Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dfffb73-7a43-36e7-af34-9826d4331243.roa
File: 3dfffb73-7a43-36e7-af34-9826d4331243.roa (raw, json)
Hash identifier: Pt0wuVvJb5dqQLXFJoW7wuqEZ0ymnZlJdP3bvqwkdV4=
Subject key identifier: 92:EB:CE:B7:AC:95:45:4C:0E:41:1C:FB:E1:EB:BA:0E:66:A4:B9:69
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F40FC5DF14957A10A1BE6AD20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dfffb73-7a43-36e7-af34-9826d4331243.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:40:fc:5d:f1:49:57:a1:0a:1b:e6:ad:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=b0c334ed-b878-4a61-9331-ad3b9c80cb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cd:8d:aa:2c:ed:a0:84:53:3b:5b:c1:2a:19:
32:ff:76:15:be:7d:81:4c:d4:9a:2e:99:0f:66:79:
ba:e3:49:8d:b9:70:d5:f5:3b:ad:3a:55:96:22:1e:
4e:9c:f4:1d:cb:38:dc:fe:20:62:df:21:c8:86:fb:
20:65:8d:00:f1:f2:d4:36:61:66:0d:64:45:c7:45:
60:76:49:01:45:af:81:5a:68:35:9d:81:4b:8d:9c:
4e:e6:ca:2d:1e:9b:28:58:fc:29:2d:7c:61:89:91:
bb:b8:7e:fb:a0:26:7f:9b:75:ab:79:5a:d9:c0:26:
9f:25:26:47:0b:e8:5d:64:8a:bd:24:76:0e:74:30:
cb:9e:df:cb:f8:5c:5a:a2:29:25:45:da:0c:4d:5e:
03:c5:ee:68:5b:1c:5b:aa:c3:fe:61:d5:eb:5c:6e:
29:dc:55:db:cf:26:e7:cb:4a:24:e2:22:96:78:cd:
20:d8:fd:cc:02:96:f7:7a:12:2e:b7:90:71:a6:0f:
a2:57:8e:9f:0b:6c:b0:32:1a:27:a2:22:32:e3:d2:
04:53:04:82:f8:40:52:d0:33:98:4e:3e:b9:31:80:
6d:22:a7:a9:01:30:0b:61:83:14:99:bf:26:34:0c:
71:54:84:24:22:4e:5e:4a:0d:84:7a:65:e1:af:d0:
23:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:CE:B7:AC:95:45:4C:0E:41:1C:FB:E1:EB:BA:0E:66:A4:B9:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dfffb73-7a43-36e7-af34-9826d4331243.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:d6:f6:67:ef:4e:66:44:95:73:fc:60:39:e9:7d:c5:4f:ed:
5d:07:e3:50:c4:8d:ad:48:27:7d:5c:77:c8:45:f3:be:49:55:
08:42:59:35:91:60:b2:4a:9e:ff:a8:9b:9e:a0:98:17:f5:18:
54:2f:4c:81:ed:9d:35:bd:2b:5b:30:8c:93:1d:6e:68:4f:06:
2d:19:fe:c8:bf:d9:33:db:0c:15:97:72:b6:84:b7:52:5a:5a:
48:46:53:4d:3a:51:81:f0:14:ca:3e:e4:03:8a:72:8a:cf:e9:
75:10:ff:a4:f2:71:7d:ae:c4:52:ef:28:d1:f1:44:7c:ac:4f:
06:91:07:a6:0f:a2:69:0e:b3:07:9c:9c:11:b4:1f:21:49:11:
bc:3d:08:be:4a:0c:26:4b:51:f0:5d:b3:10:ac:09:ea:df:f2:
97:94:d7:51:09:a1:63:fc:93:1e:da:69:9c:e2:19:72:dd:40:
78:dc:a6:7e:27:d5:ae:57:8a:e2:44:ac:74:2e:21:2f:dd:d7:
f6:e5:cc:25:8d:e2:69:f9:b9:03:62:1b:84:53:27:dd:15:cf:
85:ac:83:71:8d:f9:31:71:e6:dd:70:87:54:c5:c3:77:ef:26:
85:b2:39:25:21:22:d2:d4:d7:56:55:b8:0a:65:2f:dd:d8:44:
56:09:ff:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9A/F3xSVehChvmrSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkxNDEyMDAwMFoXDTIyMTAyMDA0MDAwMFowLzEtMCsGA1UEAxMk
YjBjMzM0ZWQtYjg3OC00YTYxLTkzMzEtYWQzYjljODBjYjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx82NqiztoIRTO1vBKhky/3YVvn2BTNSaLpkP
Znm640mNuXDV9TutOlWWIh5OnPQdyzjc/iBi3yHIhvsgZY0A8fLUNmFmDWRFx0Vg
dkkBRa+BWmg1nYFLjZxO5sotHpsoWPwpLXxhiZG7uH77oCZ/m3WreVrZwCafJSZH
C+hdZIq9JHYOdDDLnt/L+FxaoiklRdoMTV4Dxe5oWxxbqsP+YdXrXG4p3FXbzybn
y0ok4iKWeM0g2P3MApb3ehIut5Bxpg+iV46fC2ywMhonoiIy49IEUwSC+EBS0DOY
Tj65MYBtIqepATALYYMUmb8mNAxxVIQkIk5eSg2EemXhr9AjjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJLrzreslUVMDkEc++Hrug5mpLlpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2RmZmZiNzMtN2E0My0z
NmU3LWFmMzQtOTgyNmQ0MzMxMjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5KAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACDW9mfvTmZElXP8YDnpfcVP7V0H41DEja1IJ31cd8hF875JVQhCWTWR
YLJKnv+om56gmBf1GFQvTIHtnTW9K1swjJMdbmhPBi0Z/si/2TPbDBWXcraEt1Ja
WkhGU006UYHwFMo+5AOKcorP6XUQ/6TycX2uxFLvKNHxRHysTwaRB6YPomkOswec
nBG0HyFJEbw9CL5KDCZLUfBdsxCsCerf8peU11EJoWP8kx7aaZziGXLdQHjcpn4n
1a5XiuJErHQuIS/d1/blzCWN4mn5uQNiG4RTJ90Vz4Wsg3GN+TFx5t1wh1TFw3fv
JoWyOSUhItLU11ZVuAplL93YRFYJ/7U=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:40:52 2025 by rpki-client