Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60c6b557-7e2e-38b1-89a7-703747dc6b09.roa
File: 60c6b557-7e2e-38b1-89a7-703747dc6b09.roa (raw, json)
Hash identifier: M2uRWva0YdE6AhxnduBidI58DNzYbRSv7PXW41SGm7o=
Subject key identifier: 2A:B1:E7:22:D8:71:9E:33:AE:D0:70:11:6E:DA:CF:08:AB:9B:01:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584002BFE13505AE1FF7E6885630
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60c6b557-7e2e-38b1-89a7-703747dc6b09.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.160.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:02:bf:e1:35:05:ae:1f:f7:e6:88:56:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=e5df91a7-a52c-41e2-b6e6-1d4b88d2c2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:44:e5:99:1c:de:c6:e9:66:57:13:c1:ff:fc:
f0:66:20:3a:00:51:e6:a7:fe:df:52:b8:e5:b3:12:
7f:40:bb:c8:ab:88:05:14:dd:1d:b5:1e:39:14:a3:
c1:6c:ed:c6:79:b4:ef:e9:b5:d2:d2:95:32:c6:71:
f8:0d:ad:48:6d:38:dc:d5:24:26:84:26:a3:e6:85:
17:63:67:ea:92:2f:fd:1b:9a:07:2b:73:51:e9:fc:
3d:85:f6:cc:7a:01:cb:d5:d3:d6:a0:6a:b6:14:73:
69:50:f3:e9:ee:b8:3c:3b:21:20:d5:89:c8:63:20:
a1:df:51:36:65:6b:a6:2f:2c:21:4b:f8:8a:d7:ae:
f6:7f:36:98:82:00:0c:5a:20:12:5b:8c:02:f2:63:
d8:18:ab:00:89:fa:19:a7:51:9a:f0:6c:7e:19:06:
a0:a2:48:ae:54:54:00:4f:8e:dc:b6:88:ac:c2:cf:
a9:55:c3:da:67:3e:9b:be:8f:c9:1f:7e:94:64:24:
49:38:1d:39:e7:52:22:1d:77:dd:92:b6:5c:81:c3:
ce:77:8d:3d:cd:90:8d:84:a9:a7:4f:5d:b1:fc:76:
1f:13:2c:cf:55:26:0c:a8:6f:37:2f:bf:e3:c9:26:
c7:36:b3:60:6d:e2:f4:30:20:2b:8a:66:13:08:8d:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B1:E7:22:D8:71:9E:33:AE:D0:70:11:6E:DA:CF:08:AB:9B:01:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/60c6b557-7e2e-38b1-89a7-703747dc6b09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:55:95:a6:26:4b:38:2f:79:b4:99:e1:7c:c3:e1:61:d5:ea:
17:d5:eb:5d:04:d2:c2:57:2b:bc:9d:66:b7:37:c6:85:d9:08:
43:c1:55:57:cb:71:53:d8:63:f7:c1:ab:e1:54:a7:4f:31:69:
e2:ed:6a:81:6b:ee:6f:ac:46:c4:16:71:8b:1a:06:f1:13:a5:
15:b6:a4:db:4b:3c:3d:97:78:54:f3:c3:4c:e8:a5:50:4f:d5:
47:56:54:ef:7c:6d:e7:6a:a3:7a:a9:00:f0:ab:53:d4:0f:74:
ba:a3:5e:2d:eb:d2:9e:38:7c:92:5e:99:00:c3:15:fb:ef:f8:
12:56:39:9a:8e:36:2f:6b:22:6a:22:92:0d:15:c6:d3:b2:7f:
95:d6:d5:fd:33:eb:df:5a:83:2e:db:2e:d6:ce:18:ef:1a:ee:
2e:a6:e5:46:9a:e4:54:9d:1e:ac:d0:31:fc:b1:ca:ea:bb:65:
0c:17:9f:93:f3:af:d5:0c:96:4f:35:ed:8b:c6:3e:9e:88:b6:
29:1b:86:51:7e:c6:c3:32:a1:93:99:b8:eb:fa:80:6d:63:2f:
4a:c3:54:c8:10:22:49:f7:45:c7:a5:fd:16:11:7d:08:26:24:
06:c5:84:46:10:2d:36:9c:c1:99:4c:f1:1e:da:15:da:b7:99:
8e:f2:63:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:30 2025 by rpki-client