Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a55d50f-9d91-386e-90be-25d835c46c43.roa
File: 4a55d50f-9d91-386e-90be-25d835c46c43.roa (raw, json)
Hash identifier: +NHNqIiq1ecLgL1G786L+oUO5X9T2mJuOA78K8y0fjI=
Subject key identifier: DE:AD:E8:AC:E8:02:8D:77:AB:1A:E7:2A:7D:3A:3B:3C:56:CE:3F:7B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403AD14DDB3FEE0AEAC0842680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a55d50f-9d91-386e-90be-25d835c46c43.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 155.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:d1:4d:db:3f:ee:0a:ea:c0:84:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=4094089b-5690-4d80-a525-769d8dbd1ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:63:df:7f:2c:8d:d6:7f:01:c2:e2:9d:78:a9:
8e:23:b7:e4:8b:d7:6d:6d:e8:3b:e4:cb:39:9b:3c:
f4:58:6a:72:9d:80:ad:98:98:0d:29:86:a1:57:26:
be:90:66:7b:4c:ea:10:a4:03:9f:27:07:e5:5d:89:
73:ff:7e:78:f1:f4:f1:c6:50:d8:34:3f:c0:71:f5:
9e:fc:29:56:4f:a5:e4:ad:47:c1:29:e6:0a:02:a8:
44:21:26:ed:32:f8:59:16:42:7c:cb:45:6a:a6:a0:
34:e6:c2:4d:6f:b1:65:00:66:12:6d:27:78:b9:be:
ee:b4:38:9a:f4:07:af:47:f3:f8:53:07:3a:bc:65:
20:d3:af:27:f4:bd:86:ac:2a:51:04:4d:32:dc:39:
d6:10:15:6c:c5:5d:27:fe:1e:0a:9d:23:82:00:23:
1a:12:a7:86:c2:6c:a6:27:05:00:9e:05:0a:f4:06:
99:cb:4b:18:cb:82:ed:e7:2a:e4:63:e9:12:32:a8:
d7:4e:9b:08:e2:ec:9c:de:d9:3d:38:af:1b:b5:73:
ec:97:e1:7e:bd:66:d3:6b:70:38:ab:ac:dc:41:ee:
81:6f:1a:17:88:a0:6a:c0:cb:9b:d5:79:15:93:f1:
b4:4c:35:8b:66:4a:56:04:4c:62:dc:7b:07:68:ac:
73:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:AD:E8:AC:E8:02:8D:77:AB:1A:E7:2A:7D:3A:3B:3C:56:CE:3F:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a55d50f-9d91-386e-90be-25d835c46c43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:b9:ec:d8:35:4a:43:8c:11:64:93:89:ef:fb:77:5b:7b:2a:
ee:0d:f5:ee:40:85:07:c0:64:a6:0e:c0:f9:bc:33:ee:cc:a7:
dc:d1:67:02:7f:08:de:f1:a5:ee:81:0e:e0:99:06:59:27:89:
89:20:de:c1:ed:05:82:d9:19:90:7b:9b:fc:08:91:b7:1e:76:
3a:2c:2c:71:a1:77:a9:f0:5f:e2:57:e4:95:2b:5b:20:47:d7:
ce:93:d2:66:1a:48:cd:49:11:b4:a9:1e:b3:93:9f:2b:20:2c:
7a:36:47:d2:b7:78:fb:c6:e8:7e:d5:60:0c:88:a5:a8:11:57:
a2:00:1b:35:9a:fd:99:f8:78:29:6d:a0:23:6a:80:cf:85:6b:
72:50:3e:92:7f:e0:4c:5b:f4:9f:e1:a1:05:68:e5:7e:14:6f:
68:cf:69:ab:5b:b7:53:c4:ae:f6:b5:f7:01:a0:4a:bf:3f:35:
ad:91:bc:3c:3a:bb:11:8f:54:19:dc:95:b3:53:3c:e3:67:29:
4a:66:02:81:a5:9c:6e:e1:15:b9:27:41:ff:48:d6:19:b7:ca:
fb:4d:86:f2:c8:ae:24:ac:20:60:5d:8e:2e:f6:91:7f:d6:9d:
c3:4c:90:ef:69:15:a4:4a:0a:d6:3e:00:cc:d9:e0:54:ac:1b:
f1:f4:5b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:17:40 2025 by rpki-client