Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35908e5a-3354-31bd-9259-e4302d8a4260.roa
File: 35908e5a-3354-31bd-9259-e4302d8a4260.roa (raw, json)
Hash identifier: kfR4xPeDcD62RgzpTRlXW47422uU69QGYF93rWJV/4E=
Subject key identifier: AC:38:BC:B8:04:7B:A3:01:E7:CB:DB:61:82:6C:60:3B:1E:2F:C7:E1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB14C78DB50BDA558E16E5C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35908e5a-3354-31bd-9259-e4302d8a4260.roa
Signing time: Mon 25 Jul 2022 12:00:00 +0000
ROA not before: Mon 25 Jul 2022 12:00:00 +0000
ROA not after: Tue 30 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b1:4c:78:db:50:bd:a5:58:e1:6e:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 25 12:00:00 2022 GMT
Not After : Aug 30 04:00:00 2022 GMT
Subject: CN=37176009-8d56-4cdd-825c-08e7e5532a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9b:4c:4c:3b:01:3b:4b:92:fa:89:2e:3c:05:
a9:42:8c:4c:bc:7f:60:3e:55:3f:e3:21:a8:9c:f6:
27:ac:58:39:2e:f6:a9:24:7f:59:0d:fc:0d:07:ff:
8b:d3:ad:31:6e:60:c5:34:eb:ea:a4:fc:ac:a9:22:
92:b1:91:7b:97:69:b8:6d:a2:bd:7d:cc:44:76:42:
fd:9f:fc:8b:40:f5:13:fd:01:ea:7d:94:06:69:ce:
c2:ca:50:44:bb:77:b3:38:40:a3:2c:a9:8d:34:4c:
7d:90:59:72:12:2e:69:5a:5c:c7:18:7c:f4:d7:a3:
2c:96:f9:4d:5d:0b:51:b2:c4:fa:47:17:fa:27:58:
8a:04:62:bd:92:18:b9:6e:01:e8:5d:83:44:ac:8f:
90:17:a4:de:d5:12:3c:2a:2f:95:5c:50:cc:ac:63:
ff:24:45:76:64:10:80:4c:f1:9b:af:09:30:d5:66:
34:9e:9f:14:70:05:fc:a8:ff:1d:18:7e:1c:d3:25:
5b:49:32:65:aa:29:41:4d:8a:d9:29:93:73:f6:a5:
10:ea:32:36:9c:b0:52:60:da:f5:e9:3f:d4:22:a4:
c5:f7:be:dd:ba:85:ee:01:49:cc:6f:a0:45:bd:4c:
a1:d4:7a:73:48:35:d5:a1:11:1b:61:b2:46:8a:19:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:38:BC:B8:04:7B:A3:01:E7:CB:DB:61:82:6C:60:3B:1E:2F:C7:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/35908e5a-3354-31bd-9259-e4302d8a4260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:43:12:b9:bf:35:93:bb:17:55:80:4d:4f:0d:6d:90:2c:5f:
bd:eb:86:c5:74:c3:c4:16:8e:5d:ae:6e:a3:55:a2:67:69:0f:
74:7a:3c:06:85:ea:2a:53:4b:5e:e1:fb:f8:8c:cc:91:30:6d:
23:e6:1b:1d:7e:a4:a6:2a:b3:2a:e2:9b:ea:56:ca:b9:9f:c0:
a9:75:2a:e3:ad:e0:6e:ec:49:f8:64:73:47:fa:8d:79:63:33:
3c:c6:b9:e4:4b:17:37:b9:3a:20:db:fd:24:d3:d1:ef:74:6e:
6e:c8:0b:86:fd:60:d8:92:4a:4b:b5:0a:79:48:9d:0b:06:d6:
c0:b9:87:1d:15:fd:7e:79:c9:f4:ad:22:8f:47:00:1c:12:0e:
93:65:9d:36:e7:f3:26:95:1b:b5:4e:de:80:5a:f2:60:ee:76:
28:9c:ca:4f:1f:ea:4b:20:bb:c6:7d:93:3b:6d:99:d3:47:18:
2c:8b:d9:0d:50:a8:b9:d4:13:28:52:e4:e0:76:65:1c:95:a0:
3e:40:53:ae:20:06:32:6a:df:fe:88:1c:86:32:30:14:87:cb:
81:23:80:60:e0:aa:3b:c2:ab:55:d4:3d:47:01:87:9e:24:ea:
d6:52:6d:74:92:80:02:a4:43:e4:7e:0d:da:e6:57:1a:71:06:
d2:a5:ef:22
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6xTHjbUL2lWOFuXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcyNTEyMDAwMFoXDTIyMDgzMDA0MDAwMFowLzEtMCsGA1UEAxMk
MzcxNzYwMDktOGQ1Ni00Y2RkLTgyNWMtMDhlN2U1NTMyYTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJtMTDsBO0uS+okuPAWpQoxMvH9gPlU/4yGo
nPYnrFg5LvapJH9ZDfwNB/+L060xbmDFNOvqpPysqSKSsZF7l2m4baK9fcxEdkL9
n/yLQPUT/QHqfZQGac7CylBEu3ezOECjLKmNNEx9kFlyEi5pWlzHGHz016MslvlN
XQtRssT6Rxf6J1iKBGK9khi5bgHoXYNErI+QF6Te1RI8Ki+VXFDMrGP/JEV2ZBCA
TPGbrwkw1WY0np8UcAX8qP8dGH4c0yVbSTJlqilBTYrZKZNz9qUQ6jI2nLBSYNr1
6T/UIqTF977duoXuAUnMb6BFvUyh1HpzSDXVoREbYbJGihnRFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKw4vLgEe6MB58vbYYJsYDseL8fhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMzU5MDhlNWEtMzM1NC0z
MWJkLTkyNTktZTQzMDJkOGE0MjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC9DErm/NZO7F1WATU8NbZAsX73rhsV0w8QWjl2ubqNVomdpD3R6PAaF
6ipTS17h+/iMzJEwbSPmGx1+pKYqsyrim+pWyrmfwKl1KuOt4G7sSfhkc0f6jXlj
MzzGueRLFze5OiDb/STT0e90bm7IC4b9YNiSSku1CnlInQsG1sC5hx0V/X55yfSt
Io9HABwSDpNlnTbn8yaVG7VO3oBa8mDudiicyk8f6ksgu8Z9kzttmdNHGCyL2Q1Q
qLnUEyhS5OB2ZRyVoD5AU64gBjJq3/6IHIYyMBSHy4EjgGDgqjvCq1XUPUcBh54k
6tZSbXSSgAKkQ+R+DdrmVxpxBtKl7yI=
-----END CERTIFICATE-----
Generated at Mon Jun 16 17:07:38 2025 by rpki-client