Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b11feaa-e980-3992-a47f-1deb7e0a1dd8.roa
File: 7b11feaa-e980-3992-a47f-1deb7e0a1dd8.roa (raw, json)
Hash identifier: fZYPDZUumMAPbu1hTWDdA+WfY+eaKrMVrw0U5ay/u6g=
Subject key identifier: BA:92:91:66:B5:3A:F5:89:5B:4A:5D:C0:5D:F7:DA:42:79:A0:01:C4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583ED82DEFB980BD11D73DE95C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b11feaa-e980-3992-a47f-1deb7e0a1dd8.roa
Signing time: Mon 08 Aug 2022 12:00:00 +0000
ROA not before: Mon 08 Aug 2022 12:00:00 +0000
ROA not after: Tue 13 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:d8:2d:ef:b9:80:bd:11:d7:3d:e9:5c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 8 12:00:00 2022 GMT
Not After : Sep 13 04:00:00 2022 GMT
Subject: CN=dbca8328-c339-4df1-b59d-f19598298564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:eb:8a:68:6f:c5:69:de:93:ce:20:f4:de:24:
9c:1d:bd:70:55:a9:26:85:7b:83:de:ee:5e:c7:3e:
67:54:3d:f3:aa:c9:c6:11:94:08:a6:b0:80:af:f3:
c7:f3:09:af:17:a0:6e:a5:29:55:91:70:86:75:85:
9e:e1:b0:f7:87:21:52:5a:6e:64:19:7a:44:dc:fe:
2e:03:6d:56:c3:dc:5c:c8:4b:a2:a4:ca:67:43:66:
32:56:06:d4:9f:86:fb:a3:a7:f0:0f:b5:9e:c8:94:
93:97:b4:6c:34:d9:4d:a9:fa:6a:32:38:22:bd:a2:
2b:3f:3d:ae:0f:8c:93:7a:1f:09:c1:86:c9:35:8f:
ce:99:59:f7:cc:c1:ec:b6:a3:14:cf:89:ef:ec:f6:
d0:e2:97:c7:21:11:a4:3b:0c:73:f1:28:6f:4a:4e:
09:05:a2:be:d8:5c:cd:06:c2:1f:46:d6:23:94:46:
40:ed:03:9a:f3:d3:db:06:dc:81:c3:5e:08:a9:24:
58:5e:44:2a:56:8b:b1:48:b2:a8:3e:dd:c6:ac:e5:
be:1b:0f:11:63:4c:c9:41:ab:84:f3:85:dc:9c:28:
0f:d2:6c:61:75:43:50:42:b2:fc:9b:eb:8b:32:20:
32:bc:bb:4e:a8:2f:56:57:e2:be:3c:5f:a6:1f:fd:
04:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:91:66:B5:3A:F5:89:5B:4A:5D:C0:5D:F7:DA:42:79:A0:01:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b11feaa-e980-3992-a47f-1deb7e0a1dd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:2a:ba:ea:0c:65:94:28:35:a1:28:6e:74:f1:5d:77:e1:31:
31:2c:0b:6c:92:03:d0:61:79:b9:d4:a2:37:73:96:95:e5:5d:
1b:b0:ac:6a:88:3b:45:b6:e2:73:45:42:c1:c6:0f:1c:c6:db:
0b:65:69:db:c3:06:fe:09:37:08:84:cb:5d:fd:db:92:d1:1d:
cc:03:a8:22:c8:3c:32:79:23:ec:be:fe:0c:77:76:70:b9:fd:
11:3e:25:68:5a:65:d3:83:39:96:ec:8e:c1:2f:9f:da:93:6b:
68:d1:92:4c:37:5b:14:d8:10:2c:fa:3e:b8:4b:62:c7:36:e5:
8f:2a:63:f5:db:b9:d4:ef:22:fc:c0:55:fc:42:75:30:47:b1:
df:3d:42:3a:2f:8f:aa:90:cb:5e:38:2f:6b:3e:eb:b1:42:1b:
ad:36:52:51:04:08:1d:9c:c2:fe:00:11:b4:e8:a8:49:73:8c:
1e:2a:d1:08:1b:c1:50:45:0b:a1:50:30:92:c2:4e:10:24:42:
5f:b2:47:81:6d:5d:a3:f1:4a:4f:19:0a:a4:56:73:7b:19:40:
ab:53:da:71:29:b5:c1:96:a2:b0:79:b2:1e:ba:39:0c:bf:bb:
13:fb:44:bd:e8:aa:5c:e7:30:c8:27:69:ee:55:7c:82:3b:7c:
5f:a3:78:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD7YLe+5gL0R1z3pXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgwODEyMDAwMFoXDTIyMDkxMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZGJjYTgzMjgtYzMzOS00ZGYxLWI1OWQtZjE5NTk4Mjk4NTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuuKaG/Fad6TziD03iScHb1wVakmhXuD3u5e
xz5nVD3zqsnGEZQIprCAr/PH8wmvF6BupSlVkXCGdYWe4bD3hyFSWm5kGXpE3P4u
A21Ww9xcyEuipMpnQ2YyVgbUn4b7o6fwD7WeyJSTl7RsNNlNqfpqMjgivaIrPz2u
D4yTeh8JwYbJNY/OmVn3zMHstqMUz4nv7PbQ4pfHIRGkOwxz8ShvSk4JBaK+2FzN
BsIfRtYjlEZA7QOa89PbBtyBw14IqSRYXkQqVouxSLKoPt3GrOW+Gw8RY0zJQauE
84XcnCgP0mxhdUNQQrL8m+uLMiAyvLtOqC9WV+K+PF+mH/0ETwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLqSkWa1OvWJW0pdwF332kJ5oAHEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2IxMWZlYWEtZTk4MC0z
OTkyLWE0N2YtMWRlYjdlMGExZGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMquuoMZZQoNaEobnTxXXfhMTEsC2ySA9BhebnUojdzlpXlXRuwrGqI
O0W24nNFQsHGDxzG2wtladvDBv4JNwiEy13925LRHcwDqCLIPDJ5I+y+/gx3dnC5
/RE+JWhaZdODOZbsjsEvn9qTa2jRkkw3WxTYECz6PrhLYsc25Y8qY/XbudTvIvzA
VfxCdTBHsd89Qjovj6qQy144L2s+67FCG602UlEECB2cwv4AEbToqElzjB4q0Qgb
wVBFC6FQMJLCThAkQl+yR4FtXaPxSk8ZCqRWc3sZQKtT2nEptcGWorB5sh66OQy/
uxP7RL3oqlznMMgnae5VfII7fF+jeDQ=
-----END CERTIFICATE-----
Generated at Tue Jun 17 02:44:21 2025 by rpki-client