Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/323c3c2c-1282-3ac5-b367-1ef9dcb377cb.roa
File: 323c3c2c-1282-3ac5-b367-1ef9dcb377cb.roa (raw, json)
Hash identifier: ccWSu3us18fMVMDKAcWXr9NqkcrVG94GqMMWQknJBNw=
Subject key identifier: 54:A0:1B:D4:7B:74:BB:49:D0:E5:79:51:E3:A2:15:27:A6:F4:A8:F4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584037E17D042359DF8AD355E578
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/323c3c2c-1282-3ac5-b367-1ef9dcb377cb.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 701
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:37:e1:7d:04:23:59:df:8a:d3:55:e5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=aaff0c9b-c9b7-4475-a114-095e1d2cecd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:83:84:ab:9b:d4:a1:dd:b5:b9:7f:a0:69:
92:78:68:c8:62:1b:7c:1f:ed:bf:b3:34:12:58:7c:
51:14:ff:3e:f8:c9:14:37:2a:15:07:ef:9a:18:9f:
25:11:1d:0e:e3:ba:c1:61:7c:c3:dc:ff:f1:1a:60:
ec:0a:6e:35:85:40:c4:12:79:8b:bb:98:3c:e3:4f:
dd:b8:84:67:da:76:96:2f:28:43:75:77:3a:56:87:
be:19:bc:38:81:19:9f:44:7c:79:e7:7f:86:16:0f:
6c:17:19:64:36:63:11:a5:04:05:d4:e2:8a:b4:3f:
a6:a9:77:e0:14:29:c6:8b:6f:ba:8e:1d:b6:48:56:
bf:ec:86:7f:1b:06:1f:b5:85:54:b8:51:66:e1:aa:
cf:17:9d:6a:c1:fb:20:10:8b:d7:9e:02:b2:13:50:
9b:d5:3d:8b:19:c4:e1:db:42:a2:cc:03:11:7d:2a:
08:0f:6c:36:b2:8c:d8:f2:c4:0e:8c:c1:a1:a5:d1:
44:30:a5:ac:25:4a:1a:f2:ea:e5:5b:7f:58:64:2e:
c6:08:d3:2d:a5:c7:49:c2:bf:f0:a2:eb:4b:54:a9:
d5:ad:f7:36:73:25:b5:5b:0e:b5:20:21:a0:19:5c:
50:d3:06:c0:37:a0:92:a4:b4:94:b4:98:ac:dc:bc:
07:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A0:1B:D4:7B:74:BB:49:D0:E5:79:51:E3:A2:15:27:A6:F4:A8:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/323c3c2c-1282-3ac5-b367-1ef9dcb377cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:bf:a5:d0:01:dd:73:36:1e:c2:01:7c:f8:ed:51:f8:99:65:
f1:65:fc:4e:4e:bc:3a:e9:60:fb:ab:2a:bc:e2:fd:f2:1b:b6:
c8:14:e9:73:7c:3c:0e:12:61:ab:6f:42:0a:9a:4c:89:c9:83:
58:e9:6a:e9:d9:cf:d8:57:c1:6c:ff:9e:e6:f7:4b:ee:82:e6:
6f:7b:01:41:d2:e3:8f:7b:d2:bc:4f:c8:96:fc:b3:ca:89:29:
69:7d:1a:15:fe:ce:cb:c2:81:43:02:f9:33:57:51:1b:a4:3d:
a4:f1:b3:24:e1:45:54:9a:74:0b:ec:bf:03:95:cd:bc:76:6c:
e1:4a:b1:d2:79:03:7c:2f:a4:30:64:33:5c:de:4a:27:87:d1:
3d:0d:d6:6c:c5:68:b4:2c:fb:29:95:fa:55:d7:13:c0:dd:c3:
be:86:09:68:3a:29:5a:2c:e0:ee:b4:a9:f1:d3:ac:11:b3:fd:
77:c6:d0:7a:e6:22:f1:69:d5:c0:58:91:2f:fb:c9:72:0a:5f:
f5:61:3b:fb:34:3f:0e:c5:0a:48:b0:b4:92:9f:e7:3b:16:22:
55:82:ef:49:41:dc:32:58:f7:65:7b:9f:b3:26:90:de:75:fe:
b8:71:7c:ed:10:f2:3c:9a:b9:f8:91:58:7d:cc:0e:ce:33:ea:
65:49:d7:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:54:31 2025 by rpki-client