Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f572643-3948-348d-831f-bdc72309e41d.roa
File: 4f572643-3948-348d-831f-bdc72309e41d.roa (raw, json)
Hash identifier: ywDfaMf+oP5SZa72Elyn2RK0gWPDkZbf073SG3eDMjE=
Subject key identifier: 3E:A0:32:FE:16:72:44:C6:2A:2A:88:3B:5E:39:A4:C0:00:E4:C8:05
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDBF4FA4B9187F7B5FF7A38C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f572643-3948-348d-831f-bdc72309e41d.roa
Signing time: Wed 09 Nov 2022 12:00:00 +0000
ROA not before: Wed 09 Nov 2022 12:00:00 +0000
ROA not after: Thu 15 Dec 2022 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:db:f4:fa:4b:91:87:f7:b5:ff:7a:38:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 9 12:00:00 2022 GMT
Not After : Dec 15 05:00:00 2022 GMT
Subject: CN=5cecdafc-fff7-42ce-97b0-5d80d7dadc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:77:05:fa:b5:ba:56:2f:8f:80:c7:20:c7:
5a:7c:83:2e:d7:6a:43:bf:09:6a:18:52:1b:84:3f:
7d:26:92:b3:15:76:1d:52:c6:ff:8c:8a:e3:21:20:
fc:86:91:02:5c:7a:0f:27:a3:7d:1d:77:32:d0:79:
b1:bf:a2:b3:4a:3d:9e:a4:95:ba:33:8c:36:74:2c:
15:45:7e:8a:94:e6:13:8c:d4:d8:77:2c:98:40:2b:
c9:cb:0c:57:21:81:72:c9:78:b2:58:89:99:62:bd:
19:28:9e:45:a4:59:e0:b8:bd:8c:48:cf:d8:b4:86:
b1:00:52:b6:d8:7e:d3:7a:70:c5:c0:0b:92:e0:51:
f5:73:58:73:c0:51:44:fd:67:03:6a:76:35:f7:62:
34:a6:f7:9f:51:78:d2:94:8a:a2:ed:b0:3c:ab:21:
e3:be:c5:26:95:e6:85:36:51:a6:56:da:27:9a:45:
4e:57:77:93:d0:4c:fe:03:5c:61:d2:41:8a:f9:81:
fa:cb:67:17:7b:b6:6a:e2:2e:56:81:cb:40:6b:92:
81:52:2f:fd:53:a8:0d:ad:e8:d8:58:8e:05:8f:30:
1c:b8:70:89:60:e8:60:e1:8b:6a:1f:32:03:d1:10:
4e:f8:43:95:58:0c:94:d6:6e:b5:10:79:e1:11:bb:
a0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A0:32:FE:16:72:44:C6:2A:2A:88:3B:5E:39:A4:C0:00:E4:C8:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f572643-3948-348d-831f-bdc72309e41d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:b2:e3:cc:c5:eb:c1:e7:00:05:43:d3:42:a8:59:40:58:ad:
fc:a1:55:dc:29:11:5b:b6:6e:da:31:68:0a:ec:d1:77:7b:cb:
3b:83:ad:e9:9f:33:c8:26:e8:00:01:87:f6:0c:82:eb:d0:93:
96:07:95:b6:cc:ac:a1:77:ee:cf:f4:d6:8f:fd:92:70:f1:5d:
e1:25:9c:aa:63:f8:e8:de:77:ba:38:6a:d3:21:99:a0:77:f1:
86:ca:c7:7f:e4:77:cc:0c:43:74:67:2f:80:6a:ed:71:8a:85:
e4:a4:b6:58:ef:d5:41:76:ee:14:92:8d:8e:fd:c4:0b:86:3b:
bd:05:40:71:92:ec:38:70:08:e6:ba:97:f7:e0:c9:d7:cb:e2:
44:36:51:dc:25:d8:dc:28:dd:94:ba:ce:90:fc:66:76:8f:9b:
23:46:26:fd:02:82:9b:0f:d8:74:6f:0b:28:61:da:ca:a4:75:
a2:63:82:06:51:2c:39:a7:d4:c7:1e:9c:86:dd:1f:00:51:08:
b7:27:05:51:0e:d1:16:92:49:c6:43:75:bd:bf:53:69:40:91:
f9:ed:8a:d4:47:11:7d:a0:ac:8d:24:a7:bb:3e:bc:dc:81:89:
b8:fd:89:92:08:13:bd:52:4e:77:5a:04:55:1e:3b:c5:2d:3e:
84:16:91:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 18:48:08 2025 by rpki-client