Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/806a70ae-1c7b-3521-94dc-8f73ec578129.roa
File: 806a70ae-1c7b-3521-94dc-8f73ec578129.roa (raw, json)
Hash identifier: fzEq4CenmlcW72lZ7nrk7Ig7Z/LWkHpWU/DaC9TnMoU=
Subject key identifier: 28:71:CA:D5:13:42:32:B7:D1:38:52:8A:C1:3D:8F:9D:BA:90:16:82
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EC75EE94A2D6FD857DDDAE180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/806a70ae-1c7b-3521-94dc-8f73ec578129.roa
Signing time: Tue 02 Aug 2022 12:00:00 +0000
ROA not before: Tue 02 Aug 2022 12:00:00 +0000
ROA not after: Wed 07 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 148.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c7:5e:e9:4a:2d:6f:d8:57:dd:da:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 2 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2022 GMT
Subject: CN=35e9f4f8-0f5f-4344-ae59-ac6fbefb30cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ac:d1:b8:7d:b1:e7:d1:59:a7:43:7e:53:a8:
8b:3a:c3:26:2e:53:0e:a2:b9:b5:78:3d:d5:09:aa:
05:97:91:b2:76:34:76:6c:6d:27:8d:39:1d:a9:5d:
d3:58:84:83:26:0f:1b:67:de:21:c1:ec:9d:65:db:
0e:c1:ec:9a:00:89:e0:f4:2b:7f:df:6e:ef:75:4e:
fb:0a:d4:06:d6:b3:b6:8c:58:6b:cc:c3:f7:12:8b:
f1:22:e9:b0:b4:e2:c8:71:2b:bc:9e:3f:28:39:a1:
3c:d1:7f:c5:84:dd:e4:b8:db:0a:de:91:46:e8:a4:
4f:8d:f6:28:95:90:64:2e:a7:cc:01:fd:5e:ff:b2:
ac:81:8a:e2:84:d1:94:7c:34:ac:0e:10:2e:1a:ac:
7d:a5:db:36:73:ed:a4:e3:9b:2c:d5:55:5e:d6:28:
46:0b:11:a5:3e:1e:ed:af:f9:e7:d7:4c:ab:ca:cd:
b5:a8:d8:8f:7a:10:89:55:52:c8:2d:60:83:d2:10:
13:0d:a2:e7:d7:23:85:85:23:33:1d:8c:f0:df:f4:
d0:3e:4f:7a:6c:c1:9c:1e:ad:96:5a:e9:16:14:28:
8b:0e:3d:d4:fa:82:16:88:6b:06:99:af:fb:5b:25:
d0:67:cb:b6:d2:ae:ff:51:3e:61:97:63:d8:6b:ee:
09:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:71:CA:D5:13:42:32:B7:D1:38:52:8A:C1:3D:8F:9D:BA:90:16:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/806a70ae-1c7b-3521-94dc-8f73ec578129.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
148.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:6b:95:8a:64:0f:51:e2:70:17:0c:1a:e3:c3:43:7f:48:a9:
da:53:83:45:5d:8a:85:2c:2d:22:3f:a4:26:06:11:7d:bf:dd:
8f:8e:da:b8:25:2e:ad:6a:1a:4c:bf:bf:c4:d1:68:3a:64:aa:
8d:c9:5e:88:52:55:05:8d:e4:12:ef:4d:c4:18:e3:f9:b9:64:
1a:a4:bb:d7:62:89:c5:6c:5c:5d:49:39:f6:d1:53:8a:88:56:
21:bb:76:d3:65:6d:bb:ee:20:63:8e:de:9d:51:ca:bf:03:01:
ff:1b:ee:88:4a:f1:a5:eb:9d:68:8e:d8:49:de:e5:0f:7b:8f:
43:9d:00:12:7e:6c:91:66:31:1a:33:9e:bc:77:8f:48:48:da:
9d:64:fc:49:b5:15:af:fe:09:06:12:4d:be:8f:ae:43:a9:77:
be:08:bc:62:63:48:80:e0:b1:8f:23:73:79:d1:04:4c:91:f8:
f2:36:45:5d:11:43:22:53:0e:95:f6:27:fe:a2:1c:a0:c7:cc:
89:83:17:65:c4:f7:ab:8e:ed:1c:2f:2d:25:40:5f:bf:b6:c5:
5b:58:36:2d:93:1a:74:ab:1c:7a:c7:58:87:45:a3:ff:3b:ba:
a3:93:dd:8c:4a:e1:42:45:54:91:f1:87:96:47:c7:28:de:b2:
fe:1f:75:24
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7HXulKLW/YV93a4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgwMjEyMDAwMFoXDTIyMDkwNzA0MDAwMFowLzEtMCsGA1UEAxMk
MzVlOWY0ZjgtMGY1Zi00MzQ0LWFlNTktYWM2ZmJlZmIzMGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqzRuH2x59FZp0N+U6iLOsMmLlMOorm1eD3V
CaoFl5GydjR2bG0njTkdqV3TWISDJg8bZ94hweydZdsOweyaAIng9Ct/327vdU77
CtQG1rO2jFhrzMP3EovxIumwtOLIcSu8nj8oOaE80X/FhN3kuNsK3pFG6KRPjfYo
lZBkLqfMAf1e/7KsgYrihNGUfDSsDhAuGqx9pds2c+2k45ss1VVe1ihGCxGlPh7t
r/nn10yrys21qNiPehCJVVLILWCD0hATDaLn1yOFhSMzHYzw3/TQPk96bMGcHq2W
WukWFCiLDj3U+oIWiGsGma/7WyXQZ8u20q7/UT5hl2PYa+4JUQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFChxytUTQjK30ThSisE9j526kBaCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvODA2YTcwYWUtMWM3Yi0z
NTIxLTk0ZGMtOGY3M2VjNTc4MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAlDcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATGuVimQPUeJwFwwa48NDf0ip2lODRV2KhSwtIj+kJgYRfb/dj47auCUu
rWoaTL+/xNFoOmSqjcleiFJVBY3kEu9NxBjj+blkGqS712KJxWxcXUk59tFTiohW
Ibt202Vtu+4gY47enVHKvwMB/xvuiErxpeudaI7YSd7lD3uPQ50AEn5skWYxGjOe
vHePSEjanWT8SbUVr/4JBhJNvo+uQ6l3vgi8YmNIgOCxjyNzedEETJH48jZFXRFD
IlMOlfYn/qIcoMfMiYMXZcT3q47tHC8tJUBfv7bFW1g2LZMadKscesdYh0Wj/zu6
o5PdjErhQkVUkfGHlkfHKN6y/h91JA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:31:22 2025 by rpki-client