Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df7ba72f-5960-3b0b-83e8-670e048bb032.roa
File: df7ba72f-5960-3b0b-83e8-670e048bb032.roa (raw, json)
Hash identifier: krjIryjjYTvyTQ/sTEY9Q57IqERAO3S8Pq8WMx6gDWY=
Subject key identifier: 2C:E4:27:06:29:97:9B:36:C8:6B:B8:CD:96:84:5D:5D:75:A3:EF:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDBE19512CA4508ECD5F6F600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df7ba72f-5960-3b0b-83e8-670e048bb032.roa
Signing time: Tue 08 Feb 2022 05:00:00 +0000
ROA not before: Tue 08 Feb 2022 05:00:00 +0000
ROA not after: Tue 15 Mar 2022 04:00:00 +0000
asID: 22394
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:db:e1:95:12:ca:45:08:ec:d5:f6:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 8 05:00:00 2022 GMT
Not After : Mar 15 04:00:00 2022 GMT
Subject: CN=162ecf97-239c-459f-acd8-905475e8dc78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:77:e9:b5:3d:a2:4c:89:eb:37:0a:95:17:
d9:1a:65:c6:52:ad:c4:3a:19:95:7e:1c:24:8a:6c:
d0:2d:87:ec:08:18:55:ca:8a:5d:84:92:99:b4:e8:
bb:54:78:77:07:91:0e:59:95:4a:58:3b:5b:f9:ed:
c9:77:3c:a1:fe:12:e6:63:cb:8c:a3:1e:9a:8c:4f:
f6:2b:fe:fa:62:d1:ca:19:0b:f8:07:5c:ba:71:a5:
41:bc:7d:1c:bd:e1:75:cf:9f:6d:53:85:13:76:19:
38:e3:68:09:46:57:2a:55:02:72:ce:32:07:64:b9:
4e:e0:86:63:79:4c:30:50:20:50:2a:7d:13:38:54:
00:50:69:2d:26:ed:2f:0c:68:86:92:13:63:74:92:
c6:05:26:b5:47:e9:98:05:f7:3b:f2:9e:8f:71:3d:
04:a2:75:6b:98:02:23:bb:e2:d6:90:1a:cd:c0:3e:
b0:11:92:e8:c5:4e:c8:53:d8:68:58:eb:cc:c9:f6:
e5:58:54:1c:55:ba:6a:5e:dc:f9:4e:33:24:a6:16:
30:90:82:80:a0:df:0d:a4:f4:5c:67:1f:ec:c7:5b:
70:7e:02:23:66:89:c3:51:bc:e6:75:d7:10:54:dd:
07:d1:da:d6:86:28:bc:0b:08:b6:df:cb:b4:37:9d:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E4:27:06:29:97:9B:36:C8:6B:B8:CD:96:84:5D:5D:75:A3:EF:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df7ba72f-5960-3b0b-83e8-670e048bb032.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:52:d0:f8:1a:cb:47:d6:10:eb:f5:5a:aa:34:05:ff:55:54:
a3:96:54:97:ad:a6:59:e6:98:f3:c4:27:47:12:37:26:62:ef:
13:a4:f5:ff:50:83:17:40:13:9a:b8:94:f8:61:24:c9:12:68:
ee:9b:70:64:44:9b:2c:9e:93:ae:22:8c:0e:5e:68:9a:0a:21:
a5:f9:cd:f9:bb:96:20:80:d2:59:3f:da:6e:18:77:e2:86:f9:
a5:e6:75:4d:8b:9c:d6:28:c3:fe:2f:6b:3d:af:09:6c:43:75:
fa:b6:36:73:fc:27:92:45:cf:ec:0f:4b:fc:26:1b:61:31:1c:
87:33:13:2c:b3:19:bc:f8:66:78:0f:0d:a0:51:fc:9e:5c:b1:
86:cb:31:f1:87:1a:20:f5:04:ae:70:bc:a2:f1:62:29:54:73:
f9:a5:83:85:8f:ae:7b:be:15:39:a5:0e:cf:90:be:ce:3a:58:
c1:d6:d1:09:17:5e:01:e7:e4:90:bb:c6:55:77:c3:a5:86:34:
e3:ae:c7:92:ec:de:1d:25:33:0d:fb:ac:86:ca:26:c5:23:c5:
0b:fa:4b:4d:df:f3:46:be:ed:09:75:14:f4:a7:0a:bc:70:cf:
c0:01:d5:ec:b6:ce:33:54:65:5a:c2:c8:6f:62:d4:6b:d9:95:
13:fc:e5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:33 2025 by rpki-client