Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dad57d3a-4505-3162-967e-ab9f564b8b07.roa
File: dad57d3a-4505-3162-967e-ab9f564b8b07.roa (raw, json)
Hash identifier: 4fe8vIF9nh/MVJ1LlWlcb9Kwp/6aIec+7zBHn+hTw+Q=
Subject key identifier: D5:4B:65:1C:6B:CA:CC:27:2B:13:5E:F0:10:C1:B0:F6:B1:6E:95:9A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB490A4755E254A14544C1E20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dad57d3a-4505-3162-967e-ab9f564b8b07.roa
Signing time: Tue 25 Jan 2022 05:00:00 +0000
ROA not before: Tue 25 Jan 2022 05:00:00 +0000
ROA not after: Tue 01 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 155.146.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b4:90:a4:75:5e:25:4a:14:54:4c:1e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 25 05:00:00 2022 GMT
Not After : Mar 1 05:00:00 2022 GMT
Subject: CN=ee898a74-c1e6-4068-b008-af044e9b6e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:30:dc:c9:a0:1e:cd:1c:12:dd:84:0c:eb:38:
db:e9:c5:2a:78:e9:55:3b:1a:8f:29:b9:46:fe:d2:
8f:5d:88:9a:a0:6e:bd:4a:fc:a8:5e:30:65:db:70:
eb:a7:1e:86:0c:51:27:57:36:57:77:92:89:38:8f:
9e:fd:31:64:0a:e0:b2:84:6a:d5:72:00:0c:27:87:
dd:4f:5a:76:05:33:06:e4:5f:da:21:13:70:89:70:
fd:0a:0c:4d:9b:bb:aa:50:47:ab:b7:aa:0e:9c:00:
64:97:0b:bd:9e:41:6e:67:d5:16:d4:50:b0:0d:87:
82:4d:6b:19:dd:a8:30:14:ae:0e:17:37:99:9b:38:
c9:94:44:65:70:a3:6a:6e:9e:c5:ed:63:7f:bf:cb:
e6:a9:bc:d3:61:b2:34:3d:d5:86:4b:f1:56:29:90:
6d:46:8b:76:58:e5:c9:23:c6:cb:11:5b:68:e3:82:
ac:f5:60:da:d3:cc:27:71:a9:dc:28:9e:3c:5f:7e:
38:17:20:ee:c6:38:06:3c:b2:9d:88:e2:fb:ba:2a:
de:b9:45:9a:d8:fa:84:c4:2a:80:2d:74:ac:de:e0:
e9:4b:a7:f5:b6:7c:ab:0e:8d:e4:09:c3:62:c4:59:
a2:70:45:5f:cf:67:92:c8:a6:f9:30:a6:22:b7:9b:
00:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4B:65:1C:6B:CA:CC:27:2B:13:5E:F0:10:C1:B0:F6:B1:6E:95:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dad57d3a-4505-3162-967e-ab9f564b8b07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:eb:23:60:0c:8b:3f:95:6c:e7:67:63:a6:1c:37:3c:e5:4a:
c0:4d:e9:b9:d7:08:68:87:98:43:5d:86:e2:7a:10:c5:4d:65:
c3:5a:9a:9a:dd:4b:4c:1b:24:7e:ac:5e:8c:8d:7d:de:1e:82:
73:19:c5:4e:76:32:4e:79:12:79:8f:61:05:70:1d:fe:fd:15:
ea:77:9b:77:c6:48:77:22:0d:e3:97:72:8a:ab:c4:6f:fe:0f:
8a:d3:c4:50:9a:77:47:dd:2e:ce:dd:ad:f9:28:65:46:7c:80:
99:2b:75:f4:70:f6:9e:5b:8f:6a:ae:5c:92:db:c1:aa:6b:aa:
dd:99:83:3b:ea:ea:67:b2:10:b8:34:49:4b:b5:a5:f9:25:0f:
6d:18:25:dc:db:04:cf:0c:2f:34:02:e0:ce:0e:07:a6:90:c0:
96:56:14:f2:1b:49:b2:03:1a:35:df:57:b7:ec:22:e1:f6:90:
cd:ef:70:f8:70:eb:9e:01:aa:05:db:5b:4e:8b:10:5a:e0:c1:
10:41:e9:d6:6a:a5:73:3b:fc:a9:b6:ce:71:b8:37:c2:7b:f0:
d0:28:7f:ad:5a:e4:5b:86:9d:8e:22:b9:12:c7:8e:ab:72:b7:
d6:40:52:f7:52:a0:de:7b:86:10:9a:bb:68:14:2c:15:ff:0e:
f3:a5:ad:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:00 2025 by rpki-client