Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8975f3c6-51ee-3abd-bbf3-505c531c8eb7.roa
File: 8975f3c6-51ee-3abd-bbf3-505c531c8eb7.roa (raw, json)
Hash identifier: wKRETrpXiiDU5UNfJ45wD29PyHHjVx4c74ffhnB3GPc=
Subject key identifier: EE:A3:89:EB:F9:2C:0C:28:49:55:29:71:A9:AB:7F:76:D1:E9:F7:DD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405EF71DFC3BB2217D3F482600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8975f3c6-51ee-3abd-bbf3-505c531c8eb7.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5e:f7:1d:fc:3b:b2:21:7d:3f:48:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=2a86939c-e1c0-4e00-806f-9c8ae01f840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:16:16:de:4e:fb:8d:04:eb:b2:6e:0b:e4:73:
d9:53:a6:df:fa:7a:56:df:f2:7c:35:b6:45:86:69:
12:23:63:91:e6:29:89:ad:62:19:90:f0:01:42:7e:
d4:c1:a3:33:71:6d:ba:6d:36:4b:b0:bb:f2:94:f8:
e7:10:c0:f6:b0:9a:47:de:3a:45:96:aa:14:a4:6d:
27:c7:75:46:dd:bc:89:27:6e:95:14:32:4d:2f:e7:
5c:01:92:65:08:f9:39:de:c7:b8:44:79:0e:ff:3f:
45:fc:f5:ae:ad:74:de:46:20:35:58:80:4e:af:0e:
50:c3:7f:b3:4b:9d:64:f8:bf:2b:0c:c3:7b:c4:53:
2f:c7:83:62:2e:e3:0f:e7:9a:e3:77:7f:83:f1:85:
8c:1f:33:77:76:4a:ac:04:10:cf:c4:fb:07:a2:77:
1c:09:5c:59:09:da:8f:df:3f:8b:4e:e2:b4:e1:3e:
e7:88:1b:39:aa:62:46:8e:70:3f:5a:16:8d:99:4e:
bb:21:29:ad:1b:7c:b9:05:89:75:cc:cf:21:c8:a1:
7d:34:54:43:5b:f5:d3:db:26:73:dd:6d:9e:9d:0a:
4c:87:1e:e2:5d:b8:4b:f1:95:40:7a:69:8c:52:05:
34:13:7d:d3:8e:51:2b:c2:c4:c0:92:b8:72:78:b6:
50:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A3:89:EB:F9:2C:0C:28:49:55:29:71:A9:AB:7F:76:D1:E9:F7:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8975f3c6-51ee-3abd-bbf3-505c531c8eb7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:e0:8c:02:74:aa:7c:58:79:a1:7d:70:2f:78:f9:e5:84:0c:
ae:24:e3:98:ec:e3:21:e9:7e:32:61:6f:70:d2:9e:82:2b:5f:
4d:e5:eb:65:e1:05:95:d0:ec:ed:ae:55:71:c2:4b:81:34:39:
aa:d4:ca:ab:80:77:bb:48:0d:17:1b:18:de:c4:94:17:00:8d:
5a:3a:aa:6a:38:c8:3e:82:e5:09:e7:51:da:21:d3:c5:4e:17:
7e:6b:db:79:41:02:83:a6:a0:a2:a0:9f:20:66:5c:66:e1:dc:
b1:61:f2:6a:46:83:00:50:fe:9f:da:53:3c:be:f2:ec:cf:76:
93:34:74:e4:a6:ab:11:9f:ad:15:21:ae:bb:6a:eb:f8:85:79:
92:79:40:6d:54:8e:1e:2f:da:e8:11:78:f6:a2:f6:c5:37:0f:
51:aa:45:a2:26:9a:e5:6c:14:39:7a:96:f1:42:fc:02:af:95:
55:ff:89:e7:54:f3:88:94:5c:fa:eb:d8:56:34:1c:36:54:9f:
60:88:1c:e9:4a:a7:c9:5f:e9:7e:93:4e:13:0d:ad:cb:52:0b:
a7:0a:16:1f:93:e8:9e:35:03:25:ed:70:62:b9:71:5c:6d:10:
ad:02:0f:6f:ec:c7:89:48:b9:5b:80:ce:5c:90:14:2a:48:5c:
64:18:0f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:01 2025 by rpki-client