Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c7a334-3432-339f-b92c-abdbfc71a6a2.roa
File: 65c7a334-3432-339f-b92c-abdbfc71a6a2.roa (raw, json)
Hash identifier: fgoczeFKtKDd/wGFOXWc6C+MJu9ygcCvSVOLLDMf7c4=
Subject key identifier: BA:0A:6A:A0:A6:43:87:5D:81:2D:FE:C1:A8:BE:BD:D4:25:EA:54:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F28ACA5CD05095D57A44FDF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c7a334-3432-339f-b92c-abdbfc71a6a2.roa
Signing time: Tue 06 Sep 2022 12:00:00 +0000
ROA not before: Tue 06 Sep 2022 12:00:00 +0000
ROA not after: Wed 12 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.38.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:28:ac:a5:cd:05:09:5d:57:a4:4f:df:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 6 12:00:00 2022 GMT
Not After : Oct 12 04:00:00 2022 GMT
Subject: CN=72f15c38-4d59-4ac0-a057-3b2aa0a9fd69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c9:a4:75:b8:39:d3:4f:f6:55:3e:a0:19:78:
e2:e4:a7:61:7b:06:30:e2:c7:fd:21:b9:90:2a:da:
70:e3:15:57:16:b6:6a:cf:3e:45:2b:85:cf:28:14:
f0:ce:2e:15:97:d8:01:7a:2f:52:3b:50:e0:04:80:
1b:a7:a0:6c:e0:f1:00:54:26:af:3f:c3:6e:5f:1b:
8b:9e:db:02:ad:de:50:a5:86:82:7a:a7:6b:c1:67:
1c:cb:4c:10:b2:48:c0:0b:6a:65:87:e2:b6:b2:55:
37:2a:bc:b3:87:da:6f:bc:15:73:e2:b3:33:d6:ab:
d5:c0:d3:3e:c7:46:6d:94:c1:84:e0:1c:51:71:2f:
a3:ff:d7:61:42:bf:fd:68:14:21:ee:3f:06:c9:b3:
ac:5d:9d:80:73:92:e9:5b:51:20:0d:54:a8:0a:67:
4d:81:ea:a6:a4:f6:34:d8:58:53:df:07:d3:9e:e8:
ac:dd:a9:73:1b:c0:ae:f1:50:97:a9:23:20:af:49:
d1:ed:78:97:f4:65:27:4d:7f:67:0b:38:e2:64:b7:
1e:06:ba:a8:40:f3:7e:48:52:b3:d3:96:8d:58:3e:
f3:4c:8f:f4:47:71:5d:eb:50:5d:ad:93:f3:86:b6:
3f:21:01:79:f4:c8:0d:2b:fe:fb:83:97:26:a6:48:
4a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:6A:A0:A6:43:87:5D:81:2D:FE:C1:A8:BE:BD:D4:25:EA:54:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c7a334-3432-339f-b92c-abdbfc71a6a2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.38.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:d4:5b:57:5e:98:fc:76:9c:ad:81:b0:f3:9a:62:00:9a:a9:
cc:79:60:9e:5f:d2:ce:46:90:06:c5:e0:f2:a2:a8:de:da:66:
2a:86:9e:45:55:d8:44:01:e9:2a:32:4d:84:48:01:c6:9f:3a:
e7:fd:c1:ad:17:a7:55:71:38:30:33:0b:1e:7c:c1:eb:02:d3:
19:b0:79:7e:97:32:44:ca:e4:15:41:cb:bd:cd:80:98:d8:a8:
d8:ce:74:f1:08:4d:88:1f:2c:0c:ce:82:d5:d4:cc:dd:ab:19:
1d:c5:6b:b2:73:ea:23:aa:a3:9c:b2:c1:4d:d5:f4:fe:46:55:
0a:d0:73:21:42:af:67:b8:b8:92:91:89:18:f6:01:e5:65:9f:
fa:46:d7:0a:89:94:f4:1c:b4:ae:3a:2d:6d:d3:b3:76:11:e3:
80:d9:eb:d3:1e:91:a9:e6:85:5c:af:03:ed:23:ac:9d:0c:d5:
7f:ff:40:06:81:a6:57:58:8e:2e:88:7a:3e:32:a1:6f:f2:64:
b7:2c:bd:6e:21:ed:f8:39:d0:23:95:df:5e:c0:d0:21:59:37:
38:37:3b:d9:37:33:70:b3:ca:a9:76:ee:48:e4:7e:20:9f:3b:
0e:0d:e4:20:ec:3e:0b:30:c6:d9:b4:70:fa:aa:2e:c0:ef:74:
fe:54:5c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:15 2025 by rpki-client