Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f76f5d1-1436-37c3-aa88-e7a2b5ab8550.roa
File: 8f76f5d1-1436-37c3-aa88-e7a2b5ab8550.roa (raw, json)
Hash identifier: ZA9XeYELC7Z2yCb5UdI/Niy8s92zvcjKyAaBoC9dg4w=
Subject key identifier: 0A:C9:55:5E:8A:66:30:9F:AF:A5:F1:20:5E:B7:19:36:41:F7:E9:A9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840524186AAD908D39CC4E9A800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f76f5d1-1436-37c3-aa88-e7a2b5ab8550.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:52:41:86:aa:d9:08:d3:9c:c4:e9:a8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=06e89f34-a062-4d68-a08d-436250b06e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:90:ec:73:db:03:0c:33:48:c6:02:59:e7:1f:
58:09:c5:cb:41:c8:20:7c:04:f5:8c:e3:62:96:4a:
6b:ef:ee:52:bc:36:66:fb:d3:6a:6f:c1:81:68:38:
e4:c4:5e:13:1a:c0:dc:c9:bc:02:c1:05:00:ee:fe:
8d:5a:b4:9d:c0:c0:82:cc:c0:47:f0:2e:eb:73:11:
1b:01:20:ad:8c:b1:bf:ed:b6:10:9a:2b:24:88:1a:
d9:76:55:41:92:fa:1b:e5:78:34:65:97:11:41:dd:
23:53:57:1b:46:aa:bf:0f:7c:02:69:03:3c:2b:c1:
45:87:4b:29:1f:c3:01:be:e4:39:18:50:dc:62:a5:
eb:23:b4:86:eb:93:d4:0f:da:a0:12:a0:f0:80:ce:
e4:42:66:01:c1:3d:d4:74:ad:6f:6d:2e:8d:a3:eb:
58:c2:40:96:0a:4c:e2:dd:46:b0:80:6f:48:4d:f4:
d4:20:a3:0c:e5:bd:b5:88:bf:19:7f:06:26:5e:d9:
91:82:c5:dc:86:af:0d:f1:b6:4a:db:f2:f5:7f:52:
be:cb:a3:ca:08:19:c3:aa:74:7f:6c:2f:bf:ab:1d:
49:12:1e:1c:fc:75:d5:41:05:42:3d:ef:2b:20:17:
7f:c3:f3:08:29:e7:9d:c5:04:a9:28:a0:4c:ea:3b:
2f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C9:55:5E:8A:66:30:9F:AF:A5:F1:20:5E:B7:19:36:41:F7:E9:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f76f5d1-1436-37c3-aa88-e7a2b5ab8550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:d4:30:48:d3:37:15:ec:81:6f:5c:ac:e5:81:3a:2f:3a:8d:
f2:2b:e7:d6:b1:b3:41:2d:09:81:93:85:b8:80:45:5e:41:c1:
ed:45:c8:eb:bb:b2:f4:1d:66:a1:12:17:03:e3:81:72:2c:cb:
13:5f:13:af:ac:37:c4:3b:90:4b:95:48:d8:66:0e:4b:f3:93:
2d:9c:56:ec:1f:24:a7:c4:62:05:af:85:36:54:86:64:8b:24:
29:9e:d4:02:dd:25:c7:f6:15:51:fe:97:f8:03:88:bb:55:f0:
e2:e3:11:c8:76:1b:b6:15:59:b2:6a:2c:49:20:d2:da:2b:1e:
2b:19:9e:bd:31:bc:a8:9a:01:b0:19:58:07:34:c0:76:4f:53:
a3:4b:1c:91:ce:37:78:de:4c:ca:8c:26:e3:97:84:f3:23:a0:
9e:ba:65:ab:c4:df:26:d5:0a:21:c9:ba:22:01:34:f6:e7:21:
23:d0:6c:79:43:24:48:7e:c3:1d:b0:f8:a0:43:a2:3f:c9:ca:
35:6c:87:1c:d5:1a:18:fb:f8:d1:1c:cc:f0:2a:bf:78:14:a2:
a1:40:59:5c:64:18:67:de:6a:eb:f7:60:b2:77:2c:e5:ee:d2:
b5:1a:1d:18:e5:aa:31:6d:6c:c8:d9:44:90:57:fd:38:cd:e2:
df:ed:a5:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBSQYaq2QjTnMTpqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyMTEyMDAwMFoXDTIzMDEyNjA1MDAwMFowLzEtMCsGA1UEAxMk
MDZlODlmMzQtYTA2Mi00ZDY4LWEwOGQtNDM2MjUwYjA2ZTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZDsc9sDDDNIxgJZ5x9YCcXLQcggfAT1jONi
lkpr7+5SvDZm+9Nqb8GBaDjkxF4TGsDcybwCwQUA7v6NWrSdwMCCzMBH8C7rcxEb
ASCtjLG/7bYQmiskiBrZdlVBkvob5Xg0ZZcRQd0jU1cbRqq/D3wCaQM8K8FFh0sp
H8MBvuQ5GFDcYqXrI7SG65PUD9qgEqDwgM7kQmYBwT3UdK1vbS6No+tYwkCWCkzi
3UawgG9ITfTUIKMM5b21iL8ZfwYmXtmRgsXchq8N8bZK2/L1f1K+y6PKCBnDqnR/
bC+/qx1JEh4c/HXVQQVCPe8rIBd/w/MIKeedxQSpKKBM6jsvPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFArJVV6KZjCfr6XxIF63GTZB9+mpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGY3NmY1ZDEtMTQzNi0z
N2MzLWFhODgtZTdhMmI1YWI4NTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5JQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHUMEjTNxXsgW9crOWBOi86jfIr59axs0EtCYGThbiARV5Bwe1FyOu7
svQdZqESFwPjgXIsyxNfE6+sN8Q7kEuVSNhmDkvzky2cVuwfJKfEYgWvhTZUhmSL
JCme1ALdJcf2FVH+l/gDiLtV8OLjEch2G7YVWbJqLEkg0torHisZnr0xvKiaAbAZ
WAc0wHZPU6NLHJHON3jeTMqMJuOXhPMjoJ66ZavE3ybVCiHJuiIBNPbnISPQbHlD
JEh+wx2w+KBDoj/JyjVshxzVGhj7+NEczPAqv3gUoqFAWVxkGGfeauv3YLJ3LOXu
0rUaHRjlqjFtbMjZRJBX/TjN4t/tpY0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:45 2025 by rpki-client