Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c6c9ec5-8927-3477-b891-a3c89b7c591d.roa
File: 5c6c9ec5-8927-3477-b891-a3c89b7c591d.roa (raw, json)
Hash identifier: /2hQp6G12xXJFY/Nq+u8yoHhicIA3cv0b863laJ6lyE=
Subject key identifier: 20:D8:55:8D:F8:0B:C3:A7:67:9C:A0:94:F2:55:E8:52:61:DC:9E:8A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405FC00B9FB7813DD675B3F580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c6c9ec5-8927-3477-b891-a3c89b7c591d.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:c0:0b:9f:b7:81:3d:d6:75:b3:f5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=cd7e89b3-2155-4bbb-9710-4d2cd5b92aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:7f:ea:75:6d:c6:12:49:66:5e:8b:12:c0:
30:28:95:b3:33:56:65:2a:b9:b1:fc:2c:93:76:2f:
43:cf:b6:90:cf:59:89:fd:b7:df:62:5d:94:76:2f:
f7:87:6d:4e:f3:f7:04:93:67:b9:55:4f:96:73:e9:
58:35:f2:b9:d7:0c:82:7d:25:68:86:5c:1d:82:41:
fb:45:59:8c:51:6d:f8:8b:af:20:d4:48:08:5c:c4:
8e:ef:8d:1d:db:e3:ed:4e:6f:8e:0e:54:8d:03:63:
eb:27:92:21:97:15:b1:02:d1:62:d0:90:bb:3d:b1:
7b:79:86:de:d3:07:30:7f:10:52:f4:26:ab:d6:c8:
63:71:f0:13:1d:8f:64:63:69:0e:6e:6e:3f:dd:36:
be:b4:51:31:7a:2e:4c:ca:3b:c0:b9:24:74:cd:a7:
c3:6c:e3:57:e3:f3:b5:bd:5c:31:2d:b2:bb:cb:32:
1d:1b:98:3f:dd:d3:c5:35:bb:06:26:4d:2b:1e:13:
0f:fc:24:cf:2e:ba:01:55:d5:e8:37:c1:be:29:1b:
5c:23:48:c2:6c:11:92:ad:e5:90:54:49:ad:b7:ab:
a9:e3:22:ee:08:65:63:e8:89:ee:cd:7d:c0:24:98:
32:0b:78:10:fb:97:95:ff:c7:71:15:c3:7f:d8:0f:
c1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:55:8D:F8:0B:C3:A7:67:9C:A0:94:F2:55:E8:52:61:DC:9E:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5c6c9ec5-8927-3477-b891-a3c89b7c591d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:05:71:ff:fa:a5:7e:d2:22:16:c5:c8:9b:97:87:87:15:89:
2a:22:bc:95:b7:5a:fc:25:52:22:18:1a:b3:d7:97:6d:e5:07:
d0:11:b2:18:16:98:03:d6:5e:e1:dc:4f:2c:91:31:2a:ef:03:
61:50:cc:00:1d:5c:89:4b:9c:dd:47:45:b2:98:a2:16:da:26:
75:9d:64:b0:b8:07:bf:20:33:51:68:b0:a8:34:65:28:a2:87:
0c:8c:d5:61:71:94:0d:4b:9b:37:1f:3b:7d:24:71:ed:f7:ea:
08:0b:37:92:46:ee:1f:72:29:6f:3b:dd:22:bd:e8:51:8b:7f:
29:64:5e:79:fd:e5:63:c3:37:e9:2e:23:bf:c2:2c:a0:a3:b2:
0f:8a:a2:bc:74:fd:47:06:59:9e:16:ea:58:b6:c2:23:6f:5b:
db:cd:a7:dd:c3:71:07:93:ee:e1:54:30:e4:4a:dc:87:cb:3a:
d7:6f:49:64:a6:e6:df:f7:6e:62:15:e6:b5:1f:48:96:03:50:
56:08:fc:1b:f3:6e:fa:9d:d1:9c:83:dd:14:4e:de:da:7c:31:
ef:db:50:28:b2:13:40:1f:7a:e5:bf:f0:1d:86:a9:c2:49:1c:
78:ad:a2:9a:c8:46:16:9e:00:fb:ec:67:45:1a:1d:8d:0c:77:
e6:41:00:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:53:34 2025 by rpki-client