Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/611c72a8-4114-3654-bff8-2d3baf6ea37d.roa
File: 611c72a8-4114-3654-bff8-2d3baf6ea37d.roa (raw, json)
Hash identifier: qG4F49IeYt0mH/g59BfDGvYQVPKqO4R1SqlJyBr24fA=
Subject key identifier: F3:72:2F:BF:EE:31:B1:4F:1B:BF:C7:7A:97:26:61:FB:F3:22:42:96
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB6DC66D36C94B6D05C48EC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/611c72a8-4114-3654-bff8-2d3baf6ea37d.roa
Signing time: Tue 25 Jan 2022 05:00:00 +0000
ROA not before: Tue 25 Jan 2022 05:00:00 +0000
ROA not after: Tue 01 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 155.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b6:dc:66:d3:6c:94:b6:d0:5c:48:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 25 05:00:00 2022 GMT
Not After : Mar 1 05:00:00 2022 GMT
Subject: CN=98d8031a-8642-4a51-8305-6cf73c12c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:b6:19:54:ab:81:02:65:13:96:5b:08:75:
a9:b7:8a:19:e8:f5:cb:ed:d9:7a:18:53:cb:66:fb:
d9:c3:e6:99:c5:46:7b:52:34:9d:ff:b3:be:b7:66:
50:c7:0f:0d:66:e2:af:77:aa:93:78:20:e0:e6:07:
a8:54:68:d1:56:7b:ee:71:24:57:85:62:23:67:0d:
5c:0f:2d:c1:77:2a:77:9b:f1:08:1e:f4:d0:20:6b:
28:5c:a7:35:e0:66:ec:cc:1f:44:a2:17:5a:c2:ec:
ed:84:4b:67:0a:ee:17:42:ed:e4:b0:0f:bb:02:ac:
50:d5:b7:3c:97:07:6d:86:87:ff:1c:66:1b:0a:5d:
9b:71:fb:39:0c:65:54:dc:2d:d9:4b:c6:e5:39:6d:
c0:6c:ef:a3:67:9e:ba:f4:53:df:6a:cc:42:f3:bb:
62:f0:d6:dd:59:2c:32:10:0f:e7:ad:37:53:2b:41:
11:7d:50:88:67:02:87:b6:ea:74:3a:03:a4:ae:18:
34:65:4e:43:51:73:1f:88:22:47:23:f8:93:ea:49:
c4:ea:d3:bd:95:b5:86:f8:28:b8:08:8b:d7:c9:89:
15:62:38:3d:a2:29:97:85:8d:3f:e4:07:f6:9a:9c:
68:f6:0e:c0:30:e6:2c:50:db:5c:b3:c6:18:e0:18:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:72:2F:BF:EE:31:B1:4F:1B:BF:C7:7A:97:26:61:FB:F3:22:42:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/611c72a8-4114-3654-bff8-2d3baf6ea37d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:34:3b:38:17:86:e1:1f:18:ba:c4:ff:c6:ea:9c:b1:19:4a:
29:cd:0c:6f:f3:59:99:87:dd:69:d1:5c:b8:71:ea:50:b7:a8:
b9:1f:95:9d:53:0c:4c:6d:6d:17:9a:7d:ba:1a:27:9b:a9:e8:
03:0a:89:f1:0e:5c:4a:4c:9d:58:61:f7:c0:35:b0:e0:b8:da:
0a:99:74:fb:94:59:99:53:5d:da:43:03:b0:83:6f:6e:70:87:
13:35:36:db:06:66:b8:52:df:a5:0f:3b:09:40:50:c3:4b:a0:
a1:1b:36:7a:18:ea:27:44:f5:33:68:69:b6:e8:91:47:70:4e:
ed:9f:2d:14:da:3b:78:6f:ef:2c:52:14:34:f8:e6:3b:a1:19:
3e:98:45:59:e9:aa:e8:6d:c9:b6:a3:44:1d:c1:27:85:25:a7:
3b:68:6d:65:3b:f5:57:f6:36:cd:74:d6:9d:25:16:74:12:d8:
6d:fc:af:19:21:63:31:1e:49:73:ae:d6:1f:a6:bc:28:96:9d:
3d:40:80:7e:03:51:02:53:ef:bc:52:31:67:06:f7:54:ae:e7:
89:12:f3:3e:eb:7c:b5:af:15:cd:93:d0:d3:d4:66:99:a7:72:
99:34:d7:f9:de:06:22:6a:16:27:f5:f9:2a:41:74:69:04:cf:
f0:be:98:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:47 2025 by rpki-client