Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d7f674e-cf2f-3419-b533-7cc2bdbee860.roa
File: 3d7f674e-cf2f-3419-b533-7cc2bdbee860.roa (raw, json)
Hash identifier: /IIzDIOLzS63Tf8GWe1Uyg2iyR32ZM7LFZUx7TE+FOQ=
Subject key identifier: 32:1C:8A:42:91:96:90:BC:B0:67:17:6A:B0:5E:7F:58:21:C4:E7:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDCA76DC1DA5109360900D600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d7f674e-cf2f-3419-b533-7cc2bdbee860.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.112.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:dc:a7:6d:c1:da:51:09:36:09:00:d6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=edd9ac0b-f845-4852-b975-1ce9cb943155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:34:ab:c1:69:3e:dd:b7:f5:ce:19:2f:ec:79:
6e:c4:1d:1e:86:f1:63:b7:8a:21:b6:dd:6e:bc:fb:
7f:ac:a8:af:13:4a:da:5c:2d:27:2b:52:c9:02:66:
9b:4e:60:64:9c:f9:c6:5b:86:f1:e7:ac:60:0b:18:
83:b9:52:5d:78:60:69:c9:9b:93:74:30:71:9e:7d:
dc:c2:e5:af:1b:7f:dc:9e:2c:42:93:c1:2f:9e:99:
98:ad:7b:0c:c7:52:e7:ed:6e:11:43:f4:17:be:c7:
18:42:7d:63:f1:8c:9c:b0:4a:09:f2:10:9f:59:7b:
4e:e4:63:a9:aa:8a:18:a5:6d:14:35:df:b5:2e:8d:
75:95:d1:e9:44:ea:f7:ed:23:50:ff:e5:7e:8c:1a:
dd:0e:25:4b:0a:36:d7:df:68:06:8a:92:7b:2c:a4:
5d:96:88:94:33:c4:fa:68:4b:8c:4f:e6:f6:92:5f:
94:36:7a:0a:8b:44:dc:84:89:ad:a4:5c:6c:14:fb:
d3:5e:f2:2e:26:df:40:65:90:2a:67:76:01:05:ed:
72:80:a4:7a:1c:1b:f5:9a:b4:bf:26:bd:e0:75:e4:
90:ff:7b:7f:92:ba:a1:99:02:9a:ae:1d:4f:3a:1c:
bd:58:e4:3f:81:17:45:a6:dd:c9:5f:94:d4:8f:b7:
71:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:1C:8A:42:91:96:90:BC:B0:67:17:6A:B0:5E:7F:58:21:C4:E7:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d7f674e-cf2f-3419-b533-7cc2bdbee860.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:d6:ed:53:d3:bd:6e:44:f1:28:32:f0:1b:a7:07:9e:28:ae:
4a:b6:d8:f2:02:b8:7e:01:0d:2c:45:ca:e8:e1:26:af:af:de:
2d:28:db:6d:22:9a:b5:77:73:f5:3c:91:8c:e8:3b:52:4c:e5:
f3:4e:e5:fe:33:8b:da:bf:d2:2b:eb:75:bd:f0:67:6f:e2:c3:
6b:67:4f:75:a7:b1:45:ff:45:ad:6b:dd:09:10:db:2d:6d:2c:
61:90:90:d1:89:f1:67:ac:a8:62:54:4b:80:66:3d:45:7b:91:
98:44:e5:ec:10:22:ba:35:54:6e:bc:d3:f2:24:13:05:51:29:
2e:c8:44:8c:81:58:c4:ff:2b:00:10:fe:a7:65:a9:42:d6:b5:
f4:0b:18:78:b7:04:09:42:45:a5:bb:35:fe:b0:05:25:43:d0:
32:d2:87:33:fd:19:cc:f4:df:a7:f2:b1:d0:c4:21:30:75:cd:
c5:12:90:a3:52:64:b0:a3:9f:c8:7f:82:67:5d:bf:0c:b3:26:
5b:45:ba:c7:a7:a0:e8:bf:44:53:7a:60:ef:f9:ec:2f:06:4d:
e9:ac:6f:df:cd:d1:e2:8d:8e:a0:1c:dd:9a:a8:a3:9a:cf:b2:
ab:dc:64:1d:49:ab:43:8b:12:41:f5:22:22:17:98:0e:54:c1:
0c:3f:25:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:56 2025 by rpki-client