Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb49596f-9aa8-3408-ad58-8fd08f0da72d.roa
File: bb49596f-9aa8-3408-ad58-8fd08f0da72d.roa (raw, json)
Hash identifier: xcdcWuxcVAFZbDy7iX8gemoczYEN1/FCHTADnOF3xCM=
Subject key identifier: D0:32:57:B1:F4:76:23:44:77:95:ED:AD:C9:79:5D:19:79:8E:74:FB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583ED8712C3FD85A5D38AFA98680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb49596f-9aa8-3408-ad58-8fd08f0da72d.roa
Signing time: Mon 08 Aug 2022 12:00:00 +0000
ROA not before: Mon 08 Aug 2022 12:00:00 +0000
ROA not after: Tue 13 Sep 2022 04:00:00 +0000
asID: 701
IP address blocks: 155.146.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:d8:71:2c:3f:d8:5a:5d:38:af:a9:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 8 12:00:00 2022 GMT
Not After : Sep 13 04:00:00 2022 GMT
Subject: CN=4e87c51d-82dc-4053-830f-018e2af1889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:be:03:ca:bd:cc:39:12:02:cc:fe:fc:d9:97:
fe:71:b3:14:36:5d:be:ed:6a:60:2b:0f:cb:02:2e:
a7:a1:31:c0:2b:f7:d0:ed:95:c9:f3:9a:ee:68:39:
c2:a0:cd:83:5a:72:4d:89:87:8c:08:b2:53:ec:aa:
58:ac:56:bf:b4:7f:6e:6f:d1:3c:12:51:fa:4f:4b:
6d:1d:47:13:dd:01:32:62:e6:e4:5c:48:39:0f:27:
d3:18:ad:a9:33:f5:6a:3f:c9:a2:4d:d2:15:07:41:
92:b5:0e:f5:59:28:28:74:c3:05:20:1b:91:75:2b:
bf:6c:ad:0a:22:73:45:11:7e:4c:46:14:46:25:e6:
70:da:fb:13:af:77:be:66:b4:03:bb:73:88:7a:9e:
95:c7:4d:d6:06:66:7d:f1:0e:86:df:2c:f4:7e:cd:
56:e1:04:8f:2a:7d:25:c6:86:02:3e:92:f2:d5:b5:
6e:75:2f:46:9d:a1:e2:da:5c:09:44:ba:1f:57:2b:
31:0e:51:93:d1:6d:90:8e:ef:a9:e3:c2:28:35:e7:
96:e2:f5:18:31:09:94:21:b6:90:cb:a4:df:7f:00:
eb:bc:e4:06:4e:24:9e:46:76:d7:9f:6a:85:f9:22:
57:b5:5a:56:dd:e6:cb:31:be:be:ca:b5:38:66:05:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:57:B1:F4:76:23:44:77:95:ED:AD:C9:79:5D:19:79:8E:74:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bb49596f-9aa8-3408-ad58-8fd08f0da72d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:ff:2e:3d:7a:03:d7:7a:85:cd:c1:31:88:6c:5d:4d:6b:69:
1f:70:b7:84:2c:50:40:9b:d1:56:da:5d:f0:67:e4:fa:c3:12:
d7:07:c9:39:fc:14:60:68:68:b0:f4:ee:a6:81:29:89:73:4a:
bc:b5:56:9a:25:82:c9:99:e5:57:73:48:9e:00:75:d3:3e:f2:
31:d8:1a:5d:f1:08:93:72:20:4f:a7:01:56:24:13:11:70:95:
28:59:b8:e4:72:d2:a8:7b:1e:44:59:da:d1:58:b3:a8:be:18:
19:6b:97:a4:0c:26:25:44:1b:5b:79:54:2c:d5:09:de:b0:87:
33:09:67:2b:83:c2:0e:e0:6a:6c:b0:32:79:d2:c4:fe:4b:fe:
71:46:0b:8b:69:80:eb:be:8b:d8:ac:cb:76:1a:c3:c1:ab:cd:
7e:ac:20:f7:99:69:30:2e:a3:be:e0:bc:e8:ba:9e:0d:c1:d9:
ab:05:50:74:99:6d:cc:27:ba:68:fd:a6:44:ad:37:26:62:f2:
9b:9f:58:ad:d0:f0:c7:90:72:ab:06:f1:60:0e:f9:6a:58:b5:
19:b2:a0:54:2a:bb:c2:ef:58:71:e4:df:cd:10:a0:b1:0f:e9:
f0:a2:ef:6b:ee:f3:6f:a2:f7:e0:9a:46:ef:47:75:0e:8b:28:
cd:94:77:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:35 2025 by rpki-client