Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef6403bc-6cd5-3fe3-b8e0-e5e26efafa71.roa
File: ef6403bc-6cd5-3fe3-b8e0-e5e26efafa71.roa (raw, json)
Hash identifier: DAsGe6OggFtc2gQSFMkvsrl1FYqu/pttw9WLKfmkzzU=
Subject key identifier: 15:D3:2E:E6:85:13:55:1C:CB:93:32:00:57:3E:23:15:44:9A:99:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E630AFC85016BEE458D103680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef6403bc-6cd5-3fe3-b8e0-e5e26efafa71.roa
Signing time: Mon 27 Jun 2022 12:00:00 +0000
ROA not before: Mon 27 Jun 2022 12:00:00 +0000
ROA not after: Tue 02 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:63:0a:fc:85:01:6b:ee:45:8d:10:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 27 12:00:00 2022 GMT
Not After : Aug 2 04:00:00 2022 GMT
Subject: CN=03adc240-db95-44c4-8df8-1c0f6c07c84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:e9:b5:4c:85:f0:4d:79:54:3a:59:4b:28:
0b:81:9f:5b:ec:1a:e8:bc:de:99:dc:5b:99:bb:d8:
5c:f8:f7:5d:f5:b3:81:0d:31:67:f4:02:67:33:f3:
61:b6:54:25:7a:42:60:f8:6f:c6:9e:71:c5:bb:06:
75:8b:44:e5:5e:96:59:7f:e5:0b:43:5b:47:09:61:
53:0a:df:93:91:6e:91:ae:14:a3:a4:18:58:19:49:
d8:63:74:1d:9f:1e:a3:34:3f:ab:9b:74:9b:6e:ed:
43:dc:12:8b:44:9f:c3:34:38:ee:22:38:ff:a3:81:
6e:11:89:22:67:e1:c0:38:1b:c6:35:c5:1d:1f:ce:
29:69:2b:1c:57:40:a6:e8:2c:49:fa:14:94:66:37:
f4:9b:46:10:6e:c6:38:e5:a7:23:4e:14:fe:99:3c:
85:89:17:3d:c3:06:cf:64:b2:44:d3:c1:0c:4e:d7:
0a:93:76:75:ae:8d:e4:46:64:b9:1b:23:4f:fa:ec:
52:2e:bb:c6:a1:7b:89:31:a3:5a:57:93:7e:5d:e2:
d0:ab:fd:1b:2f:33:e8:1a:0c:57:53:48:ce:f8:a0:
57:12:ab:5a:6c:18:40:c3:03:ac:52:af:37:ed:98:
88:22:31:46:11:0c:36:a3:7a:df:77:05:ed:40:0c:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D3:2E:E6:85:13:55:1C:CB:93:32:00:57:3E:23:15:44:9A:99:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef6403bc-6cd5-3fe3-b8e0-e5e26efafa71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:d3:72:49:3a:a4:d3:b9:67:12:c8:d8:25:28:3a:eb:80:8c:
14:62:5f:3e:8e:d4:ab:7c:d0:aa:30:67:3e:91:3e:52:d7:7f:
76:08:f5:c1:57:88:db:5c:f6:35:ef:5c:2e:69:56:ce:1a:44:
12:1d:4a:55:a2:06:32:82:d5:f4:01:a2:6e:04:ea:e4:b1:57:
73:fe:85:5e:18:0b:44:87:a5:fc:71:83:6f:a5:33:29:70:b1:
af:d2:f9:f1:eb:e5:cf:e2:7a:e3:44:14:fe:5a:66:36:d6:a9:
1a:1a:c5:70:51:70:dd:ef:8a:04:2b:88:41:70:2c:44:5a:10:
5e:e8:c4:5d:73:a9:3d:0f:52:c6:81:5f:30:75:61:e1:4a:e4:
f6:90:1f:a4:4d:0d:27:a7:bd:48:21:27:52:16:d1:4e:cc:b6:
a7:d1:17:09:4f:70:2d:18:7f:c7:0e:32:22:33:a4:77:53:c7:
d0:39:89:3a:63:3e:e4:4e:40:41:20:e8:13:ce:58:f2:2b:23:
e7:b5:5b:6b:bb:31:61:67:7e:b8:ff:9c:f7:93:29:6e:24:e9:
fd:c0:c0:e4:b7:90:66:ab:65:24:1f:a6:e0:53:d1:1d:b0:a0:
0f:42:a9:d2:5f:f6:a8:3d:3f:5c:a7:0b:dc:ff:95:2c:21:6a:
19:47:c8:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5jCvyFAWvuRY0QNoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYyNzEyMDAwMFoXDTIyMDgwMjA0MDAwMFowLzEtMCsGA1UEAxMk
MDNhZGMyNDAtZGI5NS00NGM0LThkZjgtMWMwZjZjMDdjODRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohXptUyF8E15VDpZSygLgZ9b7BrovN6Z3FuZ
u9hc+Pdd9bOBDTFn9AJnM/NhtlQlekJg+G/GnnHFuwZ1i0TlXpZZf+ULQ1tHCWFT
Ct+TkW6RrhSjpBhYGUnYY3Qdnx6jND+rm3Sbbu1D3BKLRJ/DNDjuIjj/o4FuEYki
Z+HAOBvGNcUdH84paSscV0Cm6CxJ+hSUZjf0m0YQbsY45acjThT+mTyFiRc9wwbP
ZLJE08EMTtcKk3Z1ro3kRmS5GyNP+uxSLrvGoXuJMaNaV5N+XeLQq/0bLzPoGgxX
U0jO+KBXEqtabBhAwwOsUq837ZiIIjFGEQw2o3rfdwXtQAwTWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBXTLuaFE1Ucy5MyAFc+IxVEmpnwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZWY2NDAzYmMtNmNkNS0z
ZmUzLWI4ZTAtZTVlMjZlZmFmYTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5JAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7Tckk6pNO5ZxLI2CUoOuuAjBRiXz6O1Kt80KowZz6RPlLXf3YI9cFX
iNtc9jXvXC5pVs4aRBIdSlWiBjKC1fQBom4E6uSxV3P+hV4YC0SHpfxxg2+lMylw
sa/S+fHr5c/ieuNEFP5aZjbWqRoaxXBRcN3vigQriEFwLERaEF7oxF1zqT0PUsaB
XzB1YeFK5PaQH6RNDSenvUghJ1IW0U7MtqfRFwlPcC0Yf8cOMiIzpHdTx9A5iTpj
PuROQEEg6BPOWPIrI+e1W2u7MWFnfrj/nPeTKW4k6f3AwOS3kGarZSQfpuBT0R2w
oA9CqdJf9qg9P1ynC9z/lSwhahlHyNo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:46:23 2025 by rpki-client