Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ebdcd71-57ad-3edb-8cc7-1dfac7da07b4.roa
File: 8ebdcd71-57ad-3edb-8cc7-1dfac7da07b4.roa (raw, json)
Hash identifier: R3CHO39rdgXhpx3oDRv7jCwMiGQ+qWms77x4iS+FFAk=
Subject key identifier: D5:6B:CD:46:B7:47:0F:1D:09:51:12:E2:7A:3C:2E:A2:27:DB:67:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402A1877F9D09485995FD817C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ebdcd71-57ad-3edb-8cc7-1dfac7da07b4.roa
Signing time: Wed 07 Dec 2022 12:00:00 +0000
ROA not before: Wed 07 Dec 2022 12:00:00 +0000
ROA not after: Thu 12 Jan 2023 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.96.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2a:18:77:f9:d0:94:85:99:5f:d8:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 7 12:00:00 2022 GMT
Not After : Jan 12 05:00:00 2023 GMT
Subject: CN=aaaaa5b7-d562-4bab-87f3-39b8cf2c0726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2b:89:78:8f:dc:7b:cf:cc:23:3d:d4:76:ae:
f1:6a:01:69:9e:1f:ef:4f:d2:27:f4:df:8c:2b:72:
d4:a4:e4:57:44:8b:83:16:f9:a7:0c:d4:3d:bb:21:
48:0c:9f:07:4d:84:64:e2:cb:3d:49:ee:3e:0e:2c:
be:5f:6d:71:e2:5a:5b:76:d7:a1:e1:27:66:96:9e:
37:a6:d7:51:cb:69:95:66:ea:22:f8:e1:73:bd:d5:
8c:54:54:50:94:c3:1a:2b:f1:00:6d:fe:23:91:16:
41:b2:9a:25:7f:44:cb:99:3f:f2:0c:ab:7a:b9:a6:
9a:34:b4:08:33:9f:30:8e:55:60:83:3d:c9:61:8c:
aa:68:de:ed:c8:c7:17:40:16:bb:7a:7b:c6:50:f1:
e2:49:42:b5:45:e5:6c:7b:4e:30:25:f3:ed:22:b1:
5e:47:af:52:91:e0:85:00:8d:05:1c:05:57:4b:2b:
15:19:fc:84:c9:af:aa:7a:3d:46:4d:29:a8:03:02:
1d:81:cd:73:d1:15:ae:e0:8b:d9:e7:75:b3:00:15:
39:ce:a4:90:b0:64:30:13:8e:d5:98:08:a3:73:0f:
b4:84:da:eb:bf:53:9c:be:a4:4f:a8:ee:6e:f1:4d:
de:db:61:89:c3:cd:bc:bd:7c:04:75:9b:ad:d3:71:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:6B:CD:46:B7:47:0F:1D:09:51:12:E2:7A:3C:2E:A2:27:DB:67:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ebdcd71-57ad-3edb-8cc7-1dfac7da07b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b5:77:6c:45:c2:82:0b:50:e6:95:99:71:8b:64:ec:14:dc:
54:3f:9c:5e:d3:71:63:e5:cb:55:50:54:13:37:94:9f:fc:84:
46:e9:a2:5c:df:aa:45:77:1f:c2:c1:59:f5:b9:c1:4e:d3:83:
5e:78:da:78:6f:be:40:20:53:9b:7e:a0:91:99:bc:b2:c9:d2:
85:94:b6:af:27:a9:bf:0f:81:b1:bd:09:c3:bc:5a:89:99:c8:
26:80:3d:ef:b5:56:e1:f9:c3:9f:99:75:a7:19:8f:22:b5:65:
57:77:e9:52:ae:89:de:33:21:b9:2e:30:8f:98:90:46:95:4e:
1e:9b:a4:da:ae:24:29:36:ca:fe:65:f0:33:0a:b3:e4:9d:7e:
89:21:c8:52:d6:bf:a1:97:c3:6a:83:78:73:43:df:a3:d5:34:
90:26:8e:9c:b7:42:6c:ee:a1:8e:67:65:95:5a:86:ac:1e:59:
06:31:72:be:ab:3c:c1:c9:d3:f4:a9:29:08:fe:6c:6e:29:0e:
3a:52:83:b9:50:91:63:00:50:8c:09:44:48:d5:ff:2e:b9:0d:
ae:da:51:ef:c3:13:09:61:d4:e0:b9:bd:33:e8:2a:14:c3:d6:
8b:8e:2f:05:75:b2:49:fb:92:39:74:88:54:01:41:83:05:8b:
9a:99:b6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:44 2025 by rpki-client