Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d51abba-e42d-3693-a882-37161a3e392e.roa
File: 2d51abba-e42d-3693-a882-37161a3e392e.roa (raw, json)
Hash identifier: n0yyyboeJBupvJxCsKtfUqedBUYdV7epvmY6fW+KQCk=
Subject key identifier: 67:73:EF:68:BB:8F:AC:EA:F9:92:48:35:3E:0C:92:AA:D3:D8:3B:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6699AC0D8D47B0A771B3E280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d51abba-e42d-3693-a882-37161a3e392e.roa
Signing time: Tue 28 Dec 2021 05:00:00 +0000
ROA not before: Tue 28 Dec 2021 05:00:00 +0000
ROA not after: Tue 01 Feb 2022 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:66:99:ac:0d:8d:47:b0:a7:71:b3:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 28 05:00:00 2021 GMT
Not After : Feb 1 05:00:00 2022 GMT
Subject: CN=396d381b-e14c-4184-8a78-d28423566b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:b9:cc:b2:f7:53:e5:8a:bc:ad:30:1e:3e:
a7:24:1c:da:44:41:cb:92:1a:c6:87:1f:38:79:03:
d4:44:ac:be:0e:09:cb:69:2f:34:29:db:22:14:4b:
60:83:7e:d0:97:db:e0:61:9a:2d:8f:cf:db:d0:b1:
46:07:16:27:14:81:54:ec:d3:c2:5f:e7:14:c2:a4:
27:a3:d2:85:89:f0:c5:c0:fc:82:95:fa:30:96:02:
80:c2:0f:c9:ed:f4:f1:bf:01:19:b6:4e:24:19:62:
60:50:46:16:08:f5:dc:dd:24:14:05:99:12:28:f8:
03:13:66:28:ba:77:bc:c4:08:94:09:ea:dc:12:a7:
7f:df:2b:9b:b6:5b:8a:f6:a1:2a:15:96:c5:c1:05:
57:b6:a0:2c:24:8b:6b:b3:12:2e:58:5d:51:1e:ad:
63:c9:71:55:28:12:40:18:c7:2d:42:46:d9:53:42:
1f:fc:f6:e9:c2:85:59:03:2d:b8:1e:7d:2e:13:fc:
13:23:06:bc:57:15:97:b9:b2:38:a9:9b:29:e5:6f:
50:5c:d7:a0:c9:28:e1:2e:74:52:9e:b2:a7:52:81:
46:61:31:61:b4:42:a2:ba:48:5b:4c:3d:b4:8e:d0:
28:81:1e:c9:70:7d:44:c4:62:e1:20:9b:11:26:d1:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:73:EF:68:BB:8F:AC:EA:F9:92:48:35:3E:0C:92:AA:D3:D8:3B:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d51abba-e42d-3693-a882-37161a3e392e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:24:9c:27:76:99:04:53:a7:9b:ba:f8:a1:0e:70:2b:d4:21:
19:d4:0b:92:17:08:9b:65:94:c7:e2:a6:09:48:59:22:08:4f:
af:36:3a:62:6d:a7:4e:e8:45:5e:0d:e4:82:29:d1:8d:9c:38:
4b:a2:03:2e:68:a8:b9:e4:e2:55:f4:86:a4:ae:d4:5d:ce:10:
70:44:d9:84:5e:a6:a4:e9:b8:56:ef:af:1b:13:7c:76:18:0d:
1f:67:66:ac:91:9b:81:42:c1:53:f5:56:7f:ec:7e:6a:b1:27:
aa:4b:25:f2:58:ce:ae:dc:09:97:ec:d2:ec:1e:85:e0:6a:8c:
9b:7c:85:8e:1c:eb:ec:76:3d:77:84:db:17:70:c5:2a:5f:20:
49:eb:09:de:d7:9f:21:9c:a8:39:cb:78:ca:9b:50:21:f0:0b:
06:f0:84:3a:bc:01:19:25:19:a6:9c:19:d3:c2:04:67:c0:53:
56:7e:89:0f:77:81:2e:3e:b8:c1:2e:12:0a:4e:58:5b:17:01:
eb:6f:f1:6a:c7:5d:21:7b:34:57:de:56:49:e9:b0:90:1c:1f:
3d:4c:7f:15:16:86:b2:26:9b:b8:14:d6:ef:57:d9:a0:5f:3f:
30:94:21:6b:59:ab:2e:61:b7:78:50:11:98:36:30:64:94:5f:
b0:bf:4d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:34:44 2025 by rpki-client