Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7f42450-92e1-3aaf-bbed-c546c73202d3.roa
File: c7f42450-92e1-3aaf-bbed-c546c73202d3.roa (raw, json)
Hash identifier: zWPvwHydeVHgnuDSopGlDSQKwUJx3FHzsMkreOVv4n0=
Subject key identifier: AB:73:2C:78:06:2A:C2:5C:D6:FF:F1:F3:D6:90:B9:F8:2F:89:47:3F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E14D0F76BD69B97AE8072AEC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7f42450-92e1-3aaf-bbed-c546c73202d3.roa
Signing time: Mon 30 May 2022 12:00:00 +0000
ROA not before: Mon 30 May 2022 12:00:00 +0000
ROA not after: Tue 05 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:14:d0:f7:6b:d6:9b:97:ae:80:72:ae:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 30 12:00:00 2022 GMT
Not After : Jul 5 04:00:00 2022 GMT
Subject: CN=463913b3-a8cd-4c60-9615-3b3bdc647c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:76:fe:2c:f6:8a:d8:21:3f:46:52:74:27:
18:71:bb:28:25:56:ba:49:13:74:65:35:5d:fb:cd:
70:5d:73:f7:55:4c:6c:f2:84:f6:79:7f:d8:dc:93:
2f:1b:94:16:61:68:a4:78:15:11:ed:fb:2c:3f:e7:
b9:c0:f2:7a:e1:97:a8:69:5e:ed:e8:5a:b5:91:e3:
4a:00:63:f7:a0:80:ee:a7:68:03:fa:0e:38:34:8e:
e2:62:1c:86:58:b2:54:99:ad:e0:87:9c:3a:d0:a7:
ec:b9:eb:d3:f1:bd:ee:fd:a7:b3:59:a0:d1:36:b0:
66:a1:fe:cb:37:eb:7e:65:c7:6d:13:5c:5b:cd:ee:
b2:60:49:55:ea:91:f1:90:03:99:3d:5d:b4:5b:ba:
48:84:9d:b6:a1:b9:f8:62:3c:a5:c4:43:9f:1e:62:
15:14:c6:22:c7:16:44:5c:11:9e:10:76:7b:29:58:
3c:97:b9:f6:d8:ab:2e:2c:db:34:d0:8c:43:47:d4:
e3:3b:26:dc:d8:7f:e7:67:48:94:d6:eb:7b:1d:21:
8d:94:e5:7a:e4:8d:e7:6f:1b:07:18:b3:9c:99:2e:
c6:3c:52:78:cb:43:8a:38:c3:e3:95:ce:21:f2:1a:
8a:5d:6b:d8:bd:de:81:1a:5e:83:6e:32:b7:f1:7c:
a8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:73:2C:78:06:2A:C2:5C:D6:FF:F1:F3:D6:90:B9:F8:2F:89:47:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c7f42450-92e1-3aaf-bbed-c546c73202d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:eb:a5:77:a2:de:d4:e3:64:09:1b:7a:bf:af:9c:6a:36:77:
e6:03:c2:9d:c9:73:19:d6:70:a0:47:55:01:2f:12:b6:1d:ac:
74:b9:01:5d:b6:10:f6:f2:e7:2e:35:b2:ae:4b:ff:b9:c0:cd:
7f:82:d5:52:98:a6:a1:d9:25:b0:02:89:d9:19:0b:fe:07:c7:
75:6d:25:30:92:6b:fe:9e:93:57:09:64:af:71:db:be:38:bb:
f0:40:64:5f:32:ca:0d:79:b3:52:e9:da:a6:3d:c5:1b:52:a3:
f6:1d:bf:59:57:02:4c:13:9e:2c:9d:7d:ad:1e:43:32:a4:47:
79:30:f2:24:58:96:7e:59:6f:3f:47:61:55:f1:a0:d4:ff:07:
65:a6:3b:9c:01:78:6f:57:d8:ef:ad:3e:92:59:b9:99:c4:2e:
6a:61:e5:d6:a2:db:f2:1d:bc:ac:25:b2:d8:1b:e1:e8:c7:da:
4d:09:d8:26:3b:a6:8f:c1:c0:c5:1a:6d:0f:f7:9e:e2:e6:6a:
0f:f7:b1:a5:86:d4:40:9b:01:75:33:be:b4:2e:be:3d:0b:4a:
45:43:f6:5e:30:7b:f9:17:9c:b0:94:d9:2a:f8:a9:7e:68:07:
04:14:f0:d1:ac:12:e2:af:ad:f8:1d:8c:fe:67:55:00:f4:a3:
e5:6d:fb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:18 2025 by rpki-client