Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bde7ae49-4d68-3196-9235-8d22728dcfb6.roa
File: bde7ae49-4d68-3196-9235-8d22728dcfb6.roa (raw, json)
Hash identifier: QbOAcGo/Qh9ZWPZyuSz7cABVK9XipCOQZivK8Be/yDA=
Subject key identifier: 27:AE:60:A8:A5:27:A4:6E:C1:0B:1D:8D:D6:3D:D4:F9:51:40:07:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D785595E7F89754DA8BAE74C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bde7ae49-4d68-3196-9235-8d22728dcfb6.roa
Signing time: Tue 05 Apr 2022 04:00:00 +0000
ROA not before: Tue 05 Apr 2022 04:00:00 +0000
ROA not after: Tue 10 May 2022 04:00:00 +0000
asID: 701
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:78:55:95:e7:f8:97:54:da:8b:ae:74:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 5 04:00:00 2022 GMT
Not After : May 10 04:00:00 2022 GMT
Subject: CN=6fe41e16-5b9b-4d47-9017-084272b90ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:d3:d0:6b:4f:14:26:85:fa:a3:01:99:93:
20:19:61:9c:3e:d8:8c:2b:e7:9f:b5:4e:27:fc:8b:
d3:32:07:32:c9:a5:44:5b:89:66:ef:c4:b8:08:95:
f2:67:2a:dd:94:20:06:67:d4:37:af:2b:b1:ef:09:
19:a3:a6:79:ea:6e:59:49:55:4a:8e:13:1a:10:5b:
17:e7:8a:46:39:22:cd:63:eb:86:0c:23:2c:6c:66:
9a:dc:a4:8f:71:41:6b:81:62:cb:29:97:03:5d:fd:
8b:53:33:68:31:b4:d5:d4:ad:57:34:d1:1a:35:11:
cb:b8:ca:33:1e:9f:b0:a0:84:d8:a8:d0:ab:cd:d7:
af:e3:9b:65:1a:d9:fb:0c:46:10:05:49:4c:17:35:
1c:72:09:de:93:a6:e1:c6:98:0c:f0:4c:fb:c8:d2:
93:9b:6b:77:93:02:7f:2e:57:28:53:55:cf:7d:25:
e5:c5:c3:50:1b:31:d9:29:bd:4d:5f:53:91:af:09:
ec:10:51:74:20:f9:ff:0f:1c:00:e5:ac:e2:0c:5b:
88:21:34:7a:55:be:38:f7:b9:f8:c8:45:6e:b9:63:
f6:c4:44:48:67:b1:9e:13:76:c6:b0:98:4f:4e:f9:
5e:3f:c8:71:84:87:75:38:23:fb:08:f5:70:35:a5:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AE:60:A8:A5:27:A4:6E:C1:0B:1D:8D:D6:3D:D4:F9:51:40:07:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bde7ae49-4d68-3196-9235-8d22728dcfb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b8:69:35:3c:d9:00:e1:c3:3f:0c:33:39:b6:0c:17:d2:16:
08:27:92:de:8f:49:22:65:54:d2:ca:84:4c:f9:7a:84:a2:17:
29:22:ab:2c:e2:9e:d4:3c:62:ec:be:47:cd:52:77:c5:a0:64:
47:94:ac:3c:70:a8:e0:57:95:88:38:8b:80:27:27:bd:23:08:
e4:d1:a0:36:5e:cc:d7:1f:da:5e:f9:09:91:01:b5:81:d9:10:
6c:4a:7f:92:b9:20:3e:8c:4d:8c:18:f7:f0:22:7d:bc:da:a5:
aa:a0:72:25:be:44:b0:d3:86:97:87:17:ec:a0:94:7b:49:eb:
7a:e9:80:6c:ca:3a:cf:11:0f:8e:5d:1b:69:1f:e6:35:c0:89:
cf:27:31:70:6e:e7:26:be:46:d1:07:8f:4b:39:f2:5c:6e:46:
9b:f7:c9:97:7a:cd:78:70:87:06:d7:bc:9c:ae:44:c8:8c:4a:
45:bb:35:8f:15:c7:fa:a8:98:8c:18:7e:6a:7e:dd:8a:00:9d:
26:c7:44:ce:94:48:7b:fa:cc:54:48:57:e1:7e:27:f2:e9:c3:
3a:46:e2:0a:5f:04:2b:3a:3d:d6:f1:04:67:e7:c8:93:b6:4f:
df:66:c5:20:41:b1:5f:0e:db:0d:fd:a2:8d:78:b8:5b:a3:ac:
40:e5:a1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:48:26 2025 by rpki-client