Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58b9fb49-2a2d-307b-81ad-b78658fb1da3.roa
File: 58b9fb49-2a2d-307b-81ad-b78658fb1da3.roa (raw, json)
Hash identifier: zNBcTGT2ryQIysYBEUY2CmdjKTZVDGbmKyW6SS8lKsE=
Subject key identifier: BA:15:FE:3F:DC:42:19:40:09:2A:45:9E:6E:35:4F:89:51:0F:95:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E63129FF3D16FD1F6EBBD7780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58b9fb49-2a2d-307b-81ad-b78658fb1da3.roa
Signing time: Mon 27 Jun 2022 12:00:00 +0000
ROA not before: Mon 27 Jun 2022 12:00:00 +0000
ROA not after: Tue 02 Aug 2022 04:00:00 +0000
asID: 22394
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:63:12:9f:f3:d1:6f:d1:f6:eb:bd:77:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 27 12:00:00 2022 GMT
Not After : Aug 2 04:00:00 2022 GMT
Subject: CN=d103a077-f1d0-4e01-98d6-7760432d16a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f9:85:d0:5a:7b:62:e7:4f:17:59:a9:63:86:
8a:d1:4a:0f:d2:8d:68:77:aa:23:86:9d:93:a5:97:
d6:b9:2a:51:35:a8:4a:7f:c9:65:3d:f1:61:28:4d:
ca:1d:82:e6:2a:cf:f3:46:f5:eb:d4:20:24:fc:5d:
28:4a:44:51:01:3e:a0:f8:46:f0:0f:fc:df:5e:20:
fc:b4:0c:cf:1f:7b:9f:9f:5b:49:69:c0:b3:af:51:
47:a5:f1:86:34:79:c0:50:b8:2a:18:16:77:46:40:
0f:d7:a5:d7:07:a7:a5:04:c2:56:0c:26:ef:b7:ff:
1c:0d:8d:b0:6c:94:7a:42:d7:a1:e5:c9:ba:74:c9:
f0:9e:a9:fe:36:90:52:29:91:da:33:69:03:e3:e7:
1b:22:cc:83:4e:66:bd:85:05:f9:77:f6:17:62:d5:
79:33:71:3f:76:35:39:20:60:9c:58:52:27:30:c2:
80:b6:a5:67:53:bf:de:81:cf:9e:f3:86:e0:ef:d7:
c6:69:3b:bd:07:f5:99:ff:7f:f0:e5:ac:b8:4a:77:
fa:88:67:7b:bc:9f:a2:c1:08:3a:6b:94:cd:1e:3b:
1c:fb:57:72:12:88:ba:54:7a:00:be:be:a3:80:10:
49:83:5d:f0:c2:b8:68:bc:b9:0c:82:da:9f:80:38:
9a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:15:FE:3F:DC:42:19:40:09:2A:45:9E:6E:35:4F:89:51:0F:95:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58b9fb49-2a2d-307b-81ad-b78658fb1da3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:11:6b:a4:a3:a5:63:de:8d:ff:1e:da:25:cf:87:7d:93:2f:
24:26:e0:ae:6e:a0:76:37:53:fc:03:f0:25:6f:29:39:1a:b5:
83:5f:3c:c9:4e:ee:18:c9:9a:bf:9c:bc:52:cb:2b:7d:37:09:
e3:e8:21:5f:ca:1b:a7:e6:2d:83:99:3e:e4:11:ca:13:e8:fc:
bc:4d:45:f1:37:a0:ca:e4:c0:e0:d5:16:48:b1:7a:ea:a8:b0:
8e:03:55:81:11:22:fa:bc:5d:fd:2c:b9:24:bb:bc:20:d0:e0:
7b:45:b1:eb:e2:f8:fb:74:7e:68:4f:2c:b5:83:89:69:66:8d:
0b:cc:66:b6:43:51:a0:8b:d5:7a:70:db:cb:ce:c6:24:95:f9:
ad:b0:a8:bd:ca:ba:12:87:5f:b5:e7:ff:33:18:61:b6:18:c0:
b4:c9:f3:92:39:b5:0a:8f:f9:ab:c5:30:43:0e:eb:a9:7a:01:
cc:4f:be:08:14:e4:69:94:a3:59:99:1f:7c:89:22:4a:e1:e4:
f7:2b:7b:02:64:4d:c8:1f:3b:fb:b4:32:ce:5f:64:4d:4a:be:
1f:06:d3:a5:2f:c0:9c:df:98:27:d3:79:f1:08:91:13:cb:c2:
0e:59:88:a0:df:6a:13:7e:52:64:27:0b:e4:65:2d:ab:e8:2e:
4b:59:5b:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5jEp/z0W/R9uu9d4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYyNzEyMDAwMFoXDTIyMDgwMjA0MDAwMFowLzEtMCsGA1UEAxMk
ZDEwM2EwNzctZjFkMC00ZTAxLTk4ZDYtNzc2MDQzMmQxNmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/mF0Fp7YudPF1mpY4aK0UoP0o1od6ojhp2T
pZfWuSpRNahKf8llPfFhKE3KHYLmKs/zRvXr1CAk/F0oSkRRAT6g+EbwD/zfXiD8
tAzPH3ufn1tJacCzr1FHpfGGNHnAULgqGBZ3RkAP16XXB6elBMJWDCbvt/8cDY2w
bJR6Qteh5cm6dMnwnqn+NpBSKZHaM2kD4+cbIsyDTma9hQX5d/YXYtV5M3E/djU5
IGCcWFInMMKAtqVnU7/egc+e84bg79fGaTu9B/WZ/3/w5ay4Snf6iGd7vJ+iwQg6
a5TNHjsc+1dyEoi6VHoAvr6jgBBJg13wwrhovLkMgtqfgDiafQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLoV/j/cQhlACSpFnm41T4lRD5WoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNThiOWZiNDktMmEyZC0z
MDdiLTgxYWQtYjc4NjU4ZmIxZGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0Ra6SjpWPejf8e2iXPh32TLyQm4K5uoHY3U/wD8CVvKTkatYNfPMlO
7hjJmr+cvFLLK303CePoIV/KG6fmLYOZPuQRyhPo/LxNRfE3oMrkwODVFkixeuqo
sI4DVYERIvq8Xf0suSS7vCDQ4HtFsevi+Pt0fmhPLLWDiWlmjQvMZrZDUaCL1Xpw
28vOxiSV+a2wqL3KuhKHX7Xn/zMYYbYYwLTJ85I5tQqP+avFMEMO66l6AcxPvggU
5GmUo1mZH3yJIkrh5PcrewJkTcgfO/u0Ms5fZE1Kvh8G06UvwJzfmCfTefEIkRPL
wg5ZiKDfahN+UmQnC+RlLavoLktZWyo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:45 2025 by rpki-client