Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2b73ed9-4bd4-386d-b90c-f22c289ac287.roa
File: b2b73ed9-4bd4-386d-b90c-f22c289ac287.roa (raw, json)
Hash identifier: fItmBhXgcnUxEAvAb9lQDNC0YiftrkVnps4P9abfQ14=
Subject key identifier: 86:E7:7F:4F:1A:E6:C9:6F:D3:6A:29:5A:5D:DF:B0:A6:16:4E:07:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405F501FFD2D47560678DA2400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2b73ed9-4bd4-386d-b90c-f22c289ac287.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:50:1f:fd:2d:47:56:06:78:da:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=00ac146e-1dfd-46bd-a89a-3bdba75bfd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:2b:2b:2f:33:5a:e0:09:93:28:e3:f9:20:
40:25:86:da:a1:a0:56:6f:48:51:c4:7f:75:52:df:
7c:d5:3d:14:42:a8:15:5a:47:46:89:41:75:0d:14:
a7:37:ac:06:80:ce:6c:95:9e:0b:70:b6:00:1d:6e:
bd:08:3f:9a:7a:d3:c0:6e:ea:9d:ca:b9:2b:2c:86:
62:46:c4:8b:af:a1:8d:98:15:05:aa:70:f0:88:14:
13:8d:b2:9d:dd:c2:e8:d9:be:d4:d5:df:13:68:84:
c6:3e:e5:5e:d3:fb:cb:e6:b7:4c:59:a9:b1:8e:fc:
49:6e:e2:7f:fd:69:a6:83:3a:84:17:98:d1:04:b6:
0e:7d:61:18:2e:5a:2d:a0:9c:49:1b:26:f4:9e:e4:
44:98:b7:11:30:3a:aa:a9:d8:7e:0d:12:08:b9:61:
c9:71:c8:3f:92:a0:29:0f:d8:98:83:4a:9b:23:4f:
a8:17:b8:61:5c:c8:6c:c8:2e:08:c9:37:14:ea:5b:
a3:db:fe:ba:ca:e9:c2:f2:57:ed:09:4e:66:4e:0b:
b7:aa:2a:05:24:5f:ac:a0:bc:22:7f:ab:58:dc:23:
86:9e:eb:a0:84:65:81:92:26:47:fc:66:51:4b:ee:
d2:d5:a8:37:a5:db:8b:5d:da:27:b5:cc:e8:5f:ed:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:7F:4F:1A:E6:C9:6F:D3:6A:29:5A:5D:DF:B0:A6:16:4E:07:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b2b73ed9-4bd4-386d-b90c-f22c289ac287.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:50:b1:05:4b:d3:07:db:c6:4c:c4:da:3a:05:f5:44:dc:55:
d5:75:ee:27:bf:0e:d3:e2:bc:2b:83:51:df:68:6f:07:33:c3:
bd:c3:1c:e6:57:40:3f:d9:0a:b4:be:5e:34:1a:98:a9:44:48:
6e:ea:f6:b0:09:47:c4:0b:93:a8:a6:5e:13:7d:5c:c7:a6:fb:
40:e3:0f:dd:98:28:c1:56:7a:2d:6f:ea:68:d1:c8:89:d7:4a:
bb:70:47:e0:14:97:ed:88:80:d4:4b:5f:01:4d:9d:e8:3b:f3:
8c:94:57:b9:c6:69:f0:ae:e6:88:98:46:49:25:4a:a8:db:bf:
03:6f:dd:5c:6a:00:25:64:00:7d:e3:75:e4:dc:09:ee:6c:7f:
05:17:a7:be:f7:f8:72:23:fe:93:8e:f4:ab:4d:9c:ba:6c:0b:
4b:89:1b:1e:7a:39:31:a2:a5:f5:ea:a4:04:46:8b:07:0c:4e:
e7:53:76:9d:36:86:65:25:e2:ca:f1:7a:5a:6a:5a:19:4d:bf:
d4:19:e5:63:ac:5d:26:58:63:02:09:32:7a:b2:52:de:d3:e6:
b3:a0:62:71:0a:5a:e2:1c:dd:5c:72:44:f2:2a:a2:8b:1a:44:
ae:9c:1a:da:a4:b8:8d:f0:78:1f:94:3b:e2:b6:ba:91:c7:65:
93:d2:c2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:48:23 2025 by rpki-client