Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7dc28615-5556-3e33-b05b-5b477d25e0f3.roa
File: 7dc28615-5556-3e33-b05b-5b477d25e0f3.roa (raw, json)
Hash identifier: RcyKWGiUcyhYkMpkwdJVV9zbfjzlg+XnKLGnVA4IebE=
Subject key identifier: 21:0B:50:3F:D5:DA:A7:F7:6C:EB:20:E3:8B:87:06:A0:A3:D7:69:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D78557071AAC576C241BA2880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7dc28615-5556-3e33-b05b-5b477d25e0f3.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Tue 10 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:78:55:70:71:aa:c5:76:c2:41:ba:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : May 10 04:00:00 2022 GMT
Subject: CN=f97bceee-8d14-470b-a985-0661670312ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:be:82:1c:68:9c:98:c6:25:54:00:dd:a4:21:
be:4c:a4:e0:4c:d9:ba:2d:0d:0a:19:b8:ac:98:9e:
9a:67:f0:0e:e1:2e:d9:51:eb:73:3e:d6:99:5d:09:
60:11:4c:f4:7e:83:02:42:1e:19:9a:5a:ba:dd:f9:
28:83:5d:31:6f:2b:cd:ac:09:2a:d0:2c:c8:63:a2:
1e:13:34:a9:54:d5:a1:93:b5:ff:9f:b0:e7:27:b0:
68:83:d1:6c:99:84:37:1c:0d:6f:40:b5:9f:e5:bc:
51:07:ca:7a:ce:f3:f6:ab:a2:9f:f4:05:3e:4c:ca:
23:79:55:8f:7a:cc:f4:25:8b:3e:bd:44:33:7c:76:
cf:bc:48:91:50:7e:68:3b:f9:90:cd:22:67:08:9d:
88:05:1a:39:a0:1d:cf:ad:24:da:7c:74:12:e2:85:
f2:c9:9c:bd:4a:49:1e:70:46:d5:8c:e0:69:33:98:
bf:49:5d:5f:8a:8f:a4:33:6a:34:16:6f:eb:04:af:
9d:af:da:8e:4e:dd:50:c4:18:bd:74:5c:d4:12:ba:
da:79:f5:29:c4:9d:8b:b7:a8:63:31:97:6a:19:05:
97:51:4d:7e:18:e4:e4:3b:ea:bd:98:20:88:bc:8d:
65:0d:a7:41:10:88:ad:f9:82:87:eb:3d:da:48:db:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0B:50:3F:D5:DA:A7:F7:6C:EB:20:E3:8B:87:06:A0:A3:D7:69:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7dc28615-5556-3e33-b05b-5b477d25e0f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:40:9e:31:48:0e:d4:9a:18:7a:db:0d:3e:a2:32:3c:6a:b3:
45:9f:04:38:9c:58:45:89:fe:6f:ae:e6:d6:4e:91:22:82:e7:
04:56:a9:63:3b:2d:5b:b9:b0:f2:a9:15:64:b3:01:48:73:50:
1c:14:71:27:29:b2:00:04:26:c3:c9:11:01:c7:66:1b:ed:06:
fe:a6:9d:54:7e:68:8d:fc:b7:4a:4f:36:4a:73:d1:8f:f6:e6:
92:51:56:87:62:a5:a2:d3:4d:11:64:77:23:be:c5:aa:da:95:
47:53:43:50:90:a1:c6:ac:7f:8d:45:24:11:8f:15:2e:ea:02:
b7:9d:48:73:0b:fa:a1:ba:bc:56:40:d8:9a:99:8d:4a:81:b9:
ca:79:90:96:db:a5:90:bc:2d:40:85:af:3e:be:57:70:f9:8c:
fe:c9:a9:17:b6:48:69:dc:f7:c0:eb:66:13:7c:66:60:36:c1:
37:7d:a8:d1:a3:5b:e5:80:ea:c0:2e:97:cb:7c:2a:e4:fc:6c:
19:5b:c2:53:44:49:21:81:92:3e:d1:4f:63:de:ac:e3:50:3f:
33:78:9b:20:9e:a9:7e:3d:96:76:1a:66:3a:24:2c:e0:b5:80:
47:dc:52:e2:61:be:d9:45:19:c9:c7:ac:64:f4:9b:e1:32:d0:
18:60:62:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD14VXBxqsV2wkG6KIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwNTA0MDAwMFoXDTIyMDUxMDA0MDAwMFowLzEtMCsGA1UEAxMk
Zjk3YmNlZWUtOGQxNC00NzBiLWE5ODUtMDY2MTY3MDMxMmZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhb6CHGicmMYlVADdpCG+TKTgTNm6LQ0KGbis
mJ6aZ/AO4S7ZUetzPtaZXQlgEUz0foMCQh4Zmlq63fkog10xbyvNrAkq0CzIY6Ie
EzSpVNWhk7X/n7DnJ7Bog9FsmYQ3HA1vQLWf5bxRB8p6zvP2q6Kf9AU+TMojeVWP
esz0JYs+vUQzfHbPvEiRUH5oO/mQzSJnCJ2IBRo5oB3PrSTafHQS4oXyyZy9Skke
cEbVjOBpM5i/SV1fio+kM2o0Fm/rBK+dr9qOTt1QxBi9dFzUErraefUpxJ2Lt6hj
MZdqGQWXUU1+GOTkO+q9mCCIvI1lDadBEIit+YKH6z3aSNtFLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCELUD/V2qf3bOsg44uHBqCj12knMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2RjMjg2MTUtNTU1Ni0z
ZTMzLWIwNWItNWI0NzdkMjVlMGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIZAnjFIDtSaGHrbDT6iMjxqs0WfBDicWEWJ/m+u5tZOkSKC5wRWqWM7
LVu5sPKpFWSzAUhzUBwUcScpsgAEJsPJEQHHZhvtBv6mnVR+aI38t0pPNkpz0Y/2
5pJRVodipaLTTRFkdyO+xaralUdTQ1CQocasf41FJBGPFS7qAredSHML+qG6vFZA
2JqZjUqBucp5kJbbpZC8LUCFrz6+V3D5jP7JqRe2SGnc98DrZhN8ZmA2wTd9qNGj
W+WA6sAul8t8KuT8bBlbwlNESSGBkj7RT2PerONQPzN4myCeqX49lnYaZjokLOC1
gEfcUuJhvtlFGcnHrGT0m+Ey0BhgYsc=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:57 2025 by rpki-client