Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40fa327d-ea7b-3921-afa7-ff4eb88ccf8f.roa
File: 40fa327d-ea7b-3921-afa7-ff4eb88ccf8f.roa (raw, json)
Hash identifier: TRy0az5NZ3vyYD/CIXiDh0G5AY0UBQx/Z1Dl1KqNxzc=
Subject key identifier: 05:6F:0A:A6:67:A6:CE:EA:1E:4A:1D:DB:DE:8C:C8:D2:28:C9:CA:88
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403815B5EC711939B2DF1EB040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40fa327d-ea7b-3921-afa7-ff4eb88ccf8f.roa
Signing time: Mon 12 Dec 2022 12:00:00 +0000
ROA not before: Mon 12 Dec 2022 12:00:00 +0000
ROA not after: Tue 17 Jan 2023 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:38:15:b5:ec:71:19:39:b2:df:1e:b0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 12 12:00:00 2022 GMT
Not After : Jan 17 05:00:00 2023 GMT
Subject: CN=c013e01e-64f6-4f01-ae03-8971758ba7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:a6:e3:de:50:e9:ef:d1:14:43:76:35:65:
6d:69:f2:31:d7:3b:fe:01:b2:1b:1c:fc:56:99:2a:
b4:38:c1:88:bb:a5:ce:17:f0:5c:0f:bb:83:63:22:
1e:59:97:37:80:6d:6c:88:eb:e6:a1:9c:c6:32:cc:
cb:97:45:96:97:c6:e7:e5:2c:6f:34:c2:5b:d8:f4:
83:23:c3:76:e4:2e:c6:ed:13:2e:98:09:89:7e:c5:
3c:d3:12:f2:73:66:cf:02:14:5c:bf:04:21:cd:b8:
e7:94:f3:27:33:03:9a:ab:49:ce:30:9e:eb:26:a6:
60:1f:cb:49:89:89:57:07:42:54:25:1e:85:62:89:
69:54:98:9c:02:96:59:b4:18:88:ab:be:29:f0:27:
7c:49:d2:a0:45:72:b3:0e:65:7f:37:ea:17:2d:d7:
e9:1d:9a:8e:4c:e6:ff:f0:1a:c4:03:2a:01:82:3f:
b9:d4:c6:4a:fc:79:37:a8:01:4a:ee:92:86:07:76:
a0:6f:b5:25:96:42:e0:8c:16:ea:28:7d:41:6a:e8:
d8:a8:3e:58:53:ba:f4:47:d2:84:17:dc:ba:32:07:
4a:9e:f7:c6:54:76:77:15:49:1f:9d:2e:d5:44:68:
6a:33:fe:d7:f3:d6:4d:25:2d:b6:8b:1b:18:5d:a1:
26:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:0A:A6:67:A6:CE:EA:1E:4A:1D:DB:DE:8C:C8:D2:28:C9:CA:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/40fa327d-ea7b-3921-afa7-ff4eb88ccf8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:12:1e:7e:89:71:3c:a9:ae:d2:e0:89:fe:e0:75:81:bb:00:
92:a3:51:64:51:5d:2c:be:13:f7:cb:73:e0:09:03:6c:a7:9e:
36:0d:d6:b2:fb:3d:15:02:2c:d1:ed:26:35:2a:20:11:e0:57:
4a:fb:99:4d:82:93:6b:0b:4f:25:6c:f3:36:31:c3:c4:4c:0a:
07:87:20:80:d4:43:38:f8:32:94:c7:f4:8f:d9:73:75:f7:a3:
4f:a5:e7:ee:73:13:0a:13:7d:e3:90:2a:4b:c9:61:71:a3:cc:
cf:5e:a5:f4:b5:7c:b2:0d:3a:64:5e:ed:de:cc:77:f5:75:82:
e6:bf:6d:86:ac:1a:5c:c4:d4:7b:cb:11:dc:26:34:20:df:e2:
4b:11:9d:0c:ad:f8:05:9c:81:45:65:7d:0f:cb:15:19:8c:b1:
62:58:9f:98:00:7a:9f:93:23:d6:98:85:5b:88:ca:de:99:f3:
db:33:6f:26:2f:15:1f:d2:3a:df:90:99:13:3e:2e:c4:86:d4:
db:8e:74:28:74:f4:27:61:19:bc:18:3b:9c:90:3f:34:aa:d1:
c6:0e:08:07:bb:34:f8:a4:9d:52:30:00:15:33:2a:9d:eb:c2:
94:8d:c5:a2:9c:81:46:b9:32:87:49:34:50:a7:14:32:c6:f6:
d5:c2:1f:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:18 2025 by rpki-client