Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4587d05-f0be-3800-9d07-3f3439719580.roa
File: a4587d05-f0be-3800-9d07-3f3439719580.roa (raw, json)
Hash identifier: 6TxCtE12j4XI8bDLrCZenWoxktQyw1PVX6zewZmqSJg=
Subject key identifier: 12:1F:37:6C:98:16:CF:0C:DB:B6:46:9A:A4:65:3E:1C:2C:52:B1:EF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D786449ECFCC14B9F2A124F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4587d05-f0be-3800-9d07-3f3439719580.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Tue 10 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:78:64:49:ec:fc:c1:4b:9f:2a:12:4f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : May 10 04:00:00 2022 GMT
Subject: CN=fff718d5-8d8c-4ffc-8fc8-b995262f6514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:f7:d8:ba:a1:3f:6f:97:16:38:8b:ef:1d:
aa:3d:24:89:ff:a0:f7:23:5e:70:5f:ee:20:23:91:
3f:81:12:03:3d:c9:fd:6d:91:8e:54:4f:8b:13:46:
48:9e:be:be:e1:2f:e2:bb:af:68:fe:44:96:01:43:
75:a4:7a:28:7d:bd:f9:b9:ca:4a:7d:53:32:6e:7c:
17:b6:0f:d0:f3:ec:14:3e:27:f1:ea:b9:a6:63:29:
99:e1:df:1d:3c:b9:06:b8:91:2a:b5:69:14:ca:11:
0d:e2:36:bd:f4:be:4e:48:e9:73:39:a1:b5:27:4f:
f7:1e:69:19:6b:91:7c:3c:91:de:07:dd:3b:76:e2:
d8:b6:29:5b:30:44:b7:29:d7:af:c0:59:b7:38:39:
34:2e:69:12:ee:fd:73:48:58:12:1f:eb:f2:f9:19:
0b:13:b7:ec:c8:c2:97:25:82:f2:59:7e:22:6b:07:
98:89:f2:35:c8:cc:9f:35:18:93:ca:3a:db:b9:ef:
58:34:f2:b7:59:0b:68:45:dc:33:34:87:c4:a1:a1:
61:ec:fa:b5:8d:07:9c:64:46:67:9e:51:bb:3b:a8:
ed:b5:52:1b:aa:da:4d:93:37:3a:d6:d1:2f:17:4b:
d5:25:4f:75:1f:e2:72:e8:28:af:fa:11:ee:6d:c1:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:37:6C:98:16:CF:0C:DB:B6:46:9A:A4:65:3E:1C:2C:52:B1:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a4587d05-f0be-3800-9d07-3f3439719580.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:fd:e8:a4:5e:52:e8:96:1e:42:3d:0d:d0:dd:6e:f6:94:8f:
56:2b:e8:fd:0b:53:df:ab:c6:e4:2f:92:07:19:2c:67:23:6e:
de:87:57:df:23:51:93:0a:47:34:56:9d:db:a8:4c:4f:db:cb:
9b:35:cc:92:3d:73:b8:ce:8c:57:e3:14:4e:69:4c:55:9e:c1:
f3:2c:83:19:9a:41:63:12:22:ca:d3:ac:f0:7f:7c:53:14:4f:
40:5a:97:fd:4a:eb:7c:13:14:f8:89:48:10:ca:ab:c6:5c:97:
b0:a8:bf:91:68:66:df:f9:75:86:59:20:37:46:73:c6:c4:73:
45:70:45:65:bd:96:e0:77:84:8e:93:d5:5e:3a:6d:64:dc:13:
47:b1:9a:aa:71:5b:d7:02:24:ab:52:5f:02:f8:11:a3:26:eb:
94:43:41:eb:bb:44:b4:82:af:2e:85:17:c5:99:53:ca:e7:cc:
db:9e:12:d8:d6:5e:2d:33:46:88:2a:3a:99:72:b5:e7:a3:c2:
96:64:bd:ea:15:48:60:df:c1:76:25:f7:82:b8:f9:22:31:fc:
8f:4c:de:72:4a:4f:55:04:b0:fd:45:dd:2c:f3:42:9e:2f:54:
86:fe:00:06:60:d1:18:ec:7e:6a:b6:f6:ab:82:60:84:74:fd:
13:16:ea:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:35 2025 by rpki-client