Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4c7c2aa-59b5-3e1a-b4d8-d4d53d7ad410.roa
File: d4c7c2aa-59b5-3e1a-b4d8-d4d53d7ad410.roa (raw, json)
Hash identifier: OMlv3FJ+oRvkRcRzCJeldbjx62462+/fxXnSK38HJEk=
Subject key identifier: 5E:C5:31:04:53:31:1C:95:B0:89:99:9E:62:DE:A2:B6:25:06:AA:FB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5DEBCBA48416105343489200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4c7c2aa-59b5-3e1a-b4d8-d4d53d7ad410.roa
Signing time: Sun 25 Sep 2022 12:00:00 +0000
ROA not before: Sun 25 Sep 2022 12:00:00 +0000
ROA not after: Mon 31 Oct 2022 04:00:00 +0000
asID: 22394
IP address blocks: 155.146.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:5d:eb:cb:a4:84:16:10:53:43:48:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 25 12:00:00 2022 GMT
Not After : Oct 31 04:00:00 2022 GMT
Subject: CN=f95a2ac7-a3a1-4df1-9848-f51bcda4bbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:74:b9:a1:e5:24:2e:b8:b4:d3:e3:75:11:
41:d0:a9:c7:f1:12:8c:fd:b8:74:c0:63:d0:2a:bc:
c8:ab:28:59:11:13:9a:1b:70:ab:24:c7:64:87:4a:
88:56:c9:a6:e1:6c:64:7f:c1:1f:43:1d:cc:32:f7:
e6:f6:ef:65:62:eb:1d:89:4b:3c:bc:4a:08:09:78:
46:05:9f:dc:64:36:be:ff:b6:60:68:24:c2:14:bc:
2f:59:e5:e6:34:ce:a7:e6:1c:9f:ec:6f:42:9c:56:
64:f9:3b:3b:82:cc:a8:e0:15:4b:e1:09:49:21:0d:
99:ce:06:e3:0f:bc:36:4b:d2:f7:b0:47:5d:ce:30:
a0:30:52:73:1f:57:b4:17:ac:59:fb:eb:0a:a7:59:
83:10:b2:e7:1c:2d:07:d5:97:8d:6d:dd:9c:91:2e:
05:a4:8f:c4:87:03:a0:36:ea:d9:1a:1f:4d:06:db:
5d:c3:aa:f3:8f:1e:c0:fd:81:65:83:d7:74:cd:cd:
b4:5e:1c:16:8e:13:16:4a:3a:68:f4:15:21:63:c2:
b7:cc:19:34:9b:1b:ff:e3:b6:6b:27:84:20:70:4d:
3a:da:6a:b7:46:66:d7:79:e3:c6:16:84:1e:44:22:
be:10:84:c5:4e:c5:88:31:03:ed:83:b5:87:d0:dc:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:31:04:53:31:1C:95:B0:89:99:9E:62:DE:A2:B6:25:06:AA:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4c7c2aa-59b5-3e1a-b4d8-d4d53d7ad410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:b6:5b:d2:3f:4f:fd:67:f1:bd:f4:00:5b:43:51:ef:30:b1:
ff:ce:1b:ec:89:ed:d0:af:cd:e9:b5:73:25:09:37:bc:a1:18:
de:df:43:20:1f:7b:13:69:ce:35:4c:da:b6:e4:5e:65:ed:dc:
37:64:ef:40:c6:5c:5c:1c:2c:06:4b:b5:e6:59:63:07:f9:5d:
e9:c9:89:af:72:98:8d:92:fa:09:60:71:d1:e3:86:52:5a:0e:
7b:a6:b5:55:a4:9b:7b:0f:e3:d3:31:04:c8:6f:42:63:da:85:
ea:a6:bd:41:8c:14:8f:ab:21:21:d2:06:f1:c4:22:e9:97:cd:
a9:24:49:39:62:e4:3f:99:15:f2:e1:64:b2:8d:7c:ba:38:a8:
19:d4:7a:26:05:b5:11:6c:47:69:cf:40:6b:f7:b8:ec:43:5e:
21:b9:18:59:59:f0:b2:a7:5d:29:c0:8f:cd:5a:c5:96:e9:d2:
44:f6:dc:0a:80:a6:9f:42:b5:a5:f4:f7:d3:42:de:2e:db:de:
d9:c0:67:ca:4d:12:88:7e:fb:cf:d5:4c:fd:85:0b:61:75:02:
9b:09:92:1f:1d:47:75:74:c4:1a:e9:a8:76:cc:38:fd:41:d8:
82:1b:3d:73:ca:91:f7:9a:1c:75:a2:25:b5:0a:e5:d1:90:cc:
73:f8:6f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:34 2025 by rpki-client