Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f75d08ae-0b9d-3dde-a3aa-46b79c463d0e.roa
File: f75d08ae-0b9d-3dde-a3aa-46b79c463d0e.roa (raw, json)
Hash identifier: JJLWgjV3PXCffO/m2WS9aGsIMlc0ciJthHNRXjGJ284=
Subject key identifier: C0:1A:0E:21:FE:6C:92:9A:40:66:A1:1D:05:F1:D6:35:2E:CB:5F:AF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D9289B7845312F84F4BB3E600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f75d08ae-0b9d-3dde-a3aa-46b79c463d0e.roa
Signing time: Thu 14 Apr 2022 04:00:00 +0000
ROA not before: Thu 14 Apr 2022 04:00:00 +0000
ROA not after: Thu 19 May 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:92:89:b7:84:53:12:f8:4f:4b:b3:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 14 04:00:00 2022 GMT
Not After : May 19 04:00:00 2022 GMT
Subject: CN=5a5e3043-f5d0-4316-aaa2-af452cbc6ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:b9:71:fd:c0:ef:9f:6c:3a:1a:dd:ff:3e:
60:85:84:38:2e:f0:6c:b9:b6:ad:53:ee:42:44:5e:
88:ed:30:ef:0a:ad:4b:11:fe:65:f6:2c:9b:2e:42:
97:40:ba:8e:33:de:d2:e4:5e:a2:1f:69:1a:e0:77:
62:2d:d0:a5:c3:e6:17:41:2a:7f:7a:f1:79:a3:51:
f7:22:57:1b:92:43:63:e9:2a:40:fb:bc:48:e4:f4:
f7:03:e0:44:5a:c4:e3:7d:56:5e:1f:4e:a3:9b:1f:
15:0e:dc:bc:cc:fd:55:e3:61:13:9a:53:38:c6:76:
43:2c:96:b4:1a:4d:da:31:c3:ce:f6:e8:69:05:56:
22:74:34:9d:e6:8b:14:a7:14:1e:63:28:80:ab:24:
c5:8f:f4:d7:74:48:bb:76:ba:d8:1b:e8:fb:e8:71:
4a:33:23:96:d1:42:a9:46:13:00:62:43:52:d3:af:
0c:3d:ea:a1:c7:d3:5e:c9:cf:3e:6c:83:b4:6f:f6:
28:0a:0c:f4:5b:fc:df:94:12:dc:21:86:93:f1:57:
a0:60:e9:17:00:a7:e7:71:0d:2c:e0:e1:9a:12:8f:
c9:f4:71:59:b5:9d:3f:54:98:23:72:42:e9:60:d0:
e2:81:28:d4:f9:5a:59:67:74:40:02:5f:c8:b1:3a:
45:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1A:0E:21:FE:6C:92:9A:40:66:A1:1D:05:F1:D6:35:2E:CB:5F:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f75d08ae-0b9d-3dde-a3aa-46b79c463d0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:76:06:3a:80:5e:0d:db:28:f1:74:47:b4:b8:1a:ac:f2:f5:
c7:1d:97:c9:d1:0c:37:35:fc:78:25:95:40:9a:fd:d8:6d:b0:
a1:34:18:d1:0a:34:ae:98:ea:db:f8:d2:df:71:ef:5b:1e:21:
d8:e4:35:22:84:7d:01:93:7b:d1:cb:72:7e:9c:76:71:20:82:
30:0a:6f:2e:87:a2:14:33:80:61:06:cc:7b:fe:36:99:99:8c:
be:85:2a:67:b2:e2:03:be:e9:9d:23:0e:94:d6:19:82:88:63:
a4:00:16:4f:4f:60:f8:9e:65:cc:71:70:c1:c0:6e:72:c5:3e:
28:58:5b:04:2b:f3:20:77:36:53:7f:09:89:6e:74:a9:59:88:
39:9d:00:b2:bc:c0:44:18:9f:b5:ea:7a:4f:25:48:ff:e6:3e:
8d:a6:41:90:fe:57:b2:04:18:1f:0c:5c:2a:f6:a5:d7:50:90:
c1:36:cf:e1:f4:53:09:82:8c:19:d3:5a:14:6b:60:f6:e6:98:
63:bf:2f:fa:19:d0:42:a3:6f:46:9b:6b:15:b2:5f:c3:17:ca:
c2:ee:24:e2:37:39:72:b4:7e:2f:b7:99:b7:3c:73:7e:b4:7e:
8a:5f:04:53:a7:6e:34:83:17:fd:1c:01:5d:b9:f8:88:f9:46:
3c:3e:2e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:06:26 2025 by rpki-client