Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec3ae3f5-db75-30a5-be8d-4e957299aaa8.roa
File: ec3ae3f5-db75-30a5-be8d-4e957299aaa8.roa (raw, json)
Hash identifier: W4a7kNSDy3/8MCkfZ8Ft9KcvPXQcwvyijiG52r1RRFM=
Subject key identifier: 44:F1:87:97:31:09:9A:F3:AD:54:E6:D7:83:46:74:09:48:F3:88:F8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3BEDF96E353FA7B2745BC700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec3ae3f5-db75-30a5-be8d-4e957299aaa8.roa
Signing time: Mon 13 Jun 2022 12:00:00 +0000
ROA not before: Mon 13 Jun 2022 12:00:00 +0000
ROA not after: Tue 19 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3b:ed:f9:6e:35:3f:a7:b2:74:5b:c7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 13 12:00:00 2022 GMT
Not After : Jul 19 04:00:00 2022 GMT
Subject: CN=98191c6b-4e30-49ef-9fad-c827d653f2bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:6e:61:ad:43:fe:7f:d6:1b:42:dc:4d:c3:18:
87:15:c3:f1:bd:99:c5:cd:61:f0:36:cd:e6:9a:16:
28:12:d7:4c:63:6b:5d:b7:98:41:9b:12:18:9f:16:
b2:46:d2:ab:72:1e:8e:b2:65:8a:aa:68:e9:84:d6:
03:06:d1:25:2e:d4:a3:2a:a1:0b:8e:14:fb:54:3d:
d9:60:9c:2d:80:d5:fb:3a:cd:4e:c8:da:fa:64:0e:
8f:73:c1:2c:8a:5f:09:4d:86:31:f5:8c:5a:87:0f:
e4:8e:21:00:b6:07:0e:bd:6e:15:53:35:72:ac:91:
1b:5d:91:ae:c6:3e:0e:51:ec:30:54:a7:35:42:64:
c1:cf:e8:d4:5d:c3:76:33:11:ad:2f:fc:e8:8c:fe:
59:5a:45:2b:d8:d2:2b:61:d2:2d:bb:19:74:b2:cd:
5e:d8:b7:a0:72:3d:27:bd:6d:cd:23:e4:ff:60:b2:
b5:59:fd:2a:4b:08:af:f6:6e:bf:a0:da:df:0c:8f:
54:46:31:86:09:67:ec:51:f4:58:4a:30:d0:f0:a6:
5b:14:05:e7:ee:b2:a8:04:a3:57:6b:8a:e4:78:40:
49:1b:9e:90:f1:ec:ea:d3:b6:7c:25:f8:2f:4c:57:
c8:6c:ac:16:fd:64:f6:77:89:fa:ff:44:fb:4f:eb:
88:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F1:87:97:31:09:9A:F3:AD:54:E6:D7:83:46:74:09:48:F3:88:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ec3ae3f5-db75-30a5-be8d-4e957299aaa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:2b:0a:49:7a:6e:25:04:b5:fa:d4:b1:ad:d8:c6:a5:52:b1:
e0:1a:6b:1d:71:d5:9c:e1:f3:3a:4f:87:39:a9:bc:0e:a9:41:
7f:35:93:6e:36:9e:6a:f8:87:48:60:63:a1:a0:08:fa:66:c9:
8c:82:c9:b5:e6:59:21:59:3b:5f:c7:89:80:90:b6:8c:76:49:
9b:e5:ee:24:c3:fe:d2:99:02:8e:80:cd:36:63:6d:f7:1d:90:
e3:51:0e:ac:fa:3c:eb:7d:63:d3:b6:45:10:92:81:1f:19:ea:
a7:08:4c:b0:2d:3f:f5:a0:66:bc:a9:e8:6d:db:66:48:c6:7f:
d8:dc:10:e0:d2:18:ea:85:d8:89:36:72:45:7a:24:03:86:2b:
8f:5b:f2:5e:bb:62:5d:b6:15:82:eb:96:e5:a9:12:8c:e9:18:
3d:ae:9e:71:49:9e:04:98:98:71:fc:5c:94:10:d6:cf:a6:99:
a2:b4:f4:23:85:01:c3:60:73:1f:17:cc:3f:13:f8:bf:6f:74:
21:3f:ed:9c:65:4c:b4:18:1e:86:e5:a4:2a:41:de:d0:be:21:
d4:46:ce:bb:96:4f:4f:72:c6:b9:7b:f4:7f:e9:f4:45:ab:36:
e0:c0:a5:11:d5:72:c1:9e:35:28:be:09:9d:0d:68:9c:51:05:
b2:e1:d5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:59:10 2025 by rpki-client