Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2a93118-24fa-3fab-809a-fcebb3014c65.roa
File: a2a93118-24fa-3fab-809a-fcebb3014c65.roa (raw, json)
Hash identifier: 4Fz9ZtZuAEVvB7NdKFUWMHPGGm/oK6vNklrRy6P0f2A=
Subject key identifier: 43:DE:10:62:75:79:78:48:B3:9A:B5:B0:3B:2E:E0:B8:60:4E:17:7E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405FC011E080981B96E7221180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2a93118-24fa-3fab-809a-fcebb3014c65.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:c0:11:e0:80:98:1b:96:e7:22:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=8d37a6c2-424c-47bd-bdad-3b93bfe68d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:99:e2:8a:b1:b4:16:7e:59:59:1b:16:e5:
00:57:f2:6a:97:65:b5:58:6b:10:f5:68:9a:ca:b7:
18:20:93:9d:89:b9:d1:0f:55:97:ec:b3:b2:53:fc:
fe:2a:d2:56:d2:b7:e3:ac:92:4d:92:d8:49:18:ec:
0a:e4:71:47:6d:d7:87:ff:23:27:c1:97:50:63:bd:
2d:49:73:ae:f7:65:1d:68:e9:c9:03:9c:70:85:6b:
be:49:f7:bb:0b:c8:9b:99:04:57:f2:63:25:52:fe:
52:ff:2f:91:4c:bc:7f:b1:6f:26:9c:74:5b:5d:b6:
fb:b6:81:58:59:fa:aa:cd:44:42:f3:7d:80:44:47:
a4:96:a4:65:09:9d:ad:84:1b:57:34:27:b2:8c:07:
86:fb:bf:85:5c:bc:04:fb:44:9f:f9:11:ed:18:51:
d5:73:bb:da:54:dc:56:67:92:46:5d:09:ee:b4:bb:
e5:e2:fe:f1:99:59:7c:03:f2:80:58:53:c6:b2:e3:
d7:55:66:78:11:ab:f0:cb:b4:06:cf:01:c8:e8:05:
6f:b7:d3:38:c2:0c:61:22:ab:2d:82:b7:31:bc:16:
01:b1:20:b9:97:2b:20:c1:26:ea:da:31:1d:96:d1:
d2:75:a7:e0:70:b9:6e:14:b3:92:6c:c8:44:06:9d:
95:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DE:10:62:75:79:78:48:B3:9A:B5:B0:3B:2E:E0:B8:60:4E:17:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2a93118-24fa-3fab-809a-fcebb3014c65.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:ad:67:25:dd:41:89:65:8e:d3:aa:ab:9e:57:ee:68:a5:a9:
0c:26:7a:d1:b0:a8:a4:a4:86:8e:5a:69:3e:4b:28:cb:73:25:
e6:53:d3:b8:9e:f0:c2:1b:6a:ff:e7:d0:4a:41:b9:f0:4f:00:
05:d4:1a:14:24:cf:a6:61:9c:14:8b:29:4d:d1:ac:ea:88:90:
9c:4a:dd:66:2d:15:a3:5e:ca:4d:17:14:a5:32:15:f8:ce:f4:
89:ca:f2:a0:ed:f7:26:c3:80:8b:1a:7f:85:36:e6:f2:e3:ee:
e4:8f:7b:2d:69:8b:1d:ff:f8:e4:99:70:ed:49:97:2a:6f:20:
4d:20:99:a6:43:f2:f3:03:d1:ea:50:9f:9a:5c:e9:25:bb:ac:
51:92:57:1c:e2:b3:f6:62:24:34:8b:86:17:36:8d:26:b5:63:
82:d7:df:a8:db:72:fb:d0:72:eb:ea:23:26:83:82:09:0e:55:
22:da:4e:76:5d:c5:aa:0e:47:23:34:09:59:9e:78:e4:30:bc:
4b:a1:1e:2f:c1:9f:33:d0:91:eb:24:63:46:d4:dc:c7:7e:6f:
22:0a:4e:cf:f4:eb:10:77:10:26:3b:aa:b5:85:ad:c6:5a:af:
09:25:04:ad:80:0b:8f:5c:ea:52:69:de:41:5d:0e:b9:49:14:
bc:01:8c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:49:43 2025 by rpki-client