Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f85408b-97f8-3d2e-96d9-01923371074d.roa
File: 8f85408b-97f8-3d2e-96d9-01923371074d.roa (raw, json)
Hash identifier: H32PtTlYb44w9Mk7YKqnmDlqmzjS6rRv4K8sNgfqm+c=
Subject key identifier: 24:23:1F:EA:3D:7D:68:28:85:FB:78:34:1A:88:02:AC:A7:82:5B:F1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E7D46370A085A2F136CFC9280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f85408b-97f8-3d2e-96d9-01923371074d.roa
Signing time: Wed 06 Jul 2022 12:00:00 +0000
ROA not before: Wed 06 Jul 2022 12:00:00 +0000
ROA not after: Thu 11 Aug 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:7d:46:37:0a:08:5a:2f:13:6c:fc:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 6 12:00:00 2022 GMT
Not After : Aug 11 04:00:00 2022 GMT
Subject: CN=b00073c0-208b-4319-b416-dc4a818e5b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:fe:17:11:28:9f:f4:84:9c:f6:23:ba:2d:
42:6c:b2:30:78:0a:53:c1:e7:b5:ab:b9:fd:a6:78:
f8:06:07:70:20:6f:fc:52:db:31:36:2b:0f:c4:56:
e1:08:6b:ab:39:81:8b:a6:b4:b4:83:5c:9b:6b:20:
44:43:1e:77:f0:a5:13:8c:83:a7:0f:51:b9:7d:18:
ee:46:d2:0b:21:f0:f4:f0:d8:d5:10:0e:26:bf:1e:
54:21:d4:5a:e2:30:61:e5:6c:e3:f5:d4:98:d5:03:
bf:f1:ea:45:b2:a9:42:fc:ec:4b:70:8a:c2:2a:f4:
38:ae:b8:6d:fa:0e:28:96:18:c3:47:6f:c3:a4:f1:
1b:96:d7:f6:6b:eb:02:ab:59:d7:15:72:d1:0b:8a:
dd:19:04:27:6c:e8:74:8d:68:71:46:bb:14:c4:2a:
c9:c1:5d:1e:8f:77:b9:bc:1d:68:f3:00:32:27:2e:
87:97:57:87:30:90:93:cb:fc:e0:34:a0:e9:90:6c:
00:32:2d:1b:b8:c6:9f:e3:e7:b2:11:66:79:ce:bb:
57:a4:a6:2e:d9:eb:f2:77:de:7d:4c:d0:8e:fb:44:
c0:9c:a7:d5:4c:a9:cc:ac:bb:dd:6d:62:e2:de:61:
7f:be:60:87:b2:71:45:58:99:41:13:3e:c1:0b:49:
d5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:23:1F:EA:3D:7D:68:28:85:FB:78:34:1A:88:02:AC:A7:82:5B:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8f85408b-97f8-3d2e-96d9-01923371074d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:89:06:ed:df:cf:9e:71:e0:ea:94:c5:7e:fd:97:f2:75:85:
18:96:e3:17:96:e3:d9:56:68:89:63:37:45:41:ac:79:dc:cf:
bf:97:58:e6:91:4c:b8:5d:fd:94:fe:42:e3:f5:12:68:00:8f:
b7:9b:a8:93:a6:0a:30:5c:04:4d:41:88:d5:de:22:bc:f4:1b:
f5:95:ed:0a:04:dd:4a:90:85:2a:23:33:ab:02:30:90:1f:07:
4d:7c:c5:5f:1f:6a:08:c5:51:69:8a:05:83:09:e4:34:6d:74:
d7:3c:d7:79:dc:27:33:94:44:6b:9e:2a:72:4f:4a:93:74:41:
22:4a:59:e1:d4:94:11:e7:ee:7d:86:fd:52:70:60:93:82:95:
f0:14:91:76:12:b4:81:df:95:66:52:a0:7d:0d:87:73:6c:56:
b5:d4:77:39:f7:43:79:eb:7b:57:a9:79:3b:81:3f:11:26:17:
38:ae:ff:60:4d:4d:e4:0e:40:0e:24:40:74:fc:c9:4a:04:3a:
6a:03:3e:b9:07:c2:27:7a:86:f3:22:b0:44:cb:82:45:83:4f:
cb:89:26:98:76:f0:4a:b5:cf:9e:81:4e:db:3a:5e:f5:47:8c:
e3:9f:bd:dc:fc:f8:11:25:43:03:4f:fa:a1:b8:d3:27:87:4c:
7d:76:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:44 2025 by rpki-client