Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/694c88c3-fb46-3377-8edd-4177a9174863.roa
File: 694c88c3-fb46-3377-8edd-4177a9174863.roa (raw, json)
Hash identifier: T44r/hcX5lExAnOw/XuvkQ0cSs3Xr7HKjX6HH4wgj9w=
Subject key identifier: C3:E0:31:03:97:1C:8B:7F:C3:CF:C2:FC:CC:54:5F:E7:50:90:90:C8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDDF987610B3BA133E3AE3200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/694c88c3-fb46-3377-8edd-4177a9174863.roa
Signing time: Tue 08 Feb 2022 05:00:00 +0000
ROA not before: Tue 08 Feb 2022 05:00:00 +0000
ROA not after: Tue 15 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:dd:f9:87:61:0b:3b:a1:33:e3:ae:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 8 05:00:00 2022 GMT
Not After : Mar 15 04:00:00 2022 GMT
Subject: CN=a07b3406-4466-4fd3-84e2-46357a392dd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0b:22:96:31:79:27:ad:27:40:ac:b9:4a:d6:
79:12:6e:82:27:e9:15:46:17:11:fe:d4:ee:b1:ac:
c8:0b:07:b2:a6:ac:9e:ce:a6:82:45:a3:e2:8b:13:
0e:c0:d6:84:23:fe:ac:19:df:7c:37:85:60:1f:5c:
4c:81:ed:29:94:1b:9f:b1:3e:89:bc:20:08:5e:b4:
b0:af:1b:4e:a5:d8:2f:d0:42:cf:f8:54:c4:d5:a8:
73:c2:46:0d:fa:23:1f:8e:72:a0:d3:34:3f:87:8b:
31:8b:94:89:67:17:78:45:80:64:51:95:07:d9:f7:
5a:48:74:fb:90:d5:aa:cd:b0:05:3d:57:90:79:b7:
84:cf:60:99:2d:71:cf:c9:24:5a:97:7b:25:c0:50:
4d:62:9d:73:27:c7:f6:5f:bd:44:d6:fb:48:39:35:
98:b7:16:f0:f4:27:97:e8:e3:bc:8a:11:3f:7d:a7:
fb:fd:dc:e7:17:79:9a:d3:c7:51:13:25:d9:c9:3e:
76:4f:7d:95:49:47:87:90:0c:07:85:88:54:6e:81:
45:10:c9:bd:1d:5e:67:e5:14:e9:65:f5:16:41:85:
44:88:70:7a:18:69:95:e1:de:a8:dc:58:dc:20:8a:
cb:4e:41:63:23:be:e3:9b:0a:66:4d:07:a4:14:55:
b8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E0:31:03:97:1C:8B:7F:C3:CF:C2:FC:CC:54:5F:E7:50:90:90:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/694c88c3-fb46-3377-8edd-4177a9174863.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:a6:d6:55:64:4a:24:ee:34:7a:ce:64:5d:d1:99:f5:10:15:
f2:5b:c7:d8:42:00:a0:41:6e:56:82:cc:44:32:e7:d1:b6:0a:
27:7c:30:9e:56:83:e1:b4:af:78:3a:52:10:dc:ed:51:f5:2c:
b7:7a:55:c3:de:6a:29:64:c2:c9:10:c0:41:f5:18:6e:80:0f:
44:a3:ac:ca:a3:bf:82:d8:0f:46:02:f3:ce:0f:32:e3:7b:54:
bd:24:a8:9c:23:3b:ff:84:d2:79:99:a4:2c:75:2d:ce:3c:c6:
80:e4:46:13:15:9b:5c:7d:f0:ea:f4:2b:df:ee:d0:f3:03:0b:
85:7e:33:50:b8:d5:f6:32:2e:01:a4:c8:d4:ea:d1:92:ff:c3:
02:18:d1:af:ed:4d:6e:90:d0:67:57:68:85:94:0f:45:fa:f8:
90:f6:5b:31:32:62:9b:21:58:86:45:5f:c8:8e:65:e1:e4:31:
18:d2:1e:69:e8:b6:71:ec:a3:61:51:cd:6f:29:11:5c:91:af:
7b:53:84:89:0e:2a:f7:b5:fd:0b:1b:6c:9f:0b:55:02:27:48:
21:b4:a1:63:3a:cf:22:c7:11:fa:fc:74:48:0a:fe:d6:ac:fe:
d1:05:ac:f9:53:81:16:92:27:db:d5:33:f3:e0:58:07:27:db:
cf:91:b5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 21:55:02 2025 by rpki-client