Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7e9be9d-e589-3640-b040-924ec201f788.roa
File: b7e9be9d-e589-3640-b040-924ec201f788.roa (raw, json)
Hash identifier: fwmCCs/4den9UrU9LGhxhKoZE/4foitbYfQSy2TH+jQ=
Subject key identifier: D3:3F:BC:56:61:90:E0:91:95:64:71:9E:91:A4:C1:80:E6:DC:96:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E149D040C8BC344B6BE75DE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7e9be9d-e589-3640-b040-924ec201f788.roa
Signing time: Mon 30 May 2022 12:00:00 +0000
ROA not before: Mon 30 May 2022 12:00:00 +0000
ROA not after: Tue 05 Jul 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:14:9d:04:0c:8b:c3:44:b6:be:75:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 30 12:00:00 2022 GMT
Not After : Jul 5 04:00:00 2022 GMT
Subject: CN=c080ea1a-8948-4358-b36a-b6883edc2236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:53:d9:2f:91:38:9a:fa:36:97:63:8c:3b:5c:
bc:3f:c1:92:1b:df:31:47:2b:5b:ff:81:ed:f0:17:
ff:a0:93:a9:ff:00:e6:ca:93:6a:33:f0:df:3d:05:
14:a4:33:81:af:e7:8e:62:09:9d:3e:2b:d9:8a:45:
24:e0:fc:b7:b0:5e:f5:65:ab:46:5f:23:de:4c:bf:
a9:a5:bc:f0:ba:fc:c5:37:9f:31:b4:a3:c1:29:00:
10:60:c7:52:61:b5:0b:01:47:16:aa:f7:ef:90:d3:
b8:b4:bd:11:62:48:52:76:eb:42:75:0e:9e:2d:f6:
7d:e4:61:6d:9a:a2:0e:b0:46:07:5c:52:a0:79:04:
d8:4a:7e:59:ec:cd:b1:0c:82:9a:d7:dc:10:7a:54:
73:1a:f8:6b:b6:35:84:33:5a:a6:75:b9:8a:0c:53:
81:b9:02:76:de:cd:fb:36:85:ab:60:96:f1:9a:50:
1e:34:d5:33:ba:c2:22:08:7a:2f:2b:65:6d:f6:b4:
aa:ce:1e:da:c8:b0:fe:9e:12:fe:d5:d1:6b:c4:eb:
21:d4:b0:41:80:f7:bb:19:c7:93:3f:a9:a0:ba:ae:
38:a3:d2:f9:94:96:10:72:f6:e3:a9:30:93:0e:b6:
b0:ce:60:e1:30:af:71:b4:82:a1:88:64:77:1f:dd:
04:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3F:BC:56:61:90:E0:91:95:64:71:9E:91:A4:C1:80:E6:DC:96:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b7e9be9d-e589-3640-b040-924ec201f788.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:a8:06:4b:0c:95:6b:8f:99:e2:1f:8a:28:ea:13:fa:86:92:
fd:f0:ac:f2:24:91:79:9c:1a:d3:17:49:1d:a7:a7:13:bc:90:
6e:44:28:6e:d3:d7:3e:5e:f1:5e:f9:c0:a9:d6:e0:a3:37:7c:
48:77:94:67:e0:54:6a:e8:d3:b9:22:6a:95:ab:1e:d2:f8:d4:
80:81:ab:51:18:34:d5:3f:62:38:00:e1:5e:fc:11:a9:4c:90:
eb:2c:f0:f1:b2:4b:53:53:30:9d:50:a9:30:52:8e:37:73:1a:
cf:92:4f:7c:1c:bb:97:74:1b:f1:24:a2:23:04:ac:be:02:54:
36:52:55:b8:95:a6:52:49:74:60:66:13:fe:a6:a5:95:d0:1c:
68:c8:0a:d7:75:43:16:98:2a:46:e8:89:c8:61:ef:38:0e:c2:
8b:80:9a:fa:79:07:07:f3:f3:ee:c2:1b:b2:7d:90:0b:88:9c:
1e:1d:6f:21:0a:08:7d:e1:5e:e1:41:ec:7c:98:c2:d6:00:85:
11:86:85:8b:f8:71:e6:74:f5:68:f0:b5:b1:96:2b:93:f5:c9:
30:ad:d7:15:28:3a:cd:6c:ec:02:14:56:5f:06:38:48:09:de:
ec:99:5f:41:95:8a:25:56:f0:f1:bc:f2:c3:96:5b:32:ae:41:
e7:ec:a9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:43:59 2025 by rpki-client