Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bfd2406-904b-3a30-a507-717c79e01564.roa
File: 1bfd2406-904b-3a30-a507-717c79e01564.roa (raw, json)
Hash identifier: raR8keT/mIF5nBqgLjGScvWJ8P3jkaNFMgvHSLPMUBY=
Subject key identifier: E2:60:25:E1:F6:3F:5F:D6:90:C0:8D:04:1A:4C:75:4C:B6:59:5C:ED
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D02FE57CE9773C28E79DE6C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bfd2406-904b-3a30-a507-717c79e01564.roa
Signing time: Tue 22 Feb 2022 05:00:00 +0000
ROA not before: Tue 22 Feb 2022 05:00:00 +0000
ROA not after: Tue 29 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:02:fe:57:ce:97:73:c2:8e:79:de:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 22 05:00:00 2022 GMT
Not After : Mar 29 04:00:00 2022 GMT
Subject: CN=5127f250-e55b-432e-a44f-29991088f09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:38:01:1d:8f:da:ec:f9:3d:00:e9:dd:a3:33:
fc:bf:2e:8e:42:ac:cc:cd:5a:80:59:c2:63:c4:f3:
72:b1:1b:3f:09:c1:cb:c9:f1:eb:3c:0c:a8:7d:57:
c2:51:00:89:81:26:fa:c0:20:6d:63:d4:24:d6:17:
df:5f:8f:17:5c:be:c5:a9:27:44:a1:dd:82:04:68:
a8:e9:c2:44:14:ce:b7:d2:0e:af:f7:b8:75:f4:31:
41:e7:17:18:4e:b9:af:3d:ab:73:d0:98:d8:f2:9f:
b3:76:5a:3f:32:d6:98:3f:7c:06:a5:03:3a:9b:98:
d2:f7:c8:e0:cf:62:62:7f:6b:16:fd:b1:a3:fa:bd:
29:78:98:76:e5:ba:41:87:16:69:1b:ee:54:0f:fc:
43:58:1e:fd:70:5d:63:b3:f0:61:77:f5:7c:0d:75:
df:c0:a5:d6:06:65:f1:7a:17:e7:06:34:b1:9f:e3:
4e:18:f9:5e:7a:11:c6:99:20:9b:df:1c:e8:a5:0f:
d5:30:26:33:8f:b3:aa:e8:5b:04:42:d1:1b:65:37:
1c:41:68:b1:38:92:92:c3:cf:80:e9:f0:c6:48:8a:
ed:cf:ca:84:ee:d3:57:02:fe:d2:4d:03:3f:16:73:
1e:30:46:a2:dd:3c:32:39:eb:0f:c9:3c:a9:53:25:
51:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:60:25:E1:F6:3F:5F:D6:90:C0:8D:04:1A:4C:75:4C:B6:59:5C:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1bfd2406-904b-3a30-a507-717c79e01564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:aa:45:92:98:1c:fe:0c:c0:46:16:c1:1e:93:62:7f:4e:e3:
97:8f:cb:09:e4:bc:7f:ef:5a:c8:ec:63:6d:33:4b:d5:66:16:
cb:23:d9:b5:dc:07:ea:71:cd:9d:0d:41:96:98:03:63:20:46:
49:22:fa:a0:74:73:ad:32:a9:3d:b4:48:66:fe:02:b6:53:4d:
2f:4f:c1:99:fe:7f:95:7a:41:1c:f1:f7:2f:c8:b4:e3:d1:3f:
c4:0f:a7:57:dd:fc:f2:c8:1e:5a:a5:8d:41:db:8e:f4:fb:ba:
7b:33:40:6a:7a:a3:c0:fa:8a:35:2c:e5:b2:ef:72:17:34:c1:
62:18:9f:76:d1:c6:29:15:80:35:19:bc:98:ca:ef:d2:9c:3e:
a7:05:f5:c7:70:05:00:1a:ab:85:ca:b0:a9:d3:7e:b2:07:77:
7b:0c:be:69:d6:83:c5:9f:b8:f8:c9:14:7f:93:7a:36:7d:c5:
44:ce:b0:ec:30:d9:67:26:c8:21:06:d8:d1:47:08:97:ab:66:
82:18:c6:03:8e:b5:ca:7c:e9:f3:5e:68:3e:ac:e5:51:a2:d1:
78:35:4f:cc:46:1c:5a:5e:6d:09:4d:9d:b2:21:76:02:42:39:
49:05:4f:26:be:b6:a3:7c:bd:53:a1:de:13:8c:cb:0d:f0:ec:
31:c0:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:38 2025 by rpki-client