Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7decf794-e29b-3dfd-a65c-afbe1a45551d.roa
File: 7decf794-e29b-3dfd-a65c-afbe1a45551d.roa (raw, json)
Hash identifier: Tr+dGG5LS92CyINeNdVjOVqUz/++Kgt/SpgUXygXs2Y=
Subject key identifier: BB:E1:35:D4:72:65:EE:66:C3:FF:67:9D:E1:C2:69:94:35:55:97:7B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DC69E86E1BCE87762C439F680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7decf794-e29b-3dfd-a65c-afbe1a45551d.roa
Signing time: Mon 02 May 2022 12:00:00 +0000
ROA not before: Mon 02 May 2022 12:00:00 +0000
ROA not after: Tue 07 Jun 2022 04:00:00 +0000
asID: 22394
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c6:9e:86:e1:bc:e8:77:62:c4:39:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 2 12:00:00 2022 GMT
Not After : Jun 7 04:00:00 2022 GMT
Subject: CN=6c257cc1-6fbd-45b3-bafd-6b0707a7df3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:32:27:2a:9f:d0:c8:28:4e:2c:d4:6a:19:b4:
40:ae:ad:95:9a:93:4e:38:81:3f:d9:47:13:3c:3e:
82:59:86:77:13:ee:71:e2:8a:72:8c:54:fc:02:92:
a1:c9:fc:fc:3f:61:24:df:45:63:78:a8:7a:0f:42:
dc:3a:30:1f:f6:0c:e0:86:05:cf:d0:e1:55:30:89:
a2:42:98:2a:d9:92:30:e3:df:d2:16:96:36:c2:c1:
0c:c6:4a:fb:f9:6b:23:9d:98:a7:96:4b:4c:b2:20:
f5:87:a0:bf:e4:71:a4:45:a0:70:07:a3:72:78:dc:
8e:0a:4c:70:a6:81:ef:90:2d:50:da:3d:d9:69:b3:
55:ef:23:ca:c4:21:ae:2a:89:22:40:32:e7:fc:7f:
a0:8c:cd:c0:5e:1d:75:39:8a:f0:7e:fa:cc:8e:d4:
a1:96:97:33:c1:4e:55:a0:e3:d5:3f:26:74:04:ba:
6d:94:82:47:8d:52:eb:e0:fc:5c:b2:fc:2f:93:90:
84:56:f2:7a:11:02:b0:93:d4:5f:44:de:87:dc:24:
01:3f:c5:3a:f5:d6:d4:6a:3a:c0:ef:32:58:1e:d6:
d7:cc:dc:61:66:15:16:04:33:db:bc:f5:53:5e:a2:
9a:6b:f9:be:bd:61:c7:7b:3b:73:41:1b:0c:55:e9:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E1:35:D4:72:65:EE:66:C3:FF:67:9D:E1:C2:69:94:35:55:97:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7decf794-e29b-3dfd-a65c-afbe1a45551d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:6d:1f:ac:2a:b9:85:8e:48:02:02:14:ff:8f:ec:8b:14:0c:
e2:50:3d:64:94:bc:86:a3:da:7e:06:bf:d8:38:b9:8e:55:fe:
da:17:92:ab:fc:7f:eb:37:21:0d:c9:36:15:0e:b5:81:72:54:
eb:b4:5f:ab:70:f5:b6:b8:c7:0e:39:08:15:d9:24:1f:19:26:
a3:ed:73:b6:2d:1d:ae:55:52:2f:43:ba:e3:41:4f:96:8c:26:
25:69:ee:71:d4:ac:4d:e3:dd:31:58:cd:ac:49:7c:0d:98:7a:
9c:4a:0b:3a:f3:79:47:50:eb:c4:0d:f0:27:27:d2:e0:7c:a9:
9b:8b:fc:20:8b:e0:23:94:ba:e9:b0:97:64:95:b0:c6:15:63:
bb:6b:3a:5a:b2:f3:19:73:9c:5e:95:81:6d:a5:94:c6:a1:4a:
26:e7:50:c8:98:dd:35:8e:b4:46:e5:cc:2f:c6:63:a1:30:7c:
7e:51:4e:fe:17:b4:0b:ac:45:4c:ce:b4:00:f6:5a:98:d4:ae:
5f:5b:78:9e:1b:05:8d:70:de:13:b2:52:be:08:53:ef:8b:57:
9d:64:90:94:f3:7e:6e:5d:d4:f0:84:9f:f5:24:f4:33:1b:49:
e1:6b:f0:e1:f2:6f:bf:c9:91:a3:46:8c:b8:2f:0f:9c:3c:a8:
60:6a:fa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:33:23 2025 by rpki-client