Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be44a499-276d-36a7-9c29-45bf844f74d7.roa
File: be44a499-276d-36a7-9c29-45bf844f74d7.roa (raw, json)
Hash identifier: bTV0qajHi3xp2BUCWsPbgE5CoAzfl7v1P6y+XcCEQ2E=
Subject key identifier: 5B:7F:D1:D4:9B:37:6C:3D:DE:31:44:05:6F:9B:70:13:E7:38:F8:DC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C80BE24F6B1DF82C5692A4BD8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be44a499-276d-36a7-9c29-45bf844f74d7.roa
Signing time: Thu 06 Jan 2022 05:00:00 +0000
ROA not before: Thu 06 Jan 2022 05:00:00 +0000
ROA not after: Thu 10 Feb 2022 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:80:be:24:f6:b1:df:82:c5:69:2a:4b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 6 05:00:00 2022 GMT
Not After : Feb 10 05:00:00 2022 GMT
Subject: CN=d931c4b8-38f2-42d1-b4e7-7ccaa7a15d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:a5:f0:86:3f:9f:1b:64:c8:8d:d1:f2:dd:
a6:c7:b1:d6:5a:e4:58:c2:b9:5e:ac:6a:2d:dc:d2:
23:94:c5:bc:19:1a:b2:2b:a0:35:a9:73:33:d6:fa:
31:2f:55:63:f5:09:6a:e7:54:d0:9e:5c:fa:c4:a9:
6a:04:d5:16:58:ca:f5:8e:b5:81:22:4a:5c:f7:5b:
91:84:d3:49:09:db:55:7c:e6:20:36:24:40:a4:9a:
e0:f9:f5:9e:9e:27:45:c3:b8:f2:b9:6b:73:59:a9:
38:55:5a:10:31:4d:b5:36:94:12:e1:35:d3:d0:fb:
40:46:e1:08:cf:52:b3:55:94:30:4b:6b:d6:bd:2f:
3c:42:c7:76:2c:0c:f4:52:1c:fb:f8:02:57:81:42:
0a:b6:61:3b:04:98:69:fc:61:01:f1:3e:41:89:31:
0b:d3:f9:09:a7:db:94:6a:55:d6:7d:7d:cc:33:6a:
08:38:70:e3:01:3c:a5:00:6c:15:24:80:c3:0c:8c:
6d:7c:7a:b9:40:ce:ec:3f:5f:ce:2e:c6:b6:f4:67:
97:81:56:e8:39:1b:8b:62:f4:3d:23:dc:0b:ed:b8:
f4:c9:48:5b:9a:94:6c:be:9d:9b:dd:58:b4:94:c8:
73:9e:f7:b4:ba:ab:48:ab:57:d1:c9:7c:f3:60:a7:
76:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:D1:D4:9B:37:6C:3D:DE:31:44:05:6F:9B:70:13:E7:38:F8:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be44a499-276d-36a7-9c29-45bf844f74d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:b3:81:89:0f:3b:7f:46:06:b8:ec:1b:a9:d3:97:c5:c3:74:
6e:85:a1:21:f9:66:ed:8e:a7:ac:e3:39:65:b9:29:95:5a:2e:
43:c1:12:eb:50:f4:21:87:db:4c:38:66:97:31:7e:41:be:02:
c2:22:61:68:c1:b2:99:56:07:f2:d6:bb:f3:7d:42:cf:ee:1c:
f3:7e:05:fc:13:ae:1a:b6:b3:5f:1e:56:38:a3:ee:f5:8f:5e:
21:68:64:1d:ba:54:e7:1f:4c:c2:ea:e7:06:ee:74:a6:9b:ea:
cd:4a:e0:bb:d4:16:39:4f:05:ac:e6:d1:8f:14:d9:96:7b:66:
73:f3:8e:85:48:6d:e1:db:7d:5d:a7:15:79:8c:1a:7d:4f:a9:
48:b0:79:68:d7:f2:73:84:32:ba:40:20:ee:a6:52:86:cb:32:
2c:93:f9:b5:f4:78:53:dc:98:2d:50:e5:8c:07:53:59:40:9b:
5d:40:87:74:b0:d1:f2:1b:0b:57:c8:61:f5:d6:04:4c:36:2f:
a9:a9:81:8e:1e:9f:a4:09:d7:f8:69:6e:2b:92:63:b2:8f:6d:
17:ff:af:a6:32:de:6b:c7:67:12:7b:af:9e:af:ff:dc:54:d9:
3e:46:ee:29:99:79:bb:e1:6a:3a:a7:b5:00:ea:9c:35:95:08:
d0:77:c4:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:54:57 2025 by rpki-client