Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb5309db-d3f3-3d9c-8b53-a03c793520d5.roa
File: cb5309db-d3f3-3d9c-8b53-a03c793520d5.roa (raw, json)
Hash identifier: D7iJ6YV6e1ICTl85ThAC6xpmdFuyzzMYgLRkeGIi0NE=
Subject key identifier: B8:EA:32:CE:0A:09:BA:B1:9A:A0:7C:A6:2E:70:AE:A4:37:AE:66:CE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2EFD4AE79353895BE4F1EF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb5309db-d3f3-3d9c-8b53-a03c793520d5.roa
Signing time: Wed 08 Jun 2022 12:00:00 +0000
ROA not before: Wed 08 Jun 2022 12:00:00 +0000
ROA not after: Thu 14 Jul 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:2e:fd:4a:e7:93:53:89:5b:e4:f1:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 8 12:00:00 2022 GMT
Not After : Jul 14 04:00:00 2022 GMT
Subject: CN=8b07648e-b528-47a0-ab30-b7428db51c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:f1:91:90:9c:1e:ba:5c:b5:9f:c5:36:8b:
40:86:71:64:2c:03:c6:44:e9:0e:f1:df:5d:0a:bb:
e6:3f:67:57:ca:33:58:e6:e4:70:97:74:30:81:37:
ae:2a:0f:5e:1a:9d:eb:5d:4f:68:3d:af:f6:68:7a:
48:13:3f:0d:ee:8e:d7:3c:57:84:7f:fd:77:47:ea:
41:2d:84:6f:b6:8a:32:34:9d:6d:d6:ed:91:a6:9e:
28:06:fe:cb:2b:f9:9d:9a:23:ac:3d:6e:c6:3b:81:
1e:8a:10:17:d7:d2:62:ce:00:79:10:16:ef:86:93:
a0:22:bb:88:45:e4:7d:c3:ce:3c:90:44:73:6c:64:
5c:81:df:65:06:6d:6d:c7:67:21:f4:a1:f8:fd:1e:
ab:64:cc:ca:29:14:46:9a:5c:80:56:5a:d0:52:a6:
f8:38:e6:65:ec:38:83:8c:b4:51:b1:37:2b:7b:1d:
d6:fb:fc:c0:f7:f7:53:0b:a1:a7:f4:c0:ea:35:71:
b2:5f:19:98:02:4d:2f:31:04:b0:6f:4b:e1:01:8a:
52:d0:6b:a8:53:5f:66:a5:77:5e:82:d0:a2:40:f1:
b1:05:a6:ab:5c:d2:8d:b1:73:2c:ab:c6:58:3b:75:
6b:ca:8f:fe:52:09:9a:4e:ec:67:11:0b:8a:46:e4:
02:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EA:32:CE:0A:09:BA:B1:9A:A0:7C:A6:2E:70:AE:A4:37:AE:66:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cb5309db-d3f3-3d9c-8b53-a03c793520d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:72:46:79:63:54:d2:a7:0f:4d:8d:c0:75:5a:5f:c1:ea:5e:
4d:98:57:fb:62:fe:3b:70:b1:90:75:f1:b7:ea:f9:53:d0:2d:
7e:73:45:16:60:8a:07:36:61:05:03:04:4b:82:e3:9c:0f:90:
ae:23:ba:17:71:cf:3d:e9:cb:65:0d:3f:a9:79:80:29:df:59:
3a:4f:3f:1a:e7:65:ed:ec:a1:bd:fe:54:88:80:ee:a7:61:e1:
95:2b:f6:f7:73:2f:58:c8:a4:ef:de:73:9a:dc:5f:55:43:8f:
ee:b7:aa:c9:08:6b:aa:10:65:c8:d8:df:9b:e3:3b:c0:f6:86:
c8:ae:cb:86:1d:05:04:dc:69:cf:7c:f3:a5:18:37:9e:4d:b3:
f2:da:05:d2:cf:59:51:e3:f3:3b:e9:72:00:4f:17:14:37:33:
66:89:9b:3a:62:6b:ad:e7:fe:ca:c3:c3:bd:13:d0:e0:05:0b:
c1:00:6a:94:3e:60:8e:eb:3b:ac:5f:e7:49:bc:80:25:87:b8:
a9:c2:89:48:43:d4:50:af:81:8a:d7:30:04:12:32:41:15:51:
1b:30:a5:7d:5e:0c:84:04:e8:61:9f:aa:14:fb:11:61:83:0b:
1d:49:a9:3a:b6:51:5c:6d:f9:af:11:39:6f:c9:9e:e3:97:30:
68:65:07:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:46:18 2025 by rpki-client