Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd12a2f-cff3-3136-847a-bf3098048ddb.roa
File: bdd12a2f-cff3-3136-847a-bf3098048ddb.roa (raw, json)
Hash identifier: QtOdsIWe535FBTj00E87Jt4FAguXmsk8WCPcKVK6Ezk=
Subject key identifier: BC:5B:FF:7C:AC:16:9F:45:14:7A:5D:63:7E:0F:17:1A:5F:0B:89:CB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F66C2E786F3B68E23B1309900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd12a2f-cff3-3136-847a-bf3098048ddb.roa
Signing time: Wed 28 Sep 2022 12:00:00 +0000
ROA not before: Wed 28 Sep 2022 12:00:00 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:66:c2:e7:86:f3:b6:8e:23:b1:30:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 28 12:00:00 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=d8608e61-f76e-47ed-9296-7f46db2439cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cf:e5:d7:10:c4:61:67:80:17:b4:46:6b:3d:
69:ae:ed:63:ff:6c:23:10:fb:45:9b:b1:b7:60:ba:
75:5d:ee:52:8e:6b:29:4b:20:dc:3c:26:85:b1:fd:
ce:2e:1f:86:c1:55:71:7a:dd:78:94:55:87:9f:3c:
1a:30:86:61:83:73:1e:7c:04:00:54:7a:12:74:20:
20:6d:7d:fd:62:18:c3:9d:d2:6b:8a:4b:b7:7f:62:
da:96:34:65:b3:31:ff:da:1b:3a:70:58:60:38:ba:
3a:63:02:ba:5f:61:bf:89:94:9f:fa:98:ef:80:38:
d6:0d:ed:8d:96:11:58:60:50:22:37:d3:bf:96:dd:
73:ab:ca:e5:b8:97:a9:3d:70:9f:7f:ba:8a:41:a3:
06:23:2d:40:42:25:42:25:17:cf:28:7b:3e:fa:5d:
fa:15:bb:18:c7:99:94:a5:9a:bd:23:9b:a3:a4:2a:
0b:1e:ad:4a:b1:cf:a6:37:b8:fc:03:fd:63:0f:86:
75:5f:70:2b:00:b2:d2:df:05:48:36:75:85:c8:18:
22:ba:03:b3:9a:cc:d4:87:36:06:4e:d7:61:83:f0:
1a:45:9b:fc:d6:69:e1:5b:9a:3e:71:a8:c5:c4:ad:
45:20:d9:7b:3f:03:b0:70:fc:a2:cc:ca:7b:8b:b6:
87:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:5B:FF:7C:AC:16:9F:45:14:7A:5D:63:7E:0F:17:1A:5F:0B:89:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bdd12a2f-cff3-3136-847a-bf3098048ddb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:38:fc:20:8b:3a:a7:08:e7:65:a1:30:1d:8c:b8:69:9d:d3:
b5:62:c9:11:33:66:26:dc:8a:d7:28:fd:8e:10:31:d7:0c:62:
cc:8c:eb:b4:a2:97:e4:43:ba:29:b5:3f:96:f2:2d:bd:60:d9:
78:12:f0:f7:3b:c1:fe:5a:7c:bf:1c:ed:82:ba:6c:33:60:d0:
7a:f5:54:0e:62:b4:cd:2a:67:aa:93:3c:79:05:1c:80:0a:ee:
52:f7:f3:b8:6d:c0:bc:72:eb:98:30:0b:a4:ad:ad:11:6d:85:
12:5c:49:79:5e:76:7c:77:ae:1e:2c:3a:0c:cb:d9:c3:db:c8:
dd:fb:5a:f5:0c:08:37:ee:72:82:b1:c0:ef:d6:bd:f3:72:4b:
5d:35:f2:2e:3d:b3:77:9c:b7:f7:3b:39:fd:12:19:5f:01:f7:
12:99:e6:ae:ff:f3:34:71:49:63:f6:07:f3:1e:7e:c9:b3:7e:
ab:01:c1:94:21:f2:a2:c5:54:3d:3c:5b:85:57:e4:b3:7d:4c:
23:78:25:73:06:5b:d9:74:76:9a:c2:72:c1:3f:25:3f:7d:3f:
a0:53:0e:78:c0:81:aa:46:cc:93:a2:cd:57:64:5b:23:05:e8:
f2:10:a7:12:fc:99:83:14:57:f9:88:9d:5a:84:44:47:fe:0c:
6f:65:45:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:21:17 2025 by rpki-client