Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/333e48a8-a27b-3b28-8dfd-cd54c618b63b.roa
File: 333e48a8-a27b-3b28-8dfd-cd54c618b63b.roa (raw, json)
Hash identifier: jTdw/kj9TaZ8APF4o4IkPIllkQgPRf/jYKuF/y2d9mc=
Subject key identifier: DB:AA:B4:D8:37:AF:26:BB:22:C8:6B:73:BA:6B:FA:9E:4D:16:B5:96
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F502327CCA3876DA208BC3D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/333e48a8-a27b-3b28-8dfd-cd54c618b63b.roa
Signing time: Tue 20 Sep 2022 12:00:00 +0000
ROA not before: Tue 20 Sep 2022 12:00:00 +0000
ROA not after: Wed 26 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 155.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:50:23:27:cc:a3:87:6d:a2:08:bc:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 20 12:00:00 2022 GMT
Not After : Oct 26 04:00:00 2022 GMT
Subject: CN=763eba21-dfe4-4cc7-bc75-1357f3f2f16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:0a:02:9a:38:a3:9a:7f:18:65:f1:99:68:
7d:fe:f8:10:c9:82:b5:a8:46:ce:3a:d9:c3:21:ed:
50:a8:79:6d:82:8a:05:43:7d:4a:3c:55:44:01:e6:
7a:15:08:a9:a3:e4:91:d6:5c:d7:40:44:13:71:9b:
7a:da:3f:04:fa:0e:82:e5:46:01:60:6a:65:7b:bf:
9c:29:04:55:b9:fe:60:7f:8b:fc:27:3c:fc:37:2e:
16:f7:74:28:4d:ef:5a:38:05:f2:46:de:24:6a:de:
2e:4e:3a:5c:e9:fb:41:a7:96:1d:f9:0a:18:a6:4d:
7a:41:75:c8:b1:dd:18:ce:09:a1:85:3a:ba:25:b0:
e0:1d:01:0f:da:a8:ef:c6:af:70:f8:88:9b:e8:07:
47:8a:a5:d4:70:14:19:1d:6c:4c:38:fa:6d:92:24:
a0:a2:49:72:01:36:14:97:f9:f8:c0:d1:9f:80:66:
04:93:04:64:38:7d:22:84:5e:3c:f6:e7:7f:ab:25:
6e:d2:72:04:75:d2:7b:4a:f9:5e:56:c8:ef:e5:db:
af:10:36:19:9e:2f:26:69:b5:4a:52:3f:f4:e7:6b:
0d:16:38:89:e4:fa:82:b4:48:b0:7d:b0:54:aa:ef:
7a:f0:de:f8:5f:e1:44:44:2e:64:0c:f0:d1:59:6d:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AA:B4:D8:37:AF:26:BB:22:C8:6B:73:BA:6B:FA:9E:4D:16:B5:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/333e48a8-a27b-3b28-8dfd-cd54c618b63b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:85:40:7a:f1:07:34:50:86:fc:ea:ea:e9:f0:f7:75:25:60:
3a:e0:df:42:ee:e8:8b:2a:d5:51:36:9e:bb:bc:d2:02:d4:15:
ce:70:c4:2d:0b:1b:42:db:42:ec:58:4f:d8:73:63:81:86:09:
b9:a7:c5:91:62:46:4b:ab:3e:ef:d0:84:ca:ff:41:37:a2:f2:
1b:b1:ff:42:b7:b8:08:16:4a:97:a0:a4:0b:b3:f2:82:0d:68:
82:f3:72:42:f2:87:d9:2f:ed:fd:3a:31:58:70:a3:5f:04:2d:
6e:7a:74:5e:54:32:db:6e:f5:f2:9b:da:7c:b6:8c:1a:a6:c0:
6f:19:70:ac:4b:65:cc:f7:60:10:16:f0:ae:30:56:89:cf:2c:
f6:9f:79:cb:32:80:77:ef:47:98:c2:e3:44:ff:09:3f:09:3c:
48:7b:ef:78:40:78:3d:f9:ab:f2:f9:e5:75:8b:93:ad:17:2e:
c8:fe:db:e1:b1:16:cd:4b:39:06:39:38:3a:5e:65:eb:c0:81:
35:d0:6b:72:39:df:bc:1a:d8:0a:00:3b:47:17:f4:7f:34:bf:
ed:20:41:8c:e8:21:92:de:d1:f9:c8:e2:d4:47:05:fd:a3:7a:
ff:6f:eb:4e:95:68:a7:d9:46:5a:e2:54:d3:ab:fb:a3:a7:c8:
97:d9:48:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:46 2025 by rpki-client