Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dec0f4b-d748-31f5-a08b-c26c84318981.roa
File: 3dec0f4b-d748-31f5-a08b-c26c84318981.roa (raw, json)
Hash identifier: v+u6mS5sDtr/JniaJR61yJ3ZrZagc5XB44gR/h6CfXQ=
Subject key identifier: DE:05:C9:4E:09:BF:3F:DF:04:CA:14:FB:25:43:71:D0:71:AA:B6:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584002E52597E735E2B50992DB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dec0f4b-d748-31f5-a08b-c26c84318981.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:02:e5:25:97:e7:35:e2:b5:09:92:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=b81ec608-ede3-4ad5-af41-688a1c4a9cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:58:fa:54:e0:7e:ef:da:01:29:8c:5c:08:
57:84:0d:65:10:93:3a:a9:60:05:10:e7:57:5e:e3:
8f:30:c3:01:c2:9f:a2:1b:a0:20:61:51:e1:58:80:
cb:fa:5d:05:fc:47:f6:b2:54:4d:74:a1:a1:b3:df:
a0:99:36:9f:48:a1:82:c1:a0:b2:38:2d:12:5b:57:
3b:f0:bd:7d:53:ea:72:ae:d4:e3:0c:a1:18:5f:8a:
8e:83:50:d9:82:d6:72:17:00:8a:52:fb:c4:55:2e:
a8:f9:7b:17:93:c5:2b:09:6a:cd:be:38:e1:81:72:
95:52:07:52:71:33:e8:50:d8:5d:ea:79:e1:02:93:
9e:ed:d7:c6:dd:8a:03:2d:73:69:d3:f9:a0:5e:8a:
37:8a:84:99:4e:aa:01:4b:73:c5:c8:c2:d3:50:80:
e6:f3:33:f9:3e:cd:19:0f:7f:1b:39:11:cd:1a:ba:
34:90:54:ec:61:5d:23:5b:de:50:7a:2f:a5:16:7c:
f6:51:a1:2a:04:1b:06:e8:91:0e:00:40:b1:4a:c9:
bd:a3:d4:33:3f:e4:96:98:4d:d7:e6:c6:f0:76:d7:
e7:88:a4:52:68:1a:fd:7f:8b:90:f2:32:56:15:6c:
9d:60:7f:cd:a3:ad:ad:6c:2b:54:14:f3:44:5e:82:
36:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:05:C9:4E:09:BF:3F:DF:04:CA:14:FB:25:43:71:D0:71:AA:B6:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dec0f4b-d748-31f5-a08b-c26c84318981.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:0a:4b:77:ae:d0:b1:4b:a8:98:65:a4:de:15:7b:c6:4f:be:
fd:9b:07:7e:74:72:f4:9e:c6:b9:e5:a5:00:b1:3d:1b:01:6c:
3f:bd:8e:67:e2:96:f3:47:78:0a:dc:01:b7:df:c5:3f:3a:2b:
5c:5b:97:62:00:05:46:89:d2:11:63:5c:1d:78:9f:77:70:da:
c0:f2:07:ef:76:27:2a:14:75:65:5b:04:cd:2f:9d:f9:8e:e3:
22:e9:38:69:39:c3:92:03:14:6d:15:2e:d6:63:b2:16:ba:f5:
46:9d:2d:0d:76:06:b4:b2:73:1a:ff:7e:63:ea:e6:ae:05:57:
30:02:85:53:c1:e8:38:50:9f:38:b5:1e:1f:65:e0:85:55:b1:
b5:fe:79:47:95:05:eb:7e:aa:95:a4:2b:4f:ad:e1:05:ea:a6:
66:20:dd:d1:fb:e3:61:1f:4f:09:ae:fd:78:e0:d2:30:8d:35:
3a:8a:ba:00:36:5d:f3:33:2d:a8:73:09:77:e0:f8:49:7d:52:
3e:55:b0:41:c6:0d:03:80:ea:19:2d:d6:8c:6a:b6:35:ca:50:
72:80:cd:a8:fd:73:95:6b:2f:b5:f3:e6:1d:02:6a:e3:09:f6:
77:0b:c5:a5:dc:7e:31:54:8c:44:be:4c:12:12:65:c7:2c:28:
ba:b8:a8:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEAC5SWX5zXitQmS24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyMzEyMDAwMFoXDTIyMTIyOTA1MDAwMFowLzEtMCsGA1UEAxMk
YjgxZWM2MDgtZWRlMy00YWQ1LWFmNDEtNjg4YTFjNGE5Y2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbtY+lTgfu/aASmMXAhXhA1lEJM6qWAFEOdX
XuOPMMMBwp+iG6AgYVHhWIDL+l0F/Ef2slRNdKGhs9+gmTafSKGCwaCyOC0SW1c7
8L19U+pyrtTjDKEYX4qOg1DZgtZyFwCKUvvEVS6o+XsXk8UrCWrNvjjhgXKVUgdS
cTPoUNhd6nnhApOe7dfG3YoDLXNp0/mgXoo3ioSZTqoBS3PFyMLTUIDm8zP5Ps0Z
D38bORHNGro0kFTsYV0jW95Qei+lFnz2UaEqBBsG6JEOAECxSsm9o9QzP+SWmE3X
5sbwdtfniKRSaBr9f4uQ8jJWFWydYH/No62tbCtUFPNEXoI2IwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN4FyU4Jvz/fBMoU+yVDcdBxqraDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2RlYzBmNGItZDc0OC0z
MWY1LWEwOGItYzI2Yzg0MzE4OTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5JgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJMKS3eu0LFLqJhlpN4Ve8ZPvv2bB350cvSexrnlpQCxPRsBbD+9jmfi
lvNHeArcAbffxT86K1xbl2IABUaJ0hFjXB14n3dw2sDyB+92JyoUdWVbBM0vnfmO
4yLpOGk5w5IDFG0VLtZjsha69UadLQ12BrSycxr/fmPq5q4FVzAChVPB6DhQnzi1
Hh9l4IVVsbX+eUeVBet+qpWkK0+t4QXqpmYg3dH742EfTwmu/Xjg0jCNNTqKugA2
XfMzLahzCXfg+El9Uj5VsEHGDQOA6hkt1oxqtjXKUHKAzaj9c5VrL7Xz5h0CauMJ
9ncLxaXcfjFUjES+TBISZccsKLq4qLU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:08 2025 by rpki-client