Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67243fa0-c2dc-37c0-9f02-747caa0f0187.roa
File: 67243fa0-c2dc-37c0-9f02-747caa0f0187.roa (raw, json)
Hash identifier: dJlo6UdqJjpBt/1uNzcQ900TmCGSAuvhWvM0oDGquvA=
Subject key identifier: 0D:4C:54:ED:E3:11:AB:F3:70:3E:BE:F9:47:43:08:DA:5A:8B:28:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409CA4E438285BD0825BC527C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67243fa0-c2dc-37c0-9f02-747caa0f0187.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 148.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:a4:e4:38:28:5b:d0:82:5b:c5:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=48fe3d84-3c95-4632-98f6-5f74b542633e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3b:82:2e:43:ac:25:c0:b6:6d:52:b3:67:7b:
16:ea:de:47:15:9f:5a:95:51:aa:fb:0d:0b:5b:30:
a9:f8:7b:03:03:73:1f:61:f8:dc:b3:ec:cf:e0:f5:
bc:80:1e:e4:cf:66:9b:ca:f9:08:c5:33:1f:78:2d:
ba:8d:05:ce:eb:8e:52:2f:e3:af:a9:53:d3:4f:13:
8a:a4:75:6f:45:a8:b2:e0:04:4b:0a:88:1d:83:a3:
7f:76:87:bf:34:e8:c8:0e:82:97:75:b2:c8:85:c0:
ac:ff:75:c7:d2:b2:43:06:68:6d:52:45:11:2f:5f:
91:1f:15:e3:d1:5e:de:7c:fc:8d:cf:34:14:f8:a4:
91:f2:50:b3:36:7b:94:af:61:b1:9b:6c:fd:c3:4a:
6d:8c:d5:b1:3b:a7:3c:50:76:9c:5b:64:56:97:2d:
fd:33:94:15:de:61:b5:14:68:89:30:96:4a:60:bd:
73:6f:09:a2:bd:3f:37:49:38:55:af:78:0d:a0:de:
2d:b1:55:16:df:b9:01:e5:18:bf:df:36:89:b9:b5:
8f:6d:63:54:34:ad:c1:19:3a:64:ca:0b:a3:78:7b:
b8:0a:ec:10:6e:e1:eb:6b:d9:c8:60:b1:0a:5a:aa:
e0:d9:86:19:eb:46:84:7f:c4:a1:be:e5:07:2c:bf:
89:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4C:54:ED:E3:11:AB:F3:70:3E:BE:F9:47:43:08:DA:5A:8B:28:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67243fa0-c2dc-37c0-9f02-747caa0f0187.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
148.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:cb:14:38:b4:6d:54:e1:9b:6b:4c:8e:c5:a8:8f:d3:6f:cc:
00:fa:84:90:8e:53:d6:43:42:a9:d4:2a:d8:b6:82:6f:07:83:
0a:12:5b:72:91:b6:7d:14:98:d6:bf:25:58:27:36:c3:82:1b:
8b:a8:f2:db:cb:2a:e8:5c:e1:56:be:8a:79:ab:3c:8c:80:bf:
38:22:bb:ae:ab:32:ee:c8:8e:6a:10:e3:17:12:53:d4:3f:c6:
a6:15:db:f9:52:9c:59:9a:c3:ab:95:2d:0c:6a:cc:2f:a1:0b:
ce:43:0c:9f:59:20:88:50:15:11:43:dc:65:08:40:4d:30:c2:
e2:4d:aa:77:1c:d9:97:34:49:c9:fd:9e:dc:b6:28:5b:9b:33:
ab:cf:ab:fa:a8:44:61:32:70:0e:20:89:69:42:88:a7:8d:18:
08:0d:7f:f8:c5:39:ea:24:f5:38:9c:0a:32:57:4f:b5:b1:47:
c1:f1:0b:65:a3:dd:35:50:b6:15:6f:74:44:d8:bc:86:53:c1:
c5:b4:c0:f1:28:a7:25:f5:97:db:ec:af:66:9c:61:90:58:33:
1e:8d:43:49:ef:a0:13:86:be:91:1c:49:dc:68:da:4c:a4:0e:
1d:d4:52:29:88:19:bd:40:90:b9:05:41:4c:fb:71:3b:7e:0f:
40:c3:05:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:13 2025 by rpki-client