Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4138441-16e1-3863-a903-cc796f5746d2.roa
File: b4138441-16e1-3863-a903-cc796f5746d2.roa (raw, json)
Hash identifier: fm28lWS+iMfvXdtabbCiFKWrQcSbVZoR8bxrCWrUB3k=
Subject key identifier: C0:1D:51:1A:8B:B1:AE:C9:DD:7E:75:CE:08:D9:C8:80:D7:57:ED:7D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDBADB87E1DD1228CF8AD7080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4138441-16e1-3863-a903-cc796f5746d2.roa
Signing time: Tue 08 Feb 2022 05:00:00 +0000
ROA not before: Tue 08 Feb 2022 05:00:00 +0000
ROA not after: Tue 15 Mar 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:db:ad:b8:7e:1d:d1:22:8c:f8:ad:70:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 8 05:00:00 2022 GMT
Not After : Mar 15 04:00:00 2022 GMT
Subject: CN=cb4a23e0-5cf7-446b-9790-3cdab4c40464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4d:c5:49:c7:c2:60:af:23:cb:a9:37:7d:cc:
dd:b9:6b:88:d6:63:fc:7f:67:af:0c:da:22:81:97:
7a:86:2d:e7:14:d5:19:74:a7:1f:1f:f1:b4:79:f8:
52:5b:54:c0:d0:61:b7:8c:b9:15:b9:82:17:aa:cf:
1a:b6:87:07:26:85:bf:19:82:2e:d1:cb:81:b0:88:
13:96:00:2d:16:64:cf:51:26:75:fc:67:c4:3b:6b:
c8:73:e9:53:8c:f2:70:fb:91:78:9f:78:4e:a7:de:
4d:a5:ce:25:24:44:d9:10:64:48:b9:1c:2a:26:72:
e5:4f:8d:0d:7a:c1:f5:0f:b3:51:e6:7e:94:9c:ff:
b2:6c:7f:17:47:51:12:53:91:b2:15:4a:c3:4a:86:
a9:75:45:38:78:6d:94:ba:d3:f2:e7:f8:e3:47:c5:
14:c1:da:f9:6f:7c:cb:e5:5d:65:b2:db:7f:cd:fa:
20:f7:41:d0:47:ab:36:2a:4f:f2:3e:1e:55:89:7a:
92:44:54:d2:34:5b:84:65:59:45:f6:19:f4:fb:68:
89:75:80:e2:1c:46:e3:1e:98:7f:e2:48:e0:26:6e:
b9:0d:3a:15:1e:d5:20:08:56:ea:55:dd:6a:1a:89:
a0:68:11:0b:a6:03:35:c1:7e:a3:ce:68:0c:39:97:
7c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1D:51:1A:8B:B1:AE:C9:DD:7E:75:CE:08:D9:C8:80:D7:57:ED:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4138441-16e1-3863-a903-cc796f5746d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:2c:95:35:cd:5d:b2:f1:fd:42:61:c6:98:1a:25:9e:19:e1:
76:82:2c:78:d9:21:b1:8b:ad:df:e2:23:59:ff:d5:b3:c0:e7:
9a:16:e7:7c:82:c6:64:4b:88:cd:71:02:91:0a:5e:85:2f:3e:
89:15:d5:39:d8:75:f7:57:bb:08:6f:47:1b:f7:cb:ff:9b:67:
b7:80:9e:72:58:b4:cc:3b:99:78:0d:86:7b:b5:dd:00:80:82:
24:32:57:66:dd:21:02:9c:75:31:7a:b3:a6:d0:84:11:35:0b:
28:73:ee:c8:f7:a6:be:c9:c6:34:a1:76:b0:92:d7:b9:b4:1c:
f3:62:71:ff:41:ef:94:de:d5:e2:56:cf:89:85:5e:28:4d:4d:
97:3f:6c:6d:fe:37:96:16:39:de:4c:a3:0c:31:44:bc:f8:f9:
46:1c:5e:a0:29:23:43:f4:ee:2e:8d:fc:8b:3a:f9:49:41:bb:
9f:ba:38:d2:78:9e:ac:e0:e7:c5:37:6c:1c:2c:a5:ad:7f:f1:
e5:73:b7:57:c1:fd:dd:10:62:fd:b9:be:02:3d:00:7b:53:25:
05:41:1f:f1:24:05:32:6e:94:c7:04:4f:ae:98:59:a1:4e:12:
32:82:78:86:02:e1:a7:b5:d8:e0:68:8a:64:1b:12:b5:c8:e0:
27:1d:b7:59
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDzbrbh+HdEijPitcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIwODA1MDAwMFoXDTIyMDMxNTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2I0YTIzZTAtNWNmNy00NDZiLTk3OTAtM2NkYWI0YzQwNDY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv03FScfCYK8jy6k3fczduWuI1mP8f2evDNoi
gZd6hi3nFNUZdKcfH/G0efhSW1TA0GG3jLkVuYIXqs8atocHJoW/GYIu0cuBsIgT
lgAtFmTPUSZ1/GfEO2vIc+lTjPJw+5F4n3hOp95Npc4lJETZEGRIuRwqJnLlT40N
esH1D7NR5n6UnP+ybH8XR1ESU5GyFUrDSoapdUU4eG2UutPy5/jjR8UUwdr5b3zL
5V1lstt/zfog90HQR6s2Kk/yPh5ViXqSRFTSNFuEZVlF9hn0+2iJdYDiHEbjHph/
4kjgJm65DToVHtUgCFbqVd1qGomgaBELpgM1wX6jzmgMOZd8ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMAdURqLsa7J3X51zgjZyIDXV+19MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjQxMzg0NDEtMTZlMS0z
ODYzLWE5MDMtY2M3OTZmNTc0NmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEIslTXNXbLx/UJhxpgaJZ4Z4XaCLHjZIbGLrd/iI1n/1bPA55oW53yC
xmRLiM1xApEKXoUvPokV1TnYdfdXuwhvRxv3y/+bZ7eAnnJYtMw7mXgNhnu13QCA
giQyV2bdIQKcdTF6s6bQhBE1Cyhz7sj3pr7JxjShdrCS17m0HPNicf9B75Te1eJW
z4mFXihNTZc/bG3+N5YWOd5MowwxRLz4+UYcXqApI0P07i6N/Is6+UlBu5+6ONJ4
nqzg58U3bBwspa1/8eVzt1fB/d0QYv25vgI9AHtTJQVBH/EkBTJulMcET66YWaFO
EjKCeIYC4ae12OBoimQbErXI4Ccdt1k=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:09 2025 by rpki-client