Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b553f12d-c0dd-368f-b985-65b3e4e97841.roa
File: b553f12d-c0dd-368f-b985-65b3e4e97841.roa (raw, json)
Hash identifier: DGQXFPq6UsIKKeZORwda0Or8cvDByyyO501GcRjPl5U=
Subject key identifier: 69:8E:C3:D5:E6:82:D8:B7:9B:7D:B9:E5:00:36:C4:33:6A:91:E9:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFA49B72736B6595AE2449C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b553f12d-c0dd-368f-b985-65b3e4e97841.roa
Signing time: Sun 20 Nov 2022 12:00:00 +0000
ROA not before: Sun 20 Nov 2022 12:00:00 +0000
ROA not after: Mon 26 Dec 2022 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fa:49:b7:27:36:b6:59:5a:e2:44:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 20 12:00:00 2022 GMT
Not After : Dec 26 05:00:00 2022 GMT
Subject: CN=4d2036d4-0b9b-40e9-bb4e-d3a9cb7c0670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d8:57:ff:46:72:2a:46:5b:bf:7c:59:be:0f:
c9:e5:5c:f4:b0:a2:71:62:b6:e7:fe:43:81:33:37:
91:d6:92:59:27:53:0e:3f:8a:6b:38:77:0e:3e:f0:
6c:ee:e7:13:7b:b0:2d:a3:95:79:15:4c:63:89:c9:
a7:02:19:fc:2c:a3:48:bc:b5:90:0a:6d:ba:54:f2:
c8:cb:36:9d:66:2d:51:68:88:18:74:e4:e3:bc:55:
99:6d:a4:d9:13:5a:c2:09:0d:a4:43:ea:0e:1f:25:
78:a1:e3:39:df:3d:90:3f:f0:34:83:f7:f8:e9:44:
18:08:f8:c5:27:0b:a9:06:10:46:ad:6c:55:e7:13:
c5:dd:5d:6a:20:dd:23:0a:6e:1d:8f:5e:cc:3a:1d:
45:7d:f0:29:1d:20:be:93:05:f7:53:9e:5e:33:78:
ee:87:98:c0:1d:8b:11:ea:b7:81:41:f1:e5:67:ec:
c2:be:52:49:f4:4b:a8:65:4f:44:2f:54:da:90:06:
19:aa:d3:47:ae:51:07:c0:e2:1e:ec:03:48:86:83:
af:9a:be:43:9f:f2:cc:89:2f:f0:5b:57:8a:01:8b:
b3:39:04:bf:cb:b1:6e:77:e4:5f:9f:44:b9:76:b9:
b6:22:fe:b4:fc:03:fa:26:95:1b:e1:af:a9:c0:0f:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:C3:D5:E6:82:D8:B7:9B:7D:B9:E5:00:36:C4:33:6A:91:E9:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b553f12d-c0dd-368f-b985-65b3e4e97841.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:dc:8c:63:9e:1d:39:6a:a8:eb:87:3d:1c:ad:33:ba:93:03:
d7:28:ab:f2:3c:31:22:72:45:b7:ef:2f:4c:b6:f9:f3:27:4b:
93:5c:5a:8c:83:6d:a8:b3:17:e6:ab:2d:70:0a:82:4d:8a:3a:
56:4c:4a:da:c9:94:94:7f:a5:90:0c:c1:22:a7:68:d4:4e:79:
f6:52:da:d1:87:b4:4f:9f:fa:3b:3a:54:cf:f4:14:be:1c:85:
cf:e1:30:1d:dc:1f:ef:bc:e2:ea:94:70:b1:30:57:23:be:bb:
30:36:9b:1c:01:b6:a8:82:2a:f2:73:30:8f:84:9f:80:9c:de:
c3:f7:06:24:10:83:0e:c8:fe:f7:c5:7a:c3:64:e4:7b:54:1d:
d6:bd:b0:da:a1:cf:3e:54:df:06:ec:ac:4d:4d:e2:99:b2:d9:
d6:a5:cd:26:36:c4:fe:13:0e:44:09:38:c4:c4:a3:15:30:9c:
9f:95:e5:b0:dd:fa:0e:57:64:e6:a2:02:6d:aa:d4:1f:2d:61:
77:40:13:48:b5:6f:5e:92:2f:59:33:65:64:62:05:79:ff:a2:
62:73:81:52:6d:3e:c0:84:06:5d:ce:0c:e5:77:e8:54:60:d5:
1d:be:da:5b:15:86:09:c2:37:14:c6:3c:ab:4b:f9:af:77:9f:
76:52:e7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:11 2025 by rpki-client