Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc28a744-1442-3353-b941-d73e2dc58c33.roa
File: dc28a744-1442-3353-b941-d73e2dc58c33.roa (raw, json)
Hash identifier: vgvniwcNdSC4MeKZGVWGjTPSyC7PZBlIC+IDGiua/D4=
Subject key identifier: 34:AE:1D:8B:45:02:5F:CA:B7:2F:BF:9C:2B:1E:99:AC:A5:BA:2F:4B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F40C853C16B5B9DBB0752FE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc28a744-1442-3353-b941-d73e2dc58c33.roa
Signing time: Wed 14 Sep 2022 12:00:00 +0000
ROA not before: Wed 14 Sep 2022 12:00:00 +0000
ROA not after: Thu 20 Oct 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:40:c8:53:c1:6b:5b:9d:bb:07:52:fe:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 14 12:00:00 2022 GMT
Not After : Oct 20 04:00:00 2022 GMT
Subject: CN=a94449e1-c88a-43ac-80b3-af20de0407a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0e:5f:98:23:07:37:76:ec:4f:fc:b5:8f:f2:
e9:b3:2d:88:b7:d6:7e:24:cd:b0:5b:df:1b:34:a8:
8b:c5:10:ff:dd:e2:b7:f4:e3:06:c2:98:3e:fa:bc:
ac:1f:21:d0:0c:e8:11:19:ec:9c:f2:03:4c:94:c5:
eb:46:b9:91:14:46:7b:e0:95:d3:cf:62:4b:6f:be:
b9:87:0e:41:40:ca:38:1e:fe:a6:8e:87:3a:87:62:
0f:5d:0d:fe:28:8a:58:7b:ac:fb:22:5d:db:12:fb:
c4:65:c4:38:a5:d1:0f:7c:d2:d7:cc:a4:ca:55:8f:
35:c9:0c:9c:04:d1:e5:82:0a:41:2e:b3:bd:f1:64:
3d:6a:f0:ae:78:22:2b:6f:e3:f6:2d:83:f3:83:de:
99:47:d6:b0:65:59:d4:99:ae:55:88:63:d0:ef:bd:
e0:7d:11:20:e4:2b:1c:c7:16:27:c3:10:ed:60:98:
15:0f:42:c7:e0:8e:6a:30:23:9a:98:28:1c:07:33:
0e:08:e4:7e:f6:ef:43:5d:67:0f:1b:d3:93:07:6b:
92:1a:d4:f8:1c:2c:55:f4:0d:b7:af:3a:53:ef:8a:
4a:6b:52:ee:a4:b7:70:d6:19:be:f4:b8:57:ae:1b:
0d:9c:66:40:63:50:3a:1d:03:80:1b:4f:c3:ab:f1:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:1D:8B:45:02:5F:CA:B7:2F:BF:9C:2B:1E:99:AC:A5:BA:2F:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc28a744-1442-3353-b941-d73e2dc58c33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:2b:24:b9:70:6a:76:6f:bf:48:16:58:ab:7f:96:37:95:d1:
1d:51:2a:1a:46:01:5e:ba:34:60:9d:67:2e:6c:6b:c2:e1:a0:
49:36:57:bb:90:f2:ee:76:90:a0:41:6b:0d:7a:77:8e:81:0b:
d5:b3:07:8b:52:e2:e3:05:62:73:4d:5b:d5:98:7e:9a:72:39:
42:1b:be:2e:da:4a:47:a2:c3:3e:02:05:ea:ee:07:78:b4:a7:
58:94:2b:1c:8b:59:f0:1c:4c:29:f5:4c:f0:3a:4d:4a:6f:dc:
0a:b9:a1:95:e8:1e:ca:07:e3:a3:10:63:3d:25:c3:d7:85:42:
ff:68:b4:39:16:22:7f:84:05:1d:f5:26:91:ab:ed:6c:96:0d:
99:c8:47:1e:0d:3d:01:01:d9:d7:f6:d1:dd:05:40:1a:83:db:
a4:38:fb:13:de:0b:de:8a:48:be:a7:63:a1:ee:d4:d5:4b:a9:
2f:3d:2f:5c:2e:f8:d9:85:a3:31:b4:37:60:b9:24:a9:db:8c:
91:b3:4f:26:a4:05:39:13:34:7f:3e:c1:79:44:89:46:b1:29:
69:4c:f7:47:89:64:7a:2d:9d:b4:95:72:cf:69:a3:e9:7b:ef:
89:8c:fd:03:1b:26:7c:a6:e8:61:95:e7:c4:49:03:df:79:04:
cf:b9:e9:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:49 2025 by rpki-client