Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53fb0607-bb6f-3c6e-ac6a-63a7a5d05fb3.roa
File: 53fb0607-bb6f-3c6e-ac6a-63a7a5d05fb3.roa (raw, json)
Hash identifier: ajnAQ03oqHgF1Z/qpjzWRC5JrSGKbVh3fy9f5walT2U=
Subject key identifier: 25:40:B3:41:FF:0A:60:DA:C3:5F:2F:0B:55:F4:1A:AB:EB:E7:C3:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D513865BC5B8925E225A57A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53fb0607-bb6f-3c6e-ac6a-63a7a5d05fb3.roa
Signing time: Tue 22 Mar 2022 04:00:00 +0000
ROA not before: Tue 22 Mar 2022 04:00:00 +0000
ROA not after: Tue 26 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:51:38:65:bc:5b:89:25:e2:25:a5:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 22 04:00:00 2022 GMT
Not After : Apr 26 04:00:00 2022 GMT
Subject: CN=1996c072-247a-42b1-a3eb-da53fa7a9a5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:39:9f:11:de:9c:29:ec:a0:76:63:a8:31:38:
f3:73:0c:82:3b:10:42:fc:12:52:80:f8:ce:6f:07:
8d:18:77:49:69:3f:bd:79:27:54:fa:94:8e:7b:57:
ad:ba:6d:48:fd:bb:43:c0:e2:3b:ad:bb:09:0c:c0:
40:29:a7:9d:10:67:de:25:7b:91:b6:5c:79:0c:4f:
37:ac:b3:26:28:8a:83:f2:e6:87:e6:65:ec:6e:21:
cb:f3:d4:22:7f:2c:30:50:e2:b4:7a:ef:e8:b6:51:
51:61:d5:ba:cf:db:9e:6c:7e:b3:03:c6:ef:5f:18:
cf:66:8e:6f:12:17:96:d8:34:fb:f3:c4:4a:3c:a4:
fd:ff:5b:a9:f0:eb:d8:23:2a:af:ed:cc:07:c0:4c:
92:82:45:75:56:55:73:38:c3:4d:0c:4c:b6:21:22:
aa:d9:bc:ea:ef:5a:eb:98:c2:b8:0e:4a:40:1c:8f:
20:55:a5:56:94:d7:f8:aa:16:42:b6:b4:ae:95:54:
88:0f:3b:9d:a9:2d:69:f4:3b:14:ea:f8:bf:b4:35:
87:0f:3f:2d:e4:ce:c2:96:04:e1:99:0c:99:10:25:
8e:1f:72:d2:8b:14:0e:9a:ce:5d:c1:35:91:c8:c9:
8f:6b:f2:77:4c:6f:fd:b0:73:35:77:2d:88:d1:d8:
5d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:40:B3:41:FF:0A:60:DA:C3:5F:2F:0B:55:F4:1A:AB:EB:E7:C3:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/53fb0607-bb6f-3c6e-ac6a-63a7a5d05fb3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:00:1f:80:66:39:15:c9:f8:5a:75:79:bc:70:f2:21:53:d5:
49:53:09:a2:a0:ad:25:b5:2e:0b:4c:f3:eb:60:53:fa:d2:83:
34:f6:79:40:f0:79:88:35:23:07:a0:64:20:ce:c1:58:4b:da:
e0:19:fc:d2:3a:2f:12:6f:b6:ec:a6:12:89:74:f1:a7:f0:f5:
7a:8b:34:92:38:4a:d0:05:ba:5f:f3:ae:c8:d8:7c:a6:d4:b1:
37:ff:a8:92:fd:a6:d9:9e:6b:a1:35:d9:89:55:7d:65:eb:00:
5e:8d:3d:14:1b:9d:d0:42:11:14:33:40:c5:67:92:f2:b1:d5:
1d:7f:9b:08:e5:91:fa:1a:91:16:65:fb:04:44:b6:a8:dc:cd:
6f:54:0f:c1:cf:02:81:96:04:6e:8d:2d:cd:b8:a1:3f:c2:65:
3a:b9:c5:97:52:dc:a4:07:30:c1:d5:6f:f0:d6:93:34:06:dd:
1f:be:8d:89:0f:7a:a8:31:80:26:cd:4f:bc:04:75:72:53:74:
70:66:60:fc:41:a2:82:9a:20:f9:ab:4a:ba:1d:5d:44:1b:5d:
06:b0:49:de:09:c3:e2:91:25:4a:79:f4:14:fe:bc:e9:17:97:
23:c1:28:ba:13:69:04:72:7f:1f:bd:72:20:19:d4:fd:bb:80:
20:6f:53:37
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD1ROGW8W4kl4iWlegAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDMyMjA0MDAwMFoXDTIyMDQyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MTk5NmMwNzItMjQ3YS00MmIxLWEzZWItZGE1M2ZhN2E5YTViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljmfEd6cKeygdmOoMTjzcwyCOxBC/BJSgPjO
bweNGHdJaT+9eSdU+pSOe1etum1I/btDwOI7rbsJDMBAKaedEGfeJXuRtlx5DE83
rLMmKIqD8uaH5mXsbiHL89QifywwUOK0eu/otlFRYdW6z9uebH6zA8bvXxjPZo5v
EheW2DT788RKPKT9/1up8OvYIyqv7cwHwEySgkV1VlVzOMNNDEy2ISKq2bzq71rr
mMK4DkpAHI8gVaVWlNf4qhZCtrSulVSIDzudqS1p9DsU6vi/tDWHDz8t5M7ClgTh
mQyZECWOH3LSixQOms5dwTWRyMmPa/J3TG/9sHM1dy2I0dhduQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCVAs0H/CmDaw18vC1X0Gqvr58NUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTNmYjA2MDctYmI2Zi0z
YzZlLWFjNmEtNjNhN2E1ZDA1ZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKIAH4BmORXJ+Fp1ebxw8iFT1UlTCaKgrSW1LgtM8+tgU/rSgzT2eUDw
eYg1IwegZCDOwVhL2uAZ/NI6LxJvtuymEol08afw9XqLNJI4StAFul/zrsjYfKbU
sTf/qJL9ptmea6E12YlVfWXrAF6NPRQbndBCERQzQMVnkvKx1R1/mwjlkfoakRZl
+wREtqjczW9UD8HPAoGWBG6NLc24oT/CZTq5xZdS3KQHMMHVb/DWkzQG3R++jYkP
eqgxgCbNT7wEdXJTdHBmYPxBooKaIPmrSrodXUQbXQawSd4Jw+KRJUp59BT+vOkX
lyPBKLoTaQRyfx+9ciAZ1P27gCBvUzc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:03 2025 by rpki-client