Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbf7c174-9283-3c69-942d-a8828f8095fc.roa
File: fbf7c174-9283-3c69-942d-a8828f8095fc.roa (raw, json)
Hash identifier: bWkzVlGrCPD8ubB7wMHle+jmwlnJpyAgaY8E4nXJZjw=
Subject key identifier: 0C:DB:B0:12:1C:7E:C6:AB:7E:55:F3:3D:69:A1:91:7A:7D:B9:12:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DDEDF2E63A54F4B5E36473800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbf7c174-9283-3c69-942d-a8828f8095fc.roa
Signing time: Tue 10 May 2022 12:00:00 +0000
ROA not before: Tue 10 May 2022 12:00:00 +0000
ROA not after: Wed 15 Jun 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.176.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:de:df:2e:63:a5:4f:4b:5e:36:47:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 10 12:00:00 2022 GMT
Not After : Jun 15 04:00:00 2022 GMT
Subject: CN=b14b962e-2aff-421c-94a9-31116cf82dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c2:e7:27:71:70:c8:db:c9:0f:e4:a2:6e:f2:
a4:3f:e6:74:6c:0a:46:cc:2a:9a:f6:1f:eb:e4:18:
47:5d:7b:e7:da:07:70:49:6b:44:af:63:30:e0:a0:
34:59:78:49:46:2d:78:17:54:4b:27:aa:b7:18:88:
f1:7a:26:66:c2:2a:8e:6c:ca:4c:5f:9e:7f:63:f2:
92:ab:5a:18:5f:e8:53:4a:41:79:bf:1e:c6:28:1d:
0d:ce:88:fb:cd:3a:93:37:a0:4f:6c:e7:24:fc:b9:
d5:5b:60:af:1b:68:d1:fe:2e:b4:80:cd:85:43:b2:
e9:db:ed:87:c9:e1:90:28:6b:fd:65:e1:29:cc:91:
65:63:c7:d8:f0:98:e8:62:af:60:fe:8a:14:31:1b:
89:06:c9:35:0a:e5:35:4c:9a:bb:82:73:2f:cf:e2:
c9:f9:85:c1:67:9d:9a:1f:15:c9:08:0a:09:18:f2:
8e:d4:ff:80:38:6e:09:0a:41:42:df:9a:01:c9:2e:
e3:67:49:83:52:90:93:16:af:0d:24:ff:f5:36:1b:
70:1b:38:51:5e:3d:83:7d:5b:c3:09:4c:75:07:37:
fd:1e:20:6d:75:37:07:8f:1f:0a:b6:78:58:91:54:
be:8a:9a:bf:54:19:4f:67:a0:1a:27:95:5e:f1:43:
1e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DB:B0:12:1C:7E:C6:AB:7E:55:F3:3D:69:A1:91:7A:7D:B9:12:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbf7c174-9283-3c69-942d-a8828f8095fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:62:11:a1:d1:bb:c8:01:d7:2d:b4:03:9d:fb:2c:4d:c6:c7:
e1:79:f1:49:ce:cf:8b:79:29:67:e1:b3:4a:bb:9a:22:9d:f7:
ea:3f:c3:e4:44:38:fc:de:28:d7:6b:b1:3e:8a:1d:ec:f1:29:
50:5d:fe:3f:20:3a:e7:2e:a1:b7:af:25:a8:4f:7a:12:d3:71:
c9:6e:39:5c:68:43:63:5e:bc:88:c9:ee:33:ff:cf:c9:8b:cb:
6d:65:07:a8:17:6f:ef:e2:c8:fd:5d:ff:6d:db:8d:8d:9e:44:
02:34:d9:27:f6:81:67:1f:d3:7c:c6:93:1f:c4:fb:01:b4:02:
ef:b7:a5:3f:a3:30:12:e0:01:58:35:11:18:4e:30:34:cb:de:
7a:08:92:dd:da:ad:e6:b0:4e:9f:f7:5f:cb:68:bc:b5:00:06:
34:26:23:ee:df:3f:bb:34:e8:8d:93:2b:32:88:bc:d6:a9:0f:
19:01:c7:8a:b6:5d:14:bf:d2:e4:3b:eb:fe:80:d1:b2:a9:f6:
fe:66:f1:8d:c5:d2:ea:86:bf:36:73:75:50:e8:e4:b6:c1:d3:
3d:75:c7:11:78:cc:24:b1:ed:01:ef:8e:1f:a4:f4:15:f6:ca:
09:eb:53:fa:b7:18:02:50:70:34:d7:8f:58:3b:c2:e9:4c:16:
17:2d:53:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:54 2025 by rpki-client