Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f579339f-86b0-32f0-8f59-f0835883cbe2.roa
File: f579339f-86b0-32f0-8f59-f0835883cbe2.roa (raw, json)
Hash identifier: 3e9rhQTxnFwAfDL/fJazGYloQFKw3HK7VN2URmaukGc=
Subject key identifier: 07:C2:E5:97:BE:29:9C:26:C2:49:8D:E7:C6:56:CB:8A:13:B8:DC:BC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC2B73B81EDE5318C5C1C7C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f579339f-86b0-32f0-8f59-f0835883cbe2.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 701
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c2:b7:3b:81:ed:e5:31:8c:5c:1c:7c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=2d6e98d5-f4ff-4d29-ba8f-bf572c94cc7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e2:31:32:03:7c:00:9e:13:fc:cc:13:8c:24:
f2:c3:da:1d:c5:ce:07:a9:42:76:22:dc:27:b9:bc:
bf:b5:ef:c1:93:65:99:59:19:81:a6:0b:f4:c8:c3:
3f:6c:65:d3:0d:9a:3a:2e:de:20:08:83:56:0e:23:
5f:3e:34:d1:8b:e8:8f:96:94:1d:7e:4d:ef:59:65:
3c:df:3f:7e:8e:6f:f3:54:f5:97:c5:c2:52:98:25:
fd:69:2b:f7:b1:50:33:20:93:3e:fd:61:28:9a:aa:
ad:cb:92:65:62:25:8c:f9:1f:b2:fd:b2:b2:e2:5c:
d3:49:2a:ad:7f:b3:72:8b:aa:b4:9a:fc:f2:fd:43:
db:1d:ff:c8:9e:e5:67:55:0e:ba:ab:cc:57:99:e1:
57:a0:71:2f:17:0b:f3:88:57:b3:bb:f3:97:9a:d2:
8e:62:10:b9:7d:44:5f:3e:eb:cb:62:a5:b6:19:f6:
6e:22:a2:e0:3e:1b:58:59:eb:bc:53:95:25:71:20:
67:dd:35:ba:8f:bb:c5:c9:37:49:de:3d:87:f8:dd:
ad:86:f1:e4:5a:1c:e3:d1:37:42:86:dc:36:da:70:
6b:6f:bc:9e:f8:29:78:97:1a:31:5e:47:a3:77:33:
b2:a7:94:a8:ed:a5:73:a2:fb:3d:03:0f:fe:25:04:
3a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C2:E5:97:BE:29:9C:26:C2:49:8D:E7:C6:56:CB:8A:13:B8:DC:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f579339f-86b0-32f0-8f59-f0835883cbe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:be:2b:38:0d:84:22:9b:f5:5c:20:2c:b1:d8:35:f3:77:dc:
4a:05:91:14:5a:d5:86:5c:93:9d:f8:0e:eb:af:4b:84:4c:59:
c8:58:1d:0a:0a:c6:53:31:65:bd:47:2c:3d:47:b4:1d:98:dc:
ba:b7:52:0e:a8:c8:94:8f:f9:76:43:06:16:92:d4:ec:1c:c9:
7f:db:d8:62:e9:9d:c8:9c:a5:c1:78:83:b5:cb:35:97:6e:99:
3f:c1:ae:87:19:ee:a0:38:52:80:22:6b:9b:54:fc:1f:3a:d4:
c3:87:49:7c:ef:22:08:77:f5:b8:a3:2b:6d:6b:70:07:55:35:
bc:ea:4c:70:1f:4d:c3:75:02:02:9d:a8:38:d5:92:c3:31:55:
ca:34:ec:ca:52:d5:50:42:98:bf:1c:8d:85:05:c6:06:17:4d:
00:7f:1d:15:99:5e:ab:d9:49:7a:42:35:fb:d8:1b:62:63:f8:
a0:2b:6d:98:d8:e7:06:81:49:8b:2f:d9:bc:28:26:96:4c:50:
bb:2a:82:65:df:67:be:bb:62:5b:58:96:3c:b2:fd:b4:30:14:
6b:a5:5d:1e:8b:46:43:4f:25:f1:96:3e:42:00:d2:aa:8e:78:
73:75:ee:d2:13:d9:23:34:08:5c:5d:c7:5a:49:a8:7a:aa:02:
ef:a9:d3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:08:29 2025 by rpki-client