Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecd5d080-5222-3049-9b4e-d35d848d0274.roa
File: ecd5d080-5222-3049-9b4e-d35d848d0274.roa (raw, json)
Hash identifier: bpsR0DZ2Nnor/UfNglJnoN5SdQk9OcJum++DQdLLIv0=
Subject key identifier: C5:09:1C:63:9E:D8:1C:AD:9D:13:DA:15:88:EC:E6:4A:F6:0F:19:65
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584051CA90EFA1066C5FFD795C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecd5d080-5222-3049-9b4e-d35d848d0274.roa
Signing time: Wed 21 Dec 2022 12:00:00 +0000
ROA not before: Wed 21 Dec 2022 12:00:00 +0000
ROA not after: Thu 26 Jan 2023 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.144.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:51:ca:90:ef:a1:06:6c:5f:fd:79:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 21 12:00:00 2022 GMT
Not After : Jan 26 05:00:00 2023 GMT
Subject: CN=5fe9307d-774b-4d53-be34-f95273463e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:1e:5e:55:fc:93:c1:07:75:55:36:a0:11:
c0:be:ef:b2:40:7a:b3:ed:c6:9f:52:7c:33:a8:a7:
b1:1b:d8:6f:d7:fc:82:d4:02:e6:78:96:a5:01:bb:
14:dc:f0:dd:45:ce:96:05:af:65:3f:41:cc:29:38:
71:eb:52:79:48:45:b2:69:3d:fb:ca:fd:59:f1:73:
51:b7:3c:1f:70:fc:de:0e:54:ca:6f:de:da:41:81:
58:d1:0a:ff:35:19:f7:46:46:ee:82:86:f2:b9:6c:
df:16:a4:cb:74:80:bb:d8:f3:48:77:ec:89:39:a8:
09:68:6d:c9:ca:60:eb:02:8c:e0:5d:a5:04:18:6a:
c7:24:76:d1:34:4f:eb:5b:e1:00:15:91:a7:b5:c2:
fd:fa:07:d2:6e:ea:cc:20:71:65:07:9d:38:92:90:
28:be:e2:d5:bd:c8:f8:3c:70:93:ab:c8:e0:fe:b8:
6f:75:f1:af:18:5f:68:0b:f6:75:29:0b:b5:7a:aa:
a9:2d:30:be:e3:77:d2:46:fb:03:c5:3a:52:4a:56:
66:cd:95:ec:75:dd:2f:6b:22:d4:24:1e:29:68:bd:
67:cd:a4:b3:a5:2b:96:97:09:4a:fc:e6:78:70:b0:
35:be:23:e1:99:4a:68:f7:6d:09:09:9b:27:a2:48:
9e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:09:1C:63:9E:D8:1C:AD:9D:13:DA:15:88:EC:E6:4A:F6:0F:19:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecd5d080-5222-3049-9b4e-d35d848d0274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.144.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:c8:8f:ae:5c:d0:70:7a:21:ac:15:db:2f:62:4f:14:3c:0c:
14:3e:06:cd:d2:9d:87:06:5e:46:02:98:ae:79:5a:de:e2:51:
25:66:d3:02:bd:88:50:cb:99:51:05:b2:50:71:fa:95:78:55:
e1:17:31:b2:36:05:cd:4b:af:f7:00:69:6c:f8:3e:5f:a8:7e:
bd:6c:0b:5c:f9:44:e8:96:40:22:7b:07:48:cd:73:4f:b6:64:
9b:ad:78:f1:b3:f9:d8:ad:92:a1:3b:5f:06:67:19:08:bb:3b:
bc:75:a2:19:99:6e:fb:4f:be:d2:e3:8b:7d:c5:4b:a9:df:69:
95:57:75:18:a9:e4:dc:ee:ca:e6:c7:af:14:6b:fc:68:9e:e5:
82:61:90:27:63:e4:0e:42:fa:f7:28:09:36:33:8a:5c:7f:37:
09:09:8a:e4:a4:d5:7c:82:35:58:11:4b:83:1d:af:a3:33:66:
26:51:29:26:9e:b8:e0:b3:ce:76:1c:60:7d:c9:86:73:99:e4:
3c:6d:37:8b:21:72:8a:77:e3:0e:4f:30:a6:ca:cc:c3:5e:00:
f6:3d:16:ba:f0:72:1e:7a:ac:e5:68:e2:f1:45:a8:9b:12:0d:
95:09:46:8c:64:c2:c8:38:da:f7:2b:36:90:6e:b5:5f:f9:15:
8f:89:90:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:44:40 2025 by rpki-client