Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df213cd-f9fa-3aad-b3e7-9b71bae7d7f6.roa
File: 2df213cd-f9fa-3aad-b3e7-9b71bae7d7f6.roa (raw, json)
Hash identifier: SUDIcQX/Af5UykEok4H+dGp1kijwSTF1dSY3BdO9ybw=
Subject key identifier: 70:54:1D:EA:D9:04:FC:76:B6:71:32:0C:F8:A5:B3:52:D1:A2:65:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDBD300C9B596666BEDF45300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df213cd-f9fa-3aad-b3e7-9b71bae7d7f6.roa
Signing time: Tue 08 Feb 2022 05:00:00 +0000
ROA not before: Tue 08 Feb 2022 05:00:00 +0000
ROA not after: Tue 15 Mar 2022 04:00:00 +0000
asID: 701
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:db:d3:00:c9:b5:96:66:6b:ed:f4:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 8 05:00:00 2022 GMT
Not After : Mar 15 04:00:00 2022 GMT
Subject: CN=bc7e752f-de60-40ac-ae02-041bddb5747a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:97:cb:e2:ff:01:82:0d:3a:f0:16:e6:b4:8e:
69:5f:a3:60:fd:fb:f1:62:2a:9f:d6:f8:44:a1:66:
40:41:ce:84:2f:e3:88:0d:10:d3:1d:53:d9:69:e7:
b8:f3:ed:9b:97:83:2e:84:0b:b2:df:f7:a4:64:48:
e0:fb:9f:3c:ec:b3:2f:d4:13:db:4f:55:08:8e:d9:
7c:b6:36:87:f8:c2:99:e3:52:b9:21:2b:a6:24:71:
bb:78:6f:ee:34:60:b3:91:af:71:d0:96:20:2a:ac:
9b:2b:e8:6a:fc:c6:90:f8:20:d6:9c:da:36:f6:c9:
c8:b9:03:54:1c:0b:e6:85:39:73:95:49:53:f9:40:
75:a1:63:66:15:b8:f2:76:b1:e6:b2:89:df:15:29:
8b:5d:c0:a2:a6:b4:86:97:10:3d:97:68:6f:54:82:
74:ae:89:5e:3e:45:ba:98:b2:55:8c:39:89:22:d5:
22:cc:ad:a8:29:a4:fe:b3:cb:ce:19:48:49:dc:75:
5d:b7:e3:29:25:df:da:3e:e8:08:9e:cb:67:32:44:
dd:2f:67:e5:e8:ed:95:19:26:78:1c:43:2d:cd:5f:
ce:bd:55:0c:ce:76:87:cc:96:e8:4e:e8:29:1e:38:
08:4a:b8:97:4e:ef:40:cd:e9:40:a9:32:2c:c0:44:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:54:1D:EA:D9:04:FC:76:B6:71:32:0C:F8:A5:B3:52:D1:A2:65:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2df213cd-f9fa-3aad-b3e7-9b71bae7d7f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:0a:26:8b:7c:f2:4e:55:ac:f2:71:74:ce:de:ff:25:20:e9:
96:24:af:34:ce:21:8f:b8:3a:49:00:0c:0a:78:8c:6c:8b:3e:
9f:03:2f:a8:90:e1:ba:b3:6d:8c:d5:16:66:e7:ee:38:f1:43:
d2:31:82:f8:0e:15:e4:94:b4:ba:5e:fc:1a:d0:76:81:f7:d0:
41:84:b4:d9:bb:fc:ed:c8:27:07:57:46:a9:82:b4:ba:d0:2c:
15:e8:27:40:f0:c2:c0:5c:1f:77:64:f9:a9:d7:e0:57:46:49:
37:b9:20:a3:c6:b6:ed:2e:f3:a1:ce:29:2a:6c:8b:01:9c:54:
c5:66:53:18:55:7a:11:6d:45:e8:7e:90:f9:e2:f9:30:47:a7:
7c:fe:64:74:40:12:25:53:16:db:3a:4c:05:5c:86:45:b7:82:
e2:a3:ca:6f:03:5b:4c:3e:76:78:e6:52:97:aa:ed:35:aa:19:
0d:50:97:d5:2e:70:a8:3e:a2:5c:f5:00:f9:e3:7c:98:98:f7:
a9:64:ab:9e:64:0e:5a:2d:68:2e:1c:33:9d:33:72:e8:58:0b:
4f:31:21:1b:70:1c:38:a8:f1:20:64:53:12:e0:10:c6:41:68:
cf:4f:e7:12:86:9d:65:d3:a9:ae:e9:5b:bc:9f:fe:2a:4a:86:
19:36:93:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzb0wDJtZZma+30UwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIwODA1MDAwMFoXDTIyMDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
YmM3ZTc1MmYtZGU2MC00MGFjLWFlMDItMDQxYmRkYjU3NDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JfL4v8Bgg068BbmtI5pX6Ng/fvxYiqf1vhE
oWZAQc6EL+OIDRDTHVPZaee48+2bl4MuhAuy3/ekZEjg+5887LMv1BPbT1UIjtl8
tjaH+MKZ41K5ISumJHG7eG/uNGCzka9x0JYgKqybK+hq/MaQ+CDWnNo29snIuQNU
HAvmhTlzlUlT+UB1oWNmFbjydrHmsonfFSmLXcCiprSGlxA9l2hvVIJ0rolePkW6
mLJVjDmJItUizK2oKaT+s8vOGUhJ3HVdt+MpJd/aPugInstnMkTdL2fl6O2VGSZ4
HEMtzV/OvVUMznaHzJboTugpHjgISriXTu9AzelAqTIswEQ8owIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBUHerZBPx2tnEyDPils1LRomXbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmRmMjEzY2QtZjlmYS0z
YWFkLWIzZTctOWI3MWJhZTdkN2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5JAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYKJot88k5VrPJxdM7e/yUg6ZYkrzTOIY+4OkkADAp4jGyLPp8DL6iQ
4bqzbYzVFmbn7jjxQ9IxgvgOFeSUtLpe/BrQdoH30EGEtNm7/O3IJwdXRqmCtLrQ
LBXoJ0DwwsBcH3dk+anX4FdGSTe5IKPGtu0u86HOKSpsiwGcVMVmUxhVehFtReh+
kPni+TBHp3z+ZHRAEiVTFts6TAVchkW3guKjym8DW0w+dnjmUpeq7TWqGQ1Ql9Uu
cKg+olz1APnjfJiY96lkq55kDlotaC4cM50zcuhYC08xIRtwHDio8SBkUxLgEMZB
aM9P5xKGnWXTqa7pW7yf/ipKhhk2k/c=
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:58:13 2025 by rpki-client