Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5b61565-80f2-3d36-b7cf-928fad99fe02.roa
File: f5b61565-80f2-3d36-b7cf-928fad99fe02.roa (raw, json)
Hash identifier: sw0K/NiQDEdYFJCX6gIaHoHzWHKagu97aPrO+n16HPY=
Subject key identifier: 22:E7:51:3B:D5:0D:16:54:98:0E:6D:22:FE:3D:9A:89:1D:0E:52:B6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB13D969C3C1695E673EA7880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5b61565-80f2-3d36-b7cf-928fad99fe02.roa
Signing time: Mon 25 Jul 2022 12:00:00 +0000
ROA not before: Mon 25 Jul 2022 12:00:00 +0000
ROA not after: Tue 30 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b1:3d:96:9c:3c:16:95:e6:73:ea:78:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 25 12:00:00 2022 GMT
Not After : Aug 30 04:00:00 2022 GMT
Subject: CN=ec8218de-e7b1-4c3b-a49a-b3c554778bbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0e:94:a7:fc:64:df:25:3c:55:9e:53:b4:f5:
0c:b1:72:55:5e:a7:b4:a2:ba:12:8a:fe:b3:14:fa:
c9:11:65:73:86:5f:7f:ae:b3:d1:eb:3e:6e:5a:dd:
7c:46:c3:ef:80:e4:ee:bb:5a:6c:1b:82:f6:97:05:
57:72:bd:b4:ff:24:76:18:df:61:ff:d9:c3:91:56:
3b:5f:39:43:6a:ad:71:14:37:58:f2:8e:2a:00:6d:
f8:10:81:d8:dc:56:dd:ed:34:2a:65:41:54:28:68:
87:33:38:a9:b4:6e:f7:d6:ac:84:71:05:1b:63:5f:
a2:57:63:9b:50:94:eb:25:fc:49:a4:08:20:da:0b:
a7:8f:c2:58:9d:d7:5a:7b:87:ee:e8:24:5d:ed:63:
16:af:16:1a:14:93:d9:ba:2a:db:fc:89:18:37:11:
72:24:31:a8:f1:84:0e:27:18:89:b9:a3:5d:e8:e9:
5c:c3:f8:c9:df:ac:8d:54:ce:63:96:7e:1b:1a:92:
48:c3:ba:f9:43:4f:0f:e1:65:3a:e4:54:ed:5d:67:
4f:85:6e:93:c4:c6:f0:93:f8:5f:89:f2:e9:9f:f9:
12:67:bf:53:83:f7:90:98:cd:cd:53:ff:c9:3a:a3:
28:5c:47:3d:23:12:37:73:d4:c4:82:e1:57:aa:5c:
e9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:E7:51:3B:D5:0D:16:54:98:0E:6D:22:FE:3D:9A:89:1D:0E:52:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5b61565-80f2-3d36-b7cf-928fad99fe02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:28:83:b3:01:b7:7e:d1:97:4a:cb:5e:28:36:7f:da:ea:fa:
71:f2:80:45:58:32:63:34:4b:49:4c:ba:8f:b6:04:6b:fc:9d:
26:42:a4:b1:f0:35:10:6e:75:20:13:9c:5e:cf:7f:30:7a:03:
76:d6:39:44:eb:0b:83:80:0e:65:42:86:b5:ec:2f:25:94:fe:
21:87:57:17:4b:5c:15:fe:d1:04:19:5e:19:50:c2:f5:a8:59:
87:d4:cf:db:71:3b:69:46:e8:0a:55:c2:3e:03:cc:3b:ee:23:
67:9e:ff:8d:e5:fc:bf:ff:47:c1:a1:f6:29:41:b7:17:8f:cd:
ba:bb:af:a6:bd:b6:41:5e:22:b6:a8:bc:cd:85:87:a1:6a:6e:
90:37:f1:4d:54:5a:35:fc:d4:3e:11:28:61:53:ad:7d:50:79:
39:04:cc:2b:aa:41:73:b0:89:17:74:e7:24:c1:2c:29:31:6a:
fb:96:ee:0e:70:cd:af:6a:ad:42:af:dd:9f:3a:8c:69:9b:0d:
3e:32:88:d4:96:20:c6:87:56:e9:8f:54:e2:6a:39:4c:cc:41:
41:1c:96:db:c1:86:c6:6c:bc:09:ae:0c:e2:de:d6:24:07:17:
e3:fc:cc:f8:a4:c5:e5:c5:b7:fd:17:67:df:c9:9b:3b:39:26:
1e:36:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:01:01 2025 by rpki-client