Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4f65418-5f66-3a76-9824-49e71f465ad3.roa
File: b4f65418-5f66-3a76-9824-49e71f465ad3.roa (raw, json)
Hash identifier: fNc075cqPJjvc1/P69krAMIPIXuugJkMjo1LCB8MN1I=
Subject key identifier: 49:C5:BE:90:1A:48:CF:E8:CA:FA:96:BC:48:3F:6F:9B:E6:94:00:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F74757F449FEB848CCDB3A900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4f65418-5f66-3a76-9824-49e71f465ad3.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:74:75:7f:44:9f:eb:84:8c:cd:b3:a9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=bf58cf3c-035a-44e7-9b3b-50788a45ca6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:68:e7:2c:68:2c:4c:44:2c:9f:0e:5e:c1:
29:d3:a8:c8:7a:5a:ac:9b:08:d2:36:1f:fa:e6:1d:
84:14:50:c7:55:d8:d0:46:1d:f8:6a:b6:04:cc:e9:
4a:8d:cb:2e:45:35:7c:3b:0f:14:2a:bd:b9:a1:08:
be:c5:d6:9b:0d:09:c6:47:51:7e:4d:bc:69:50:d7:
6d:dc:5f:c0:c7:6f:55:93:10:0c:db:44:92:9a:31:
5e:12:b3:92:bb:ae:65:21:a0:50:99:02:70:43:f1:
e5:8b:f4:8c:d6:34:a0:71:71:c2:a8:90:a7:76:bf:
3f:f7:6a:16:bf:e0:14:be:c6:17:75:bf:ba:6d:60:
37:80:2c:bd:b3:6e:e7:4e:27:bf:fc:07:c4:82:ff:
12:43:d8:27:97:ec:f3:15:cf:45:9b:34:1e:3c:c5:
58:c4:53:0f:fe:5e:9f:51:05:b2:13:9a:65:c0:bb:
e1:1a:b5:3f:66:de:f5:4b:6a:b9:de:25:c3:96:ce:
70:48:99:33:b9:19:a5:7a:f7:77:8a:1c:ba:5e:b9:
9c:94:8a:0b:f5:98:64:08:47:5f:41:e5:55:5d:70:
a0:8a:51:05:71:22:4e:50:60:54:67:69:bb:0d:71:
29:ec:4c:80:93:39:b7:41:93:51:ba:c3:61:74:5f:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C5:BE:90:1A:48:CF:E8:CA:FA:96:BC:48:3F:6F:9B:E6:94:00:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b4f65418-5f66-3a76-9824-49e71f465ad3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e7:17:a0:58:1f:42:de:b6:93:2c:0c:72:ba:80:89:d6:ac:
23:35:91:2e:9b:06:97:0a:bd:07:44:46:99:f3:28:5e:2d:40:
b3:ec:95:1b:75:5a:77:34:84:5d:be:44:88:c3:d7:7b:97:10:
03:ce:49:08:e2:08:97:bf:50:45:6c:39:ab:f0:23:28:1e:b5:
7f:35:97:93:17:fe:18:f4:40:74:17:80:2a:c5:43:0e:8e:16:
11:fc:b9:22:6d:f1:d2:35:1f:20:fc:9e:57:af:bb:9e:3e:4c:
c0:a0:fc:5c:0c:15:ab:7b:c8:95:17:8d:92:b4:55:f8:d3:32:
27:65:e7:dc:69:b8:99:cf:9e:e1:71:0d:ad:17:5d:ad:5c:9e:
1f:5b:dd:a8:3b:3b:a7:be:fc:df:0e:27:ee:70:d3:1b:1c:01:
14:71:f3:09:db:8c:51:ba:48:19:75:40:a8:f0:1e:9d:17:f0:
6a:12:e9:2e:fb:cc:a7:20:22:ef:a9:bc:7d:a2:91:e6:16:f4:
cf:1f:11:02:e4:c5:32:7a:22:82:94:34:8c:5b:a1:6f:5a:f7:
70:c0:d4:1a:4c:84:54:dc:7f:30:36:16:09:3b:8e:47:6b:21:
91:e0:37:de:87:41:2c:08:07:c4:08:fc:88:f8:64:51:4b:5f:
30:41:5c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:16 2025 by rpki-client