1c:0d:b1:8f:41:aa:f6:ba:13:ef:92:75:cf:
ea:97:5f:a6:cc:67:3a:ce:91:bd:5d:67:da:55:20:
5e:81:6d:31:da:df:e6:2d:b2:f1:62:e1:6f:4b:28:
27:51:1b:fc:56:b3:7a:b0:65:d1:86:23:3e:89:1a:
2e:94:6f:62:a7:95:09:a4:b1:fc:ba:aa:ab:0d:4f:
d3:c7:6e:be:ac:7d:9d:21:5c:03:56:36:f6:16:aa:
61:f3:46:2e:9a:98:d3:d0:da:63:02:b5:5f:0c:12:
71:3d:15:65:1d:d7:33:5f:59:f7:ed:9e:20:83:0d:
10:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:68:1B:9E:10:60:E5:56:62:C5:87:C7:F0:A0:BC:98:9F:38:1C:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2db5739f-4506-3fc5-8631-5acd5690e7da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:c9:03:b7:8d:67:7f:06:9f:c2:39:63:d5:49:d5:75:4f:02:
d1:1b:c3:c2:11:6f:e7:f9:f9:f4:b1:e0:87:17:c7:03:f3:cd:
39:be:69:09:e3:35:d6:35:29:9f:92:86:67:99:bf:dd:5a:0c:
fe:ee:65:45:d6:ed:04:9f:5f:c9:c8:41:56:9d:1d:06:1f:93:
d9:11:e9:0b:80:bf:ef:31:d9:af:7a:25:2e:58:79:a3:e0:68:
16:84:f3:09:07:44:a8:ea:92:9b:e3:c1:b1:32:34:2b:70:4f:
48:fc:ec:f6:14:70:21:f0:5b:1e:62:86:d8:00:92:30:ce:67:
9e:91:90:4b:45:41:c2:31:41:1a:14:2b:24:31:51:cb:91:19:
61:fa:31:02:d9:54:1e:96:90:9c:d4:9a:ff:45:80:26:a7:37:
01:f9:7d:62:b5:15:1c:f5:28:9c:f2:52:e5:3f:be:05:d5:e9:
51:9d:54:59:13:97:c5:a8:49:b6:82:48:57:b1:71:dc:15:8a:
86:38:86:b6:6c:bc:c4:06:fa:91:25:60:c4:4f:ef:95:99:4a:
1d:e4:18:4a:24:86:b1:cb:bc:29:1a:b6:6f:17:b2:52:f0:5d:
40:09:66:de:fd:ea:26:00:d5:08:67:76:3b:3a:65:45:6b:56:
53:54:ab:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:24:23 2025 by rpki-client