Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5595041c-0350-36dd-9f40-e9944b542938.roa
File: 5595041c-0350-36dd-9f40-e9944b542938.roa (raw, json)
Hash identifier: wgS9yTEJkmHLegVmv1J6CCLVx1WI1zocSu5L60oR5yk=
Subject key identifier: F8:E7:A4:C1:84:77:A4:71:24:FB:26:96:ED:FA:5E:99:6A:36:63:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D02EFE79F3C845A6C8C24BB10
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5595041c-0350-36dd-9f40-e9944b542938.roa
Signing time: Tue 22 Feb 2022 05:00:00 +0000
ROA not before: Tue 22 Feb 2022 05:00:00 +0000
ROA not after: Tue 29 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:02:ef:e7:9f:3c:84:5a:6c:8c:24:bb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 22 05:00:00 2022 GMT
Not After : Mar 29 04:00:00 2022 GMT
Subject: CN=34e5255a-5a0e-48e9-827f-fa6b3601b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:c8:5a:6a:d0:dd:f8:8f:78:56:e4:4d:de:
16:48:85:b9:65:42:08:ee:2b:3c:93:4c:69:93:0b:
4c:fe:b9:b4:68:e0:26:a2:0d:e6:d8:fa:c6:98:fd:
24:fa:d4:88:d7:25:05:ee:5c:b1:a0:5a:ae:94:5f:
75:d4:37:e7:54:74:fe:72:f3:3c:41:ed:66:2e:0f:
16:9c:15:2d:e0:d1:e3:47:1f:1d:79:f4:67:8a:f1:
ce:80:e1:59:84:0d:e1:30:7d:0c:a0:03:e8:7b:74:
f1:97:74:5c:bd:4d:2b:89:27:40:2b:6f:c2:1a:f3:
66:3b:56:c3:0b:b1:1d:5d:64:8b:48:73:02:30:63:
da:4d:9d:5b:bb:55:28:4c:b8:c3:80:c6:c9:f6:c2:
b1:16:9b:3e:fc:dc:b7:4e:3c:2e:84:53:45:00:c8:
c5:23:ea:82:fb:5f:95:f5:08:b0:24:a3:a5:3f:54:
bb:5a:50:26:2e:8a:2b:c0:b5:fa:07:ce:c5:b8:4d:
0e:5b:04:1c:ff:dd:11:e3:17:53:a4:f9:80:7e:c9:
9a:20:b7:d0:29:1f:a9:ba:03:22:5e:e8:c4:14:79:
90:5f:57:1d:20:0d:c4:83:34:35:f6:ae:67:d3:8c:
2d:22:d0:e0:1b:4c:c2:80:fa:00:68:4b:06:13:f7:
dc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E7:A4:C1:84:77:A4:71:24:FB:26:96:ED:FA:5E:99:6A:36:63:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5595041c-0350-36dd-9f40-e9944b542938.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:ff:13:f2:4c:a7:f2:de:29:1a:bf:22:9f:ff:de:c5:55:ce:
3f:a9:82:34:e4:1d:d6:04:f9:15:75:8b:10:4e:f8:c3:56:c9:
f2:75:c5:2d:5b:9f:a1:ef:f2:3b:72:d8:46:62:27:06:b5:5b:
ca:38:c7:69:d2:a9:6b:31:72:4b:83:eb:54:6d:27:bc:27:16:
e5:a5:48:dd:72:78:4a:f9:4e:b9:b2:40:43:09:49:e8:4e:66:
a7:ae:99:bb:2c:f4:b5:c7:f4:9a:94:2e:6a:bf:fc:63:bf:2e:
c2:74:d4:a0:57:ec:50:ac:a0:65:b9:2e:7d:21:27:e4:a3:5e:
4c:b6:76:7f:a8:c4:5f:a2:a2:4d:58:18:82:a6:0b:7a:67:cb:
b3:d9:ad:73:7a:81:de:40:2a:8c:7c:3a:0a:f9:5e:bc:3a:1f:
cf:71:25:20:08:b3:ed:62:88:fa:2d:01:bb:1b:95:45:67:83:
9a:06:f1:31:b7:88:10:f8:71:25:f9:ae:63:5c:35:19:cf:e2:
cf:ce:27:de:75:74:e0:ba:cd:5d:26:c5:f7:1b:1d:4d:8e:c7:
cf:a9:6d:d9:cb:5b:bc:36:ac:cb:91:dd:d3:7b:f9:f9:c2:f8:
86:a4:2d:a9:4c:c9:17:bf:01:a4:8c:cd:a8:a7:18:76:eb:37:
5f:1f:00:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:21 2025 by rpki-client