Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1547b898-a6d2-3095-9697-e426a906e739.roa
File: 1547b898-a6d2-3095-9697-e426a906e739.roa (raw, json)
Hash identifier: FpwsA3g30eGacbTmUvA3H7mPSn9oAL0dskYv0JAGQ+0=
Subject key identifier: DB:A6:9C:77:B8:B0:59:5A:DC:5A:AF:37:A9:D0:BD:78:D8:CC:89:D3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9BF3564F82026061061DD880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1547b898-a6d2-3095-9697-e426a906e739.roa
Signing time: Mon 17 Oct 2022 12:00:00 +0000
ROA not before: Mon 17 Oct 2022 12:00:00 +0000
ROA not after: Tue 22 Nov 2022 05:00:00 +0000
asID: 701
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9b:f3:56:4f:82:02:60:61:06:1d:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 17 12:00:00 2022 GMT
Not After : Nov 22 05:00:00 2022 GMT
Subject: CN=95bc71dc-2add-4e91-b7e5-af44ad6c5558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:30:55:b9:86:2c:30:ed:54:eb:ea:6e:a3:
fc:21:59:7e:b6:02:a6:3e:83:48:8b:1f:3d:27:d3:
75:a5:51:e1:bb:28:ca:6e:3f:15:bd:6f:46:e4:1d:
53:93:9c:51:49:1d:d9:fe:f7:43:89:8b:c5:b8:fc:
bf:d9:ff:2a:4c:da:3d:a1:00:1c:e2:d1:b8:54:fb:
3a:57:63:bd:f6:b1:af:06:2e:c7:1f:df:d3:b0:da:
22:03:e8:ed:63:4f:4e:a6:66:2c:57:e1:86:47:ba:
9e:30:94:1c:16:6c:9c:18:e7:c8:91:7a:6a:fa:9f:
f9:46:1e:ad:c8:be:69:15:aa:a6:d2:1b:9f:0d:14:
79:80:4e:b9:88:34:50:98:de:80:b3:4b:36:0a:e0:
2a:90:54:fe:ed:bd:d3:b6:2c:e8:21:c9:83:b1:a9:
c9:57:88:31:7c:41:de:bf:5e:84:1c:4c:34:f4:18:
47:6f:d3:db:6a:f4:f8:f8:11:48:6e:b2:34:73:2f:
06:ec:3d:da:34:8f:f8:03:01:19:30:9d:a4:cc:8a:
bc:70:08:0c:67:51:fa:32:1d:55:e5:76:bb:53:a1:
38:8b:77:92:08:18:20:fc:93:ce:2e:fa:eb:84:56:
e8:7f:f3:4f:45:6b:3e:2c:a8:24:92:12:05:11:69:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A6:9C:77:B8:B0:59:5A:DC:5A:AF:37:A9:D0:BD:78:D8:CC:89:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1547b898-a6d2-3095-9697-e426a906e739.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:80:e5:a5:f2:90:c1:bf:f9:b1:ea:6d:cc:30:88:6e:1b:3f:
d8:de:46:2d:a7:f2:8b:e9:cc:37:d1:f8:15:4c:06:fe:7e:97:
5e:bb:82:f7:be:6e:b1:6b:7e:f3:ae:e2:00:c9:21:e1:72:49:
7d:64:0b:20:3f:9a:d5:bd:f5:8c:b6:b3:61:0c:fa:27:26:be:
16:ac:e8:ec:90:14:e4:85:9b:34:a0:1f:48:d9:d3:f3:0d:07:
e5:0a:32:ba:1d:1b:d2:0b:0c:85:18:2b:75:cb:86:54:1e:d9:
6d:94:f2:93:21:ec:f1:ca:49:4c:66:9d:93:93:32:6f:61:05:
bd:02:e6:0f:28:a9:ae:b3:f4:41:d3:99:e8:35:64:98:d1:4a:
da:12:de:fc:a0:30:66:54:f2:04:c6:2f:7e:a4:3f:a4:7d:1d:
01:1e:90:cc:5b:64:1b:45:6f:e6:e1:ee:b2:28:17:79:a1:7d:
37:00:0c:44:fd:2d:7a:38:a0:27:ee:a1:32:2a:06:8c:7d:42:
96:3d:b6:8a:36:e8:2d:33:c7:97:5b:21:1f:61:6d:3c:96:fd:
e6:a8:0c:c5:84:da:74:60:e2:14:2b:e2:98:51:4f:56:c9:91:
72:0b:82:0f:90:6e:d9:01:74:47:59:44:f8:65:c9:b1:dc:91:
5d:27:12:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:49:12 2025 by rpki-client