Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf1e9c7c-5225-3231-95c6-8f19b30ef7c9.roa
File: cf1e9c7c-5225-3231-95c6-8f19b30ef7c9.roa (raw, json)
Hash identifier: ktnZXyj41lDi3Bs0t1bHJgnSX+LNv7XmXPp8wec8OWU=
Subject key identifier: 4D:53:F4:5B:A3:0A:43:1C:FD:FE:A8:02:DF:FB:A1:D8:6E:65:22:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7466BBE92E8908A3FC7ED880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf1e9c7c-5225-3231-95c6-8f19b30ef7c9.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 701
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:74:66:bb:e9:2e:89:08:a3:fc:7e:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=0e115bdb-c66f-40e5-a7b6-b0d65ddebc57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:36:53:7f:ff:5e:b8:ea:34:77:8e:48:21:
0c:08:f0:d1:cd:b2:dc:18:22:ac:8a:54:de:04:0e:
d6:7f:99:99:7c:7e:8d:47:43:1d:13:9f:c8:74:0d:
e1:d4:04:4e:e4:52:9e:63:51:13:de:94:58:2b:29:
82:87:e8:dc:bd:8b:35:ed:02:90:bc:95:d6:dc:59:
fc:7a:e9:9e:c5:cd:28:1e:94:77:11:94:3c:5e:a4:
00:20:79:da:aa:64:fa:48:04:9f:e8:90:f4:91:b4:
85:4e:2e:9f:c1:0b:eb:db:42:d2:02:c5:7e:53:93:
56:aa:b9:41:7d:51:37:cc:44:38:47:a7:f0:07:a3:
97:d7:c8:91:cd:40:6c:ff:21:80:cb:c6:3e:f7:a9:
dd:a4:b5:92:b3:b0:27:e7:a4:5c:02:a9:f2:07:3d:
73:17:3a:bf:58:98:fb:01:b5:c6:96:50:b7:56:bd:
47:a5:75:23:4b:c9:b4:52:c2:00:82:fe:f5:ce:31:
31:43:0e:b6:b3:5d:b0:bd:7c:82:8e:36:0d:fb:bb:
3f:8f:6d:c5:5e:4d:f6:3f:1e:f0:5d:e1:e5:cd:b6:
59:3b:ba:03:66:03:ad:b0:75:b6:7f:43:48:00:c8:
34:28:53:cf:b3:1d:d0:c7:7f:19:e1:7c:b3:22:05:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:53:F4:5B:A3:0A:43:1C:FD:FE:A8:02:DF:FB:A1:D8:6E:65:22:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf1e9c7c-5225-3231-95c6-8f19b30ef7c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:e8:e4:79:9d:27:aa:c9:35:d5:df:55:9e:6d:96:81:db:ff:
84:3d:71:f9:0c:4c:d5:fc:eb:2c:2a:d6:a3:16:18:8d:eb:1d:
65:34:14:75:ac:0c:6b:cc:35:30:99:e7:d9:69:cf:52:3a:05:
e9:6c:8f:47:ca:8e:98:06:55:e3:f9:85:1a:78:81:2d:7d:88:
f2:90:1d:1e:36:ce:cf:f4:e4:0f:fa:57:19:77:63:ba:ce:cc:
7a:98:1f:39:cf:b0:92:78:28:b4:e9:f4:55:ee:fa:47:5c:91:
8d:2b:2b:3b:b3:31:f7:34:a1:e0:f8:45:78:b6:50:4a:46:29:
ae:c8:62:38:fa:56:73:0d:e9:ec:d8:e0:9d:68:1d:29:9c:a1:
af:d9:3f:db:ad:10:a2:33:e7:bb:ce:52:3b:ab:77:62:e8:51:
ea:9b:7e:30:1d:d1:77:f7:06:93:da:c9:36:37:19:8b:22:b4:
15:72:0c:48:ab:cd:7e:40:60:79:99:7b:80:38:0a:c2:54:36:
ff:63:15:56:ff:c1:98:00:5b:c8:da:50:5e:2c:4a:e9:36:f4:
7d:89:66:4d:6e:71:85:1e:b7:91:42:d3:51:c7:89:d5:c9:6f:
0d:b0:7c:75:b7:2c:77:6f:d2:8e:88:78:c0:a5:72:d8:3b:a0:
44:6f:a4:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:24 2025 by rpki-client