Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569f5b71-678c-3424-82ca-5ba8fbec8f87.roa
File: 569f5b71-678c-3424-82ca-5ba8fbec8f87.roa (raw, json)
Hash identifier: Z471Wz8SjBOpJuDC0FVccemVdeXIADy/kDP7Mm6JGj4=
Subject key identifier: AE:98:56:2F:33:64:1A:F7:B9:42:DD:C6:FE:0B:A5:FB:D8:81:AF:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840114A7C2F3C35AD6062EDDD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569f5b71-678c-3424-82ca-5ba8fbec8f87.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:11:4a:7c:2f:3c:35:ad:60:62:ed:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=c1026fd3-4fc2-49df-9d8a-0ad21eed1461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:cc:67:aa:43:07:b2:c5:a4:96:4b:01:88:
df:d2:ed:3b:f8:3f:4b:59:78:4e:d9:c8:fc:96:db:
4c:26:88:5a:40:86:57:7e:71:60:90:a7:41:37:ed:
4b:74:ce:d6:fc:91:be:bd:56:9d:20:fc:25:ff:9a:
f2:14:c0:eb:4e:f2:ca:36:e8:06:95:e6:85:11:ab:
1b:30:7c:1a:fe:50:67:0c:f6:aa:91:13:63:02:4f:
a1:47:0c:bc:6c:9a:2a:a7:6e:eb:46:a0:ab:42:00:
52:c1:76:c4:78:d5:6c:a0:15:95:be:b7:d5:3f:35:
6a:83:9e:50:db:16:79:6a:69:91:90:c6:0a:5d:59:
25:b1:1b:af:7e:1e:22:43:5d:f5:68:1c:f4:fe:04:
96:35:e5:1c:eb:6f:60:65:b8:ba:04:da:e2:21:94:
bb:1f:c3:5a:3e:35:62:60:a9:e1:44:ab:27:30:08:
bf:5c:17:d4:25:4e:11:46:7b:1f:c1:04:d5:e2:c4:
96:70:23:d4:72:14:27:5e:52:4a:d5:77:ed:45:27:
4c:5a:80:af:1d:cb:5f:08:51:71:fd:0f:3b:50:de:
c8:f0:4b:0a:c6:8a:99:57:69:d9:f1:2b:00:c6:b4:
7e:5c:08:4d:f9:e3:f6:e0:c9:e5:da:7e:41:58:d0:
2c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:98:56:2F:33:64:1A:F7:B9:42:DD:C6:FE:0B:A5:FB:D8:81:AF:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/569f5b71-678c-3424-82ca-5ba8fbec8f87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:69:9a:81:28:76:9c:4c:33:7f:ba:d4:8d:07:ea:9d:18:e7:
17:b6:41:b1:21:aa:e2:82:9d:73:20:64:7d:24:4a:4b:9e:26:
c4:70:12:38:d5:40:62:6d:fe:b8:7f:58:f7:e0:d7:95:a2:d8:
59:dd:60:95:ec:6d:e4:c9:1b:a8:dc:04:80:f9:e6:de:5b:02:
07:af:8e:ed:3f:ae:bb:3f:f1:24:e2:bd:e4:a7:a3:1c:2a:a5:
8a:31:ad:c4:df:78:1d:c4:38:92:e8:9a:c0:df:b7:27:13:91:
5c:8a:4f:d1:05:a7:b2:8d:4f:a3:fc:a7:14:11:40:97:a5:3b:
7a:ed:fe:3a:57:06:3f:f7:8a:ec:e3:9c:08:e9:54:26:32:8f:
00:6e:76:0a:3e:09:c4:9a:74:3d:53:29:85:d2:a6:6b:14:61:
26:c0:e0:bc:5f:f2:c6:61:0b:3e:ec:f5:85:cb:9b:94:05:d1:
6b:4b:ed:7d:a3:df:85:ac:15:5f:ea:b7:14:5b:89:be:40:cd:
30:ce:7e:0d:9b:29:27:0a:40:bd:cf:e8:cc:4a:77:ca:a4:fb:
b0:5d:b1:03:7e:06:f8:bb:7b:cc:60:06:46:78:63:67:50:6b:
91:98:a1:03:f8:b5:dd:c5:11:81:5f:27:a3:1e:1f:a6:8b:87:
c0:46:82:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEARSnwvPDWtYGLt3YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyODEyMDAwMFoXDTIzMDEwMzA1MDAwMFowLzEtMCsGA1UEAxMk
YzEwMjZmZDMtNGZjMi00OWRmLTlkOGEtMGFkMjFlZWQxNDYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUzMZ6pDB7LFpJZLAYjf0u07+D9LWXhO2cj8
lttMJohaQIZXfnFgkKdBN+1LdM7W/JG+vVadIPwl/5ryFMDrTvLKNugGleaFEasb
MHwa/lBnDPaqkRNjAk+hRwy8bJoqp27rRqCrQgBSwXbEeNVsoBWVvrfVPzVqg55Q
2xZ5ammRkMYKXVklsRuvfh4iQ131aBz0/gSWNeUc629gZbi6BNriIZS7H8NaPjVi
YKnhRKsnMAi/XBfUJU4RRnsfwQTV4sSWcCPUchQnXlJK1XftRSdMWoCvHctfCFFx
/Q87UN7I8EsKxoqZV2nZ8SsAxrR+XAhN+eP24Mnl2n5BWNAsFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK6YVi8zZBr3uULdxv4LpfvYga/IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTY5ZjViNzEtNjc4Yy0z
NDI0LTgyY2EtNWJhOGZiZWM4Zjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGJpmoEodpxMM3+61I0H6p0Y5xe2QbEhquKCnXMgZH0kSkueJsRwEjjV
QGJt/rh/WPfg15Wi2FndYJXsbeTJG6jcBID55t5bAgevju0/rrs/8STiveSnoxwq
pYoxrcTfeB3EOJLomsDftycTkVyKT9EFp7KNT6P8pxQRQJelO3rt/jpXBj/3iuzj
nAjpVCYyjwBudgo+CcSadD1TKYXSpmsUYSbA4Lxf8sZhCz7s9YXLm5QF0WtL7X2j
34WsFV/qtxRbib5AzTDOfg2bKScKQL3P6MxKd8qk+7BdsQN+Bvi7e8xgBkZ4Y2dQ
a5GYoQP4td3FEYFfJ6MeH6aLh8BGguk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:15:14 2025 by rpki-client