Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9588b453-37af-33dd-a064-ff5f1922f7cc.roa
File: 9588b453-37af-33dd-a064-ff5f1922f7cc.roa (raw, json)
Hash identifier: 97C2iV/Jndk3mKBAM+TLSGm0Xlzwg5kVST3GgYx4RFs=
Subject key identifier: 5D:84:C2:D5:9E:B9:B2:87:75:BF:34:15:81:35:49:E4:24:67:00:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EFF8E3DDF1961023B1C2A2B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9588b453-37af-33dd-a064-ff5f1922f7cc.roa
Signing time: Mon 22 Aug 2022 12:00:00 +0000
ROA not before: Mon 22 Aug 2022 12:00:00 +0000
ROA not after: Tue 27 Sep 2022 04:00:00 +0000
asID: 22394
IP address blocks: 155.146.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:ff:8e:3d:df:19:61:02:3b:1c:2a:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 22 12:00:00 2022 GMT
Not After : Sep 27 04:00:00 2022 GMT
Subject: CN=10e8f51c-f83e-4659-9cba-03d303cba1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:bc:fe:e8:71:ec:92:34:96:de:57:8a:e8:
f8:ff:7e:3a:dd:7c:3f:ee:34:d1:b9:ac:e6:98:cd:
8e:bd:86:2a:18:e2:a2:ab:0e:9d:fd:aa:c1:9f:0a:
20:58:75:b7:b9:1f:98:70:82:1c:eb:b5:83:42:ec:
ef:45:6a:c1:b2:69:38:ed:11:6e:db:92:55:f3:bd:
36:5d:46:5a:65:f9:9d:db:6b:fb:47:42:ac:cd:e5:
97:ea:88:7c:35:2f:38:11:b4:cb:30:63:2b:5a:9e:
92:37:6d:ff:a3:be:de:72:ad:3c:7a:7a:08:5d:9f:
a8:d2:20:9a:7d:5b:00:02:e4:d8:1d:1c:86:66:95:
76:ac:a8:fb:52:d1:96:1c:07:a2:4f:61:6f:c3:41:
94:78:97:3b:44:49:af:26:d4:7c:75:0e:88:be:23:
b0:2e:03:e6:ee:29:db:a3:91:05:37:55:6c:82:22:
4d:40:06:8b:8c:d8:b0:01:76:71:56:bf:cd:9b:40:
25:82:f6:65:45:74:20:50:52:40:31:61:d4:fb:9e:
95:b3:55:6a:e9:b8:92:25:37:25:5f:41:73:75:df:
46:7c:7a:17:24:1a:46:67:73:ac:23:0e:69:c6:14:
6f:51:03:ca:bf:06:1c:bc:39:96:77:51:4c:98:c2:
b7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:84:C2:D5:9E:B9:B2:87:75:BF:34:15:81:35:49:E4:24:67:00:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9588b453-37af-33dd-a064-ff5f1922f7cc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:a9:d7:df:39:14:ea:4b:30:52:30:44:07:e7:87:c2:b2:2f:
cf:82:5f:86:0f:e6:75:87:ba:af:b5:d4:41:f7:13:a1:39:80:
57:34:24:03:2e:d4:db:52:80:be:7a:89:2a:be:9f:5d:59:5b:
f6:95:29:cb:d1:6d:56:24:de:60:fe:fe:07:2a:6e:28:3f:e6:
c8:f2:8b:36:f1:f5:50:d1:c2:28:c1:8e:27:ba:dc:30:f6:04:
f0:6c:08:9c:83:3c:69:77:ad:97:67:ce:bc:5e:74:df:3b:87:
96:14:ec:84:fd:02:3d:e5:f6:46:18:aa:f7:8b:a6:cf:d1:c1:
ef:a1:28:ed:66:5e:40:9a:2e:92:b2:b4:9f:3e:cb:2e:24:b5:
a2:dc:dd:1a:7d:17:9b:7a:8e:54:0d:5c:67:6d:e6:e3:e3:3c:
60:bb:23:bd:ba:32:40:e3:1a:ae:26:61:21:d9:c5:12:9b:25:
97:1e:44:2c:10:fe:f4:ba:b8:a5:5a:8a:0f:c0:5a:f6:d7:85:
b9:43:fc:c6:84:af:73:5f:e1:bb:35:14:b4:8c:36:a1:8e:dc:
68:cf:b9:c4:34:a5:e0:2b:db:a8:2c:3c:8a:a7:1a:75:22:e3:
fd:e1:8c:9f:17:41:81:2f:58:ce:dd:bf:fd:85:5e:41:a0:50:
1a:18:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:17 2025 by rpki-client