Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a15858cc-0e25-3122-b6be-6cda7e90b194.roa
File: a15858cc-0e25-3122-b6be-6cda7e90b194.roa (raw, json)
Hash identifier: i7+5IX6/ZAzjMTbQdrPtmT/d+gA/2rvTZR5YmaI8RvY=
Subject key identifier: 22:AA:8E:05:19:41:79:D2:67:64:BD:A5:24:28:00:3C:71:A7:C3:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB4B63AD3ABDD7AC965E50620
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a15858cc-0e25-3122-b6be-6cda7e90b194.roa
Signing time: Tue 25 Jan 2022 05:00:00 +0000
ROA not before: Tue 25 Jan 2022 05:00:00 +0000
ROA not after: Tue 01 Mar 2022 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b4:b6:3a:d3:ab:dd:7a:c9:65:e5:06:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 25 05:00:00 2022 GMT
Not After : Mar 1 05:00:00 2022 GMT
Subject: CN=19c2f5b9-bcd4-4d79-92da-62e58a69c643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:17:53:dc:46:cd:ac:fd:93:af:04:01:66:
9e:11:37:25:f6:3f:0a:0d:8f:af:00:1b:18:fb:ec:
d1:be:42:45:f8:3e:84:fe:3e:e6:0f:3d:74:09:9a:
e4:a7:16:8f:5d:41:3f:31:52:5a:0f:d1:f6:5f:13:
f7:50:c4:c7:c8:e2:34:f4:b9:3c:73:08:67:38:ea:
20:ba:d7:39:ce:89:83:ea:5c:c1:f8:4b:59:99:9b:
1e:5d:52:55:a9:2e:19:0f:c6:0f:0c:38:64:5f:f3:
76:67:54:c4:a3:f7:f0:5c:4a:e0:a2:66:2f:42:d3:
f0:ac:8a:5d:74:ec:dc:0d:fa:d5:17:ae:77:6c:b0:
c2:43:eb:35:69:92:6b:7c:ba:0c:12:94:1c:fe:ab:
7d:84:5a:e6:dc:1f:d0:94:ce:7e:bb:05:45:68:a5:
f3:67:96:67:92:9d:17:16:b6:a7:45:02:3c:63:ba:
47:cb:77:bf:2f:d4:14:c7:89:2d:69:f8:a2:0a:96:
c8:a3:fa:3c:4e:9b:64:d0:98:76:ac:8c:e1:18:95:
43:b5:69:2f:7c:92:ac:39:5c:29:61:c2:75:da:79:
20:d4:83:59:b6:75:c6:39:56:4e:87:b1:25:65:2e:
58:36:a4:52:b8:df:be:72:08:96:d2:8b:9a:37:2c:
7b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AA:8E:05:19:41:79:D2:67:64:BD:A5:24:28:00:3C:71:A7:C3:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a15858cc-0e25-3122-b6be-6cda7e90b194.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:75:1e:16:ae:05:d9:b8:a5:cc:1c:83:f4:22:35:8d:b7:b9:
db:9e:b0:ed:b2:5c:c3:f3:76:29:59:75:67:99:7a:b4:e4:21:
64:27:4d:a6:ad:ed:cc:94:b9:6f:66:15:0f:32:e5:08:1d:11:
ce:df:87:41:03:c5:b2:71:6d:66:97:ae:d2:5f:f0:fb:0b:6f:
96:b3:1f:5a:5f:a8:c5:28:c4:ab:04:20:ae:63:5f:22:cb:a8:
4b:93:23:d5:2c:ae:de:27:18:1b:0c:18:16:fd:9f:3a:34:95:
5f:43:25:28:3c:b1:10:82:90:bc:c0:04:cd:61:9c:ef:95:f4:
0b:1e:3b:b4:88:ff:9d:07:2c:12:d9:ce:04:a0:e8:35:d8:fd:
41:2c:dc:f9:f2:46:ab:bb:a1:45:09:f4:b8:78:e9:68:b7:53:
e8:1f:f6:0f:ef:0e:45:2c:92:ef:c9:c5:77:70:82:7e:dd:6e:
e4:7d:1d:ab:2a:06:df:22:ff:51:12:1e:a4:65:8d:14:09:af:
70:8f:5d:64:e9:4b:d3:c4:94:5b:6a:e1:36:fd:bc:1a:87:fb:
dc:c4:50:ec:fe:e7:c0:64:e1:3e:f6:41:61:8a:51:19:63:08:
c2:24:f8:04:b1:e9:90:66:25:86:b3:c5:31:05:6e:92:da:13:
8a:e5:40:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:58:09 2025 by rpki-client