Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2efc10d1-6d57-3da6-b350-29feaaa82d53.roa
File: 2efc10d1-6d57-3da6-b350-29feaaa82d53.roa (raw, json)
Hash identifier: ugkIpKWFjzBAq95NV3OoN5Mh9YNVcH8je10zsRJvl5Y=
Subject key identifier: E1:5E:B3:5E:0D:AF:FA:D4:8E:BD:46:E5:41:F3:B5:6E:FA:59:FD:B7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C8DB66D276E33CFA8DB669240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2efc10d1-6d57-3da6-b350-29feaaa82d53.roa
Signing time: Tue 11 Jan 2022 05:00:00 +0000
ROA not before: Tue 11 Jan 2022 05:00:00 +0000
ROA not after: Tue 15 Feb 2022 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:8d:b6:6d:27:6e:33:cf:a8:db:66:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 11 05:00:00 2022 GMT
Not After : Feb 15 05:00:00 2022 GMT
Subject: CN=a76a1203-0cad-497c-9ff7-4a531c40e65d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5a:c1:0d:d7:68:82:d9:d7:c0:a0:95:72:93:
17:86:f9:cb:48:ca:7d:19:ab:8b:f6:91:5a:2c:88:
da:ba:7f:b4:8e:1e:21:0e:b9:d5:3a:df:e8:f1:8b:
9a:38:68:99:94:7a:27:39:04:16:3c:89:2b:27:4f:
5d:93:94:6a:3e:db:a0:9f:f8:90:42:89:83:15:58:
d1:f2:3c:af:2d:12:26:12:6d:f2:9d:3c:69:c6:8b:
3e:e9:aa:62:b0:00:c5:a0:8f:1f:cb:33:8c:38:ea:
ee:68:98:18:6a:18:52:a3:91:cd:63:8a:c1:08:6c:
b3:97:ce:e3:ad:e2:0a:64:df:95:cc:1f:3d:73:e7:
ad:e5:6b:cb:e8:3c:72:ac:44:d6:28:12:f6:b9:9a:
4b:e1:27:04:4b:2d:47:1e:39:ee:f3:b4:08:1f:0c:
e1:af:5f:c2:d5:81:83:ce:4d:fd:39:ad:a8:37:7e:
22:f0:ad:74:b5:d9:a6:09:85:fe:0a:29:3b:f4:c5:
fa:a5:d9:93:31:dd:6a:c2:20:55:11:e7:5e:d9:e2:
55:8b:6d:61:9e:52:9a:44:0a:aa:21:28:b5:e3:05:
6b:a9:a0:6c:61:e2:0f:b7:57:bd:0c:5c:12:52:bb:
64:a2:34:87:24:25:1f:31:5d:98:5a:31:d6:0b:5c:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5E:B3:5E:0D:AF:FA:D4:8E:BD:46:E5:41:F3:B5:6E:FA:59:FD:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2efc10d1-6d57-3da6-b350-29feaaa82d53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:c5:d1:c7:79:ba:e0:20:45:52:24:d5:e8:2c:07:ae:32:d9:
bf:ad:1f:54:97:03:33:53:c7:d8:c7:f0:01:1a:1e:60:20:a1:
99:aa:30:45:5a:fc:c6:fc:7c:00:6b:f7:d6:80:04:bc:17:3e:
61:a3:8c:da:ff:4c:76:c7:b3:ee:f6:cc:1b:9d:0e:87:ba:a1:
01:57:05:41:36:3f:2e:61:ba:9b:a1:8e:71:6e:a7:b9:98:f5:
e0:f3:7b:e1:26:76:97:ab:32:86:2b:b2:94:ce:74:f7:db:a0:
be:eb:e5:a0:57:fc:81:1a:fd:b0:0d:09:54:18:cf:85:7d:c7:
47:73:dc:be:77:58:d0:c9:75:be:9d:3e:d7:92:8c:8a:df:29:
1a:be:76:7f:ae:f0:56:1f:09:ca:67:f5:41:a6:17:cc:13:2b:
a2:43:17:a2:d0:00:01:84:02:67:80:50:88:10:fd:79:1c:16:
4d:e9:02:82:b9:4c:35:0a:49:c8:27:b4:96:e2:c4:4d:fd:6b:
a4:cb:8a:b8:d8:93:f1:1f:e0:80:d7:65:66:9b:56:b0:b4:d8:
91:f6:8c:02:f3:53:19:92:78:96:9b:d5:e3:15:45:cc:ef:4f:
77:b2:e6:87:b9:4f:c7:18:88:73:5a:d2:71:3c:4f:8f:26:bf:
97:83:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:03 2025 by rpki-client