Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7710a32-30f3-3dfd-9c6f-d5ae6e3d0cdb.roa
File: d7710a32-30f3-3dfd-9c6f-d5ae6e3d0cdb.roa (raw, json)
Hash identifier: ul+S5LUzC2QaXOfGBTxNNwnlSB2AHdQcjuTD/rhCozE=
Subject key identifier: 8D:8D:BC:E5:44:A4:7E:CC:70:A1:98:21:F3:0E:63:ED:6B:10:43:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E8A2FCFB2FAD4B89962783EB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7710a32-30f3-3dfd-9c6f-d5ae6e3d0cdb.roa
Signing time: Mon 11 Jul 2022 12:00:00 +0000
ROA not before: Mon 11 Jul 2022 12:00:00 +0000
ROA not after: Tue 16 Aug 2022 04:00:00 +0000
asID: 701
IP address blocks: 155.146.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8a:2f:cf:b2:fa:d4:b8:99:62:78:3e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 11 12:00:00 2022 GMT
Not After : Aug 16 04:00:00 2022 GMT
Subject: CN=5b7256fb-c0e8-40cf-8a75-94aa77ccf913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:10:34:62:6a:44:a3:24:15:e2:f2:33:d1:3b:
20:b9:d3:6c:d2:94:e8:17:87:02:bb:54:00:d5:30:
a4:7a:b7:df:37:13:21:4d:5e:d0:02:d2:7c:4b:f3:
9d:f2:ec:db:c6:d2:d6:b9:d1:38:b7:5d:20:54:e6:
8d:e3:84:8b:66:b3:e5:7b:52:16:e7:16:1a:ba:aa:
50:07:2d:c6:e2:bc:e6:c4:ca:45:1f:0e:8f:4f:99:
ef:9b:d4:bf:f3:1b:14:a3:ce:f7:6d:6a:d1:0a:cd:
ff:28:40:5b:d4:dc:81:3b:14:78:5e:5a:9a:2e:ad:
6c:da:0c:1f:07:76:c7:71:be:02:72:73:d0:0e:06:
69:a8:bc:76:ab:33:56:41:5c:66:f6:06:3d:07:aa:
e8:4c:36:40:2b:fe:67:bd:07:48:c4:c3:22:01:f9:
f0:10:c3:f9:22:4a:dd:3c:3a:c4:a8:4b:11:76:17:
b7:52:61:c9:76:d1:7f:25:5e:d1:bf:46:a7:d1:97:
f0:47:87:4e:4c:09:e9:e1:74:7e:ef:5c:d5:fb:17:
eb:1a:75:4c:3f:a9:8b:39:b5:78:9a:99:61:b9:46:
1a:83:ad:fd:36:c8:b9:7f:28:0a:6c:cd:2c:61:13:
35:67:6a:35:e4:0e:20:98:cd:cb:01:2a:37:6e:f4:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8D:BC:E5:44:A4:7E:CC:70:A1:98:21:F3:0E:63:ED:6B:10:43:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7710a32-30f3-3dfd-9c6f-d5ae6e3d0cdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:2b:90:d5:c7:c8:cd:fd:10:43:7c:03:b1:93:0b:78:c7:7b:
1b:28:f9:cf:7b:12:d0:f8:b0:d2:05:4b:80:a1:c7:e7:3b:37:
f7:e8:02:cf:fa:33:41:7e:e0:b1:cb:89:ec:71:c4:97:da:a8:
a8:c3:22:4a:d7:d9:36:e1:b7:ae:66:ca:85:3d:12:ce:61:2b:
e2:ec:d8:24:62:c5:b3:3c:81:69:d3:7b:8c:7a:08:e6:bc:5d:
40:d1:6d:17:94:45:3b:14:1b:65:a3:98:68:bb:82:ed:05:ae:
c0:fb:43:b5:9c:4c:4c:b5:bb:5a:23:16:eb:aa:26:19:07:26:
58:ad:07:fb:07:e0:26:d1:7d:9c:46:56:dd:6d:54:03:4b:92:
2c:15:04:f6:4d:e8:86:70:dc:33:c3:71:4e:4f:de:a2:50:8d:
57:38:c5:b0:8e:dc:f0:b7:07:b5:e9:74:80:da:3a:45:6c:2a:
2c:cd:81:6b:10:54:ed:e9:cf:b8:3a:99:83:0e:a7:81:3e:fb:
02:64:76:5a:34:5f:56:06:21:32:eb:4b:13:d5:12:e8:23:ea:
ba:47:ad:80:bf:21:11:2b:22:69:61:c9:e8:b5:57:a7:13:3a:
f4:c0:78:23:d5:04:88:ad:57:cb:b9:5e:53:d0:9d:ca:35:0e:
df:97:af:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6KL8+y+tS4mWJ4PrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxMTEyMDAwMFoXDTIyMDgxNjA0MDAwMFowLzEtMCsGA1UEAxMk
NWI3MjU2ZmItYzBlOC00MGNmLThhNzUtOTRhYTc3Y2NmOTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hA0YmpEoyQV4vIz0TsgudNs0pToF4cCu1QA
1TCkerffNxMhTV7QAtJ8S/Od8uzbxtLWudE4t10gVOaN44SLZrPle1IW5xYauqpQ
By3G4rzmxMpFHw6PT5nvm9S/8xsUo873bWrRCs3/KEBb1NyBOxR4XlqaLq1s2gwf
B3bHcb4CcnPQDgZpqLx2qzNWQVxm9gY9B6roTDZAK/5nvQdIxMMiAfnwEMP5Ikrd
PDrEqEsRdhe3UmHJdtF/JV7Rv0an0ZfwR4dOTAnp4XR+71zV+xfrGnVMP6mLObV4
mplhuUYag639Nsi5fygKbM0sYRM1Z2o15A4gmM3LASo3bvTWkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI2NvOVEpH7McKGYIfMOY+1rEENBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZDc3MTBhMzItMzBmMy0z
ZGZkLTljNmYtZDVhZTZlM2QwY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEm5IAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsrkNXHyM39EEN8A7GTC3jHexso+c97EtD4sNIFS4Chx+c7N/foAs/6
M0F+4LHLiexxxJfaqKjDIkrX2Tbht65myoU9Es5hK+Ls2CRixbM8gWnTe4x6COa8
XUDRbReURTsUG2WjmGi7gu0FrsD7Q7WcTEy1u1ojFuuqJhkHJlitB/sH4CbRfZxG
Vt1tVANLkiwVBPZN6IZw3DPDcU5P3qJQjVc4xbCO3PC3B7XpdIDaOkVsKizNgWsQ
VO3pz7g6mYMOp4E++wJkdlo0X1YGITLrSxPVEugj6rpHrYC/IRErImlhyei1V6cT
OvTAeCPVBIitV8u5XlPQnco1Dt+Xr+w=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:35 2025 by rpki-client