Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f04c3e84-9e83-3304-b804-4d420a48b437.roa
File: f04c3e84-9e83-3304-b804-4d420a48b437.roa (raw, json)
Hash identifier: PcTyZyHl0cEjdMPP6TqpDy3uUlm3vPvHMxpQ5HnyAp0=
Subject key identifier: AF:70:C6:A3:4A:AA:55:3F:7D:97:3E:61:8E:18:58:C7:78:0B:44:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F749364B9A68F67ECB07BC960
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f04c3e84-9e83-3304-b804-4d420a48b437.roa
Signing time: Mon 03 Oct 2022 12:00:00 +0000
ROA not before: Mon 03 Oct 2022 12:00:00 +0000
ROA not after: Tue 08 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:74:93:64:b9:a6:8f:67:ec:b0:7b:c9:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 3 12:00:00 2022 GMT
Not After : Nov 8 05:00:00 2022 GMT
Subject: CN=c9ac41c5-0bb5-40ed-a76b-8dc6ea7a78c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:8f:d2:0a:97:d0:5b:a3:cd:35:e9:a2:6f:
bf:96:68:30:42:40:0f:29:15:75:4f:9d:89:64:96:
fd:36:a3:fa:52:e5:7e:12:cc:92:30:65:eb:65:1d:
eb:ea:2f:bb:db:9d:60:aa:59:38:c4:ee:0e:fe:5a:
b3:9d:3e:d0:e1:06:e4:03:a9:bf:b2:59:3b:ba:92:
f6:a9:38:21:d0:3a:b3:58:a9:bc:22:d3:dd:25:11:
15:09:62:32:35:ba:de:f1:34:b3:66:cb:7e:47:b9:
d4:0c:42:80:e4:cc:2a:d6:6e:fd:ba:d3:be:75:e0:
61:15:47:0a:66:7c:d3:32:d3:0d:4c:73:8d:5b:58:
22:d3:9c:53:c3:ce:53:70:3e:9a:9e:b6:48:e3:c0:
99:7c:ba:cc:e6:3a:90:32:d3:48:22:7c:7c:d7:fa:
8d:f7:78:91:0d:20:55:79:f9:a3:83:0b:a9:2d:16:
78:fd:50:fb:8a:a9:d0:28:df:a3:4c:f4:3b:1a:d6:
e5:64:18:2e:27:f6:de:16:c5:25:5f:e2:94:a1:7c:
97:a3:01:31:6f:c0:2c:49:ca:b2:2e:ec:49:f2:36:
7f:ab:8b:df:ea:01:6c:4d:f1:fb:bb:4f:9f:2b:9a:
8c:7e:4f:78:e4:7e:0e:d8:bc:34:c5:34:dd:57:f8:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:70:C6:A3:4A:AA:55:3F:7D:97:3E:61:8E:18:58:C7:78:0B:44:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f04c3e84-9e83-3304-b804-4d420a48b437.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:9f:67:ee:18:6c:5c:61:5f:5d:38:8a:48:fb:d1:dc:c8:31:
9c:72:f1:c5:76:27:01:3a:6c:e1:4d:ce:8b:23:f8:b9:ef:47:
3e:f5:a4:c5:f2:97:c7:2a:c6:8d:35:c0:22:e6:d4:48:c2:50:
22:e5:2f:c7:5e:b3:8d:fb:4b:10:52:2c:94:dd:ae:52:2d:7d:
85:03:92:e4:1f:5c:32:40:78:57:0e:49:a4:bb:89:0c:2c:1b:
07:82:d1:5e:c7:a1:9b:e6:84:12:d9:62:a7:c1:a7:b9:66:ce:
5f:b1:6f:18:e9:36:8e:d2:d1:3a:27:20:9e:12:ff:34:24:b5:
52:12:87:92:0e:86:2e:af:61:d7:82:49:0b:ee:8d:be:d1:40:
21:06:4b:30:b6:e0:ae:14:92:29:ff:56:d2:87:ca:8a:98:68:
58:a5:00:3f:a5:f3:28:a5:fb:c7:d8:b2:df:a3:e5:ec:fa:6a:
60:dd:7e:1d:78:51:fd:89:0e:f4:5c:14:0e:9b:80:3c:f5:13:
52:86:d3:0f:e6:92:51:dc:92:03:14:ed:ad:67:70:1a:c4:9d:
93:88:68:cb:f3:68:c9:7d:f5:37:73:ae:fe:18:37:7e:ee:cd:
94:ac:e1:28:8b:5e:14:e5:93:c5:9e:cd:df:5b:58:8a:5c:80:
0e:91:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:01 2025 by rpki-client