Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6e53b7-59a6-318d-893a-c3f625ca1bc8.roa
File: 9e6e53b7-59a6-318d-893a-c3f625ca1bc8.roa (raw, json)
Hash identifier: NJybTFkacY1L44btIHL8rrR4d4zgvHiNsbbXNFq0fD8=
Subject key identifier: E1:DA:FC:64:1C:2D:28:62:8A:04:9D:2D:44:BD:B4:19:54:73:BD:18
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404E79BF4AD001EDC3BE64E900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6e53b7-59a6-318d-893a-c3f625ca1bc8.roa
Signing time: Tue 20 Dec 2022 12:00:00 +0000
ROA not before: Tue 20 Dec 2022 12:00:00 +0000
ROA not after: Wed 25 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 148.55.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:4e:79:bf:4a:d0:01:ed:c3:be:64:e9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 20 12:00:00 2022 GMT
Not After : Jan 25 05:00:00 2023 GMT
Subject: CN=939d8f0d-439d-43e0-9534-1e37bd5e2c79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:06:87:2b:8f:22:f5:4f:0f:c1:28:d1:ae:41:
bd:de:d1:5f:a6:c2:77:0b:03:51:a4:21:39:1b:c2:
e9:70:30:81:a1:78:99:63:10:5d:0e:94:df:0f:53:
82:14:6d:c3:bc:a6:0a:d9:f1:51:7a:06:b4:3b:6c:
d3:3f:98:fe:91:94:af:8f:3f:0a:dd:80:2f:ea:89:
47:92:cc:12:2e:99:a9:d9:c7:d9:17:19:90:02:02:
bf:50:f3:a8:b7:39:35:64:c9:20:b6:d1:59:6a:a5:
c3:12:46:59:21:b0:f1:f1:d3:00:87:4f:ca:5a:74:
f7:4a:6d:5b:09:a2:95:d0:35:74:ed:22:24:7e:37:
94:4e:18:ea:19:19:8f:a7:17:81:1c:67:4b:a8:e1:
6a:71:86:50:24:41:e7:32:6a:1f:cf:04:71:bb:d0:
72:81:53:20:b8:4b:2a:f1:94:06:a2:60:01:cc:41:
c9:a7:82:29:3c:e1:ec:e0:a0:ae:c6:81:c8:1d:f9:
a6:51:c4:e1:3d:b2:77:ec:50:ac:2c:42:01:76:27:
fd:85:1e:53:3f:27:a6:a5:06:72:e7:01:9c:27:19:
d5:26:05:4e:fd:c0:25:60:ce:0c:26:f6:c2:e8:03:
c5:3c:1d:64:99:04:ca:30:88:21:19:15:c2:08:d5:
6f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DA:FC:64:1C:2D:28:62:8A:04:9D:2D:44:BD:B4:19:54:73:BD:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e6e53b7-59a6-318d-893a-c3f625ca1bc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
148.55.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:f7:93:86:69:d3:78:27:20:48:5b:e8:93:fd:a4:ef:28:85:
45:09:18:f5:e3:0a:d1:56:77:6f:a0:c9:b4:90:be:e8:7c:3e:
2c:67:55:bf:2a:25:a4:c5:93:98:37:bc:d5:44:80:39:ba:6b:
de:82:ee:2b:31:87:b7:c9:87:dc:89:99:ad:45:75:cf:de:91:
15:d0:ec:bb:13:8c:1a:1b:50:6b:ea:16:b5:5f:b2:87:49:a1:
4a:4b:5f:d8:06:e1:5b:90:a1:d1:5c:6e:ed:11:f0:05:6a:ae:
1c:1f:81:0e:40:3c:19:4d:c7:85:d9:f5:4d:e2:01:5f:2b:b9:
42:c0:46:c8:b0:59:42:41:c1:71:d0:e1:2d:b2:12:96:47:eb:
c8:84:3a:8d:c0:34:3f:5f:1e:1f:28:5d:34:40:6e:34:67:e4:
02:3e:e4:f5:d2:d8:84:ad:7f:d1:1a:3b:cd:d8:ff:8a:21:cb:
b4:1f:74:13:26:bc:4d:00:28:a6:55:89:f6:14:ee:40:92:05:
f0:1a:3d:c0:6a:17:27:30:36:2b:c3:d7:11:8f:64:66:9a:38:
f5:b3:4a:07:5c:ed:35:bb:fa:8b:d4:6e:23:cb:74:75:67:31:
59:d6:e2:e0:25:9e:3e:ab:28:ff:98:b4:ed:7c:94:81:37:86:
57:7f:d6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:04:50 2025 by rpki-client