Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d136c2c-808c-3f41-975c-dc69c0c44479.roa
File: 0d136c2c-808c-3f41-975c-dc69c0c44479.roa (raw, json)
Hash identifier: 7mQ3MBDb9wXg1fDyRdUfrFY4bDb22xwS1niUOiq3eEc=
Subject key identifier: 4C:0D:4D:E9:75:15:6A:79:D6:46:1F:D5:F1:00:23:73:52:10:24:29
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E8A2F70498E5E58F5BF7CA200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d136c2c-808c-3f41-975c-dc69c0c44479.roa
Signing time: Mon 11 Jul 2022 12:00:00 +0000
ROA not before: Mon 11 Jul 2022 12:00:00 +0000
ROA not after: Tue 16 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8a:2f:70:49:8e:5e:58:f5:bf:7c:a2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 11 12:00:00 2022 GMT
Not After : Aug 16 04:00:00 2022 GMT
Subject: CN=db2e35b2-95b1-4a06-a0bf-59cb0dc8bda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a4:d7:22:c4:c6:7a:35:e8:46:e4:83:2c:51:
2a:89:98:dd:0f:40:b7:3e:63:f5:88:cb:2f:40:92:
1d:91:4b:dd:07:65:54:a7:8b:e8:76:74:b2:43:66:
59:ae:c7:d6:25:97:c4:75:6d:0a:02:02:b4:bc:da:
97:53:df:70:05:97:10:18:c9:cc:87:74:1b:a3:79:
6c:3a:a0:54:2d:e7:b3:2f:86:a8:44:9c:e6:5d:55:
2a:3e:8c:4e:29:fd:87:22:75:e8:d9:f3:77:b8:f2:
ab:d3:fc:b6:d3:bd:f1:88:64:fc:07:1c:9f:10:4d:
17:8f:c4:c7:90:a4:3b:97:b3:27:7e:e8:04:2f:96:
a7:05:a2:b4:58:dc:83:ac:98:93:97:22:aa:2c:9a:
4f:56:76:73:61:63:44:0c:c7:79:c0:12:39:4b:d8:
81:cf:58:bf:2a:2b:81:ee:85:99:b8:6c:81:8d:c5:
2f:6d:78:c7:15:63:01:b5:de:2b:04:cb:36:92:89:
43:dd:9f:bb:d4:d8:81:1a:e4:99:ca:e3:c0:ad:6d:
2f:8b:3b:38:fc:19:ca:c0:2e:11:83:e9:c0:3a:3e:
05:9d:d3:2f:25:60:cb:a0:8d:4b:1b:8d:9e:aa:df:
f0:07:78:58:af:ac:2a:8c:9a:23:af:4f:56:b6:08:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0D:4D:E9:75:15:6A:79:D6:46:1F:D5:F1:00:23:73:52:10:24:29
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0d136c2c-808c-3f41-975c-dc69c0c44479.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:40:6b:fc:ac:a9:09:b5:99:be:33:a4:a4:15:78:c6:5f:9d:
86:1e:db:49:02:89:3a:76:2a:9c:12:85:27:a8:5b:68:56:e7:
d7:bc:14:9c:49:7e:77:45:4e:28:f0:9e:a2:35:af:29:1a:eb:
9a:be:cc:7f:b0:0c:3d:97:ba:50:c3:42:91:d8:d8:05:a5:c8:
c2:e0:f9:da:03:95:d6:36:e9:54:5e:1a:82:65:97:0a:83:25:
0d:06:7d:9b:59:28:d2:3d:11:1d:77:78:19:af:58:b9:88:31:
dd:81:82:79:92:12:54:0d:b2:e8:1d:ce:de:70:2a:bb:8b:ea:
2d:8c:b3:21:1c:01:55:d9:a0:5c:09:0d:4d:1d:1f:c3:56:27:
86:72:51:da:9e:59:e0:96:18:74:ab:13:82:6f:71:04:07:6e:
1c:ef:ff:73:b2:0d:3d:ec:e9:36:fc:3a:b2:f4:ac:0a:12:41:
2b:08:c6:82:ca:84:08:b8:a0:c0:09:41:71:3c:fa:8a:d2:79:
68:66:79:6d:92:87:2a:00:40:9d:72:e5:1e:db:de:d8:68:9f:
3f:a2:22:03:69:08:d0:72:3a:89:53:bd:7d:98:65:aa:32:7d:
f2:5f:87:45:98:ea:b2:9f:a1:c6:6f:36:7b:b1:9f:f9:e2:8c:
bc:2b:6d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:43:05 2025 by rpki-client