Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64a1e53c-33f0-3bb0-b289-bc53e7c41760.roa
File: 64a1e53c-33f0-3bb0-b289-bc53e7c41760.roa (raw, json)
Hash identifier: nZH3aT/kS8VkdJ/fnWD2BI4XFc/2LoO/ktgjVWgwB4Y=
Subject key identifier: F1:E7:7E:3B:8F:B2:92:19:98:C1:BB:06:3E:8D:A4:09:66:03:83:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CF615D1E2651F2FDD5A5623C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64a1e53c-33f0-3bb0-b289-bc53e7c41760.roa
Signing time: Thu 17 Feb 2022 05:00:00 +0000
ROA not before: Thu 17 Feb 2022 05:00:00 +0000
ROA not after: Thu 24 Mar 2022 04:00:00 +0000
asID: 22394
IP address blocks: 155.146.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:f6:15:d1:e2:65:1f:2f:dd:5a:56:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 17 05:00:00 2022 GMT
Not After : Mar 24 04:00:00 2022 GMT
Subject: CN=3091161f-55fb-4630-a4c1-02f1c35ef772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:88:09:49:2c:63:39:01:a5:34:c3:00:0f:
6c:b0:2b:4e:6d:fd:c5:05:76:06:2a:51:a6:c8:4e:
aa:e3:5c:3b:ed:1c:97:f4:93:8a:23:4e:61:b2:3f:
a1:57:ad:9c:e6:d4:a8:f0:5d:6b:2c:4b:88:a0:8d:
4d:37:a6:53:06:ae:bd:5d:eb:06:fb:9f:a6:f9:c2:
c4:fb:cc:42:61:52:d1:0b:5a:c1:b7:e6:c3:bf:5c:
d4:55:99:df:2e:ba:1d:6e:6f:de:b1:bc:9d:86:9b:
43:e9:b2:3c:57:49:d6:11:23:cb:09:9a:8c:be:7d:
13:a8:74:99:ef:da:ec:29:16:de:22:eb:9f:aa:ee:
3f:cc:8e:c9:60:8c:7f:ab:db:2a:3c:f7:d4:b9:58:
b8:be:b8:0a:02:a0:06:29:f4:e1:a2:21:bc:71:83:
0a:e9:24:29:de:ef:d1:cc:ab:c8:e0:c6:dd:88:0c:
5f:d9:11:08:3d:2d:36:36:cf:65:47:fe:f5:97:fa:
ed:19:05:7d:77:35:43:3c:f5:7d:1f:58:71:ff:3a:
2a:6d:12:ae:0c:3a:ea:ec:ec:28:f6:06:cf:79:f4:
64:fe:c1:43:7d:4f:49:41:70:8e:14:cc:5f:ab:88:
22:e4:07:e1:ec:59:55:aa:73:ae:a3:95:c3:03:db:
9b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:E7:7E:3B:8F:B2:92:19:98:C1:BB:06:3E:8D:A4:09:66:03:83:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64a1e53c-33f0-3bb0-b289-bc53e7c41760.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:3d:22:42:49:b5:cc:79:a5:bb:80:3a:cb:ab:6e:24:30:df:
e4:de:5e:6b:a9:22:57:72:32:7b:0b:c7:83:38:68:e4:e0:a3:
b5:0c:dd:92:61:ad:0e:a5:04:07:04:28:a6:e8:0e:ca:1e:c2:
a7:be:47:65:fd:6f:5f:8a:74:41:b4:bb:4b:5b:dc:44:09:21:
b0:0f:b3:2f:bb:df:19:21:24:ac:c6:43:4b:18:3d:19:a9:86:
df:b0:35:63:6a:01:64:d9:e1:c9:02:8e:61:bb:48:7e:79:b2:
96:7b:2b:11:23:99:06:26:6b:c8:e7:8b:6b:56:7d:55:21:07:
21:d1:20:b5:2f:c9:11:06:8e:2f:2c:92:51:6a:c5:75:ee:30:
d7:53:dc:a9:a3:49:13:0c:4f:0c:23:9e:74:e2:75:93:fb:42:
18:91:33:91:9c:ab:08:34:d8:e0:68:12:9a:31:3b:98:7f:de:
43:57:93:c1:d3:38:2d:37:52:56:5a:0a:44:96:72:4c:b2:39:
b1:a3:f6:8f:75:12:aa:12:d0:98:57:51:50:60:fa:68:ef:6b:
f9:fe:04:02:8e:cf:85:0c:07:3d:14:de:91:8b:05:64:ef:95:
a1:26:c4:a7:c6:0e:30:c4:42:a6:fa:92:0c:68:30:69:be:15:
54:a7:24:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDz2FdHiZR8v3VpWI8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIxNzA1MDAwMFoXDTIyMDMyNDA0MDAwMFowLzEtMCsGA1UEAxMk
MzA5MTE2MWYtNTVmYi00NjMwLWE0YzEtMDJmMWMzNWVmNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKOICUksYzkBpTTDAA9ssCtObf3FBXYGKlGm
yE6q41w77RyX9JOKI05hsj+hV62c5tSo8F1rLEuIoI1NN6ZTBq69XesG+5+m+cLE
+8xCYVLRC1rBt+bDv1zUVZnfLrodbm/esbydhptD6bI8V0nWESPLCZqMvn0TqHSZ
79rsKRbeIuufqu4/zI7JYIx/q9sqPPfUuVi4vrgKAqAGKfThoiG8cYMK6SQp3u/R
zKvI4MbdiAxf2REIPS02Ns9lR/71l/rtGQV9dzVDPPV9H1hx/zoqbRKuDDrq7Owo
9gbPefRk/sFDfU9JQXCOFMxfq4gi5Afh7FlVqnOuo5XDA9ub7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPHnfjuPspIZmMG7Bj6NpAlmA4OmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjRhMWU1M2MtMzNmMC0z
YmIwLWIyODktYmM1M2U3YzQxNzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5JQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGw9IkJJtcx5pbuAOsurbiQw3+TeXmupIldyMnsLx4M4aOTgo7UM3ZJh
rQ6lBAcEKKboDsoewqe+R2X9b1+KdEG0u0tb3EQJIbAPsy+73xkhJKzGQ0sYPRmp
ht+wNWNqAWTZ4ckCjmG7SH55spZ7KxEjmQYma8jni2tWfVUhByHRILUvyREGji8s
klFqxXXuMNdT3KmjSRMMTwwjnnTidZP7QhiRM5Gcqwg02OBoEpoxO5h/3kNXk8HT
OC03UlZaCkSWckyyObGj9o91EqoS0JhXUVBg+mjva/n+BAKOz4UMBz0U3pGLBWTv
laEmxKfGDjDEQqb6kgxoMGm+FVSnJKg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:28:57 2025 by rpki-client