Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc9b13a5-3dfe-3600-a9b0-45128589054b.roa
File: dc9b13a5-3dfe-3600-a9b0-45128589054b.roa (raw, json)
Hash identifier: Msk8YGCjyj0QIVi+LNDOhhqXDMvxUQW1lhac2Ea9hgs=
Subject key identifier: 42:D1:8B:23:3B:AE:69:30:1B:6F:39:02:DA:14:95:0B:AD:3C:DE:DE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D444FC096DF1B5BE1B2D22000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc9b13a5-3dfe-3600-a9b0-45128589054b.roa
Signing time: Thu 17 Mar 2022 04:00:00 +0000
ROA not before: Thu 17 Mar 2022 04:00:00 +0000
ROA not after: Thu 21 Apr 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.80.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:44:4f:c0:96:df:1b:5b:e1:b2:d2:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 17 04:00:00 2022 GMT
Not After : Apr 21 04:00:00 2022 GMT
Subject: CN=3a350808-931f-46d8-bdce-1ca49de0ce19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fb:d8:c6:fd:88:79:ca:e0:5d:1d:f1:89:19:
bd:6f:15:1c:0a:66:95:3a:89:f3:6e:7e:48:72:7b:
1c:81:12:77:fa:31:e1:b2:d5:ea:ab:c9:cc:66:b1:
a7:a4:b7:56:92:cb:4c:c7:63:bf:f6:d4:85:22:29:
93:aa:d8:dc:3c:87:a3:ab:96:09:93:24:df:a4:0b:
b0:02:c8:fd:d2:f1:d5:39:37:35:b8:bb:ab:2c:f8:
ec:6f:c6:04:4f:c0:6d:cc:c2:15:b8:c2:21:4b:c2:
70:c8:7c:1e:3b:52:0f:7d:d8:29:a6:a3:90:92:6e:
9e:96:6c:dc:bd:e2:07:5c:d3:44:6e:de:f6:1a:4f:
29:bd:1b:a6:77:98:38:3a:83:4d:b8:5b:a5:c4:aa:
1d:19:bb:ed:32:65:f0:50:6b:05:8a:28:ed:f2:9c:
9c:66:1e:6f:a7:cb:fa:48:1c:fb:cb:ee:e3:86:bc:
ee:42:25:06:96:a7:7c:3d:72:b7:90:b9:fd:c0:13:
f4:ab:5a:7a:e9:a3:b7:cc:39:82:e0:da:c9:8d:f8:
4d:9b:bd:5f:b5:a0:1a:ca:33:31:91:87:6f:91:9d:
fe:91:e0:3b:2c:e4:29:f5:b8:12:0d:96:58:6e:3d:
b7:39:21:3d:e3:c9:73:41:48:b5:d6:53:5e:fc:3e:
2a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D1:8B:23:3B:AE:69:30:1B:6F:39:02:DA:14:95:0B:AD:3C:DE:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc9b13a5-3dfe-3600-a9b0-45128589054b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.80.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:0e:54:e2:9c:df:c7:86:6e:76:80:59:82:5a:d6:8f:0b:61:
8b:5e:31:4d:2d:15:fb:05:23:24:56:94:b7:3e:d0:10:a2:a9:
9f:34:d4:40:6b:1c:c2:66:c5:fa:8a:62:9d:79:b2:00:d2:6a:
c5:3a:78:03:30:11:be:73:05:72:4c:93:3f:04:0d:22:dc:13:
c5:35:d5:cb:4a:cf:d8:5f:ab:0e:a7:a9:7f:49:2e:6e:9a:61:
7a:8a:db:14:72:de:d0:72:c2:5e:c2:65:68:e4:4e:d9:9c:2c:
98:89:0a:3b:b9:ca:23:d5:34:73:41:cb:ac:8a:02:4a:53:f4:
d2:6b:c1:ed:a4:61:b6:9a:dc:81:11:03:ba:6b:f4:15:ee:b6:
d2:a8:17:9c:a1:82:d7:ca:b8:7b:85:35:c8:aa:f2:e2:ec:0f:
cf:1b:11:58:ef:a3:20:87:43:a7:00:42:70:7a:59:70:0e:14:
65:d2:b4:4d:28:fe:3d:8c:dd:5f:c3:4b:45:8b:23:c3:31:52:
d5:ff:29:61:3f:47:2c:2c:62:ea:e9:0f:e9:db:7f:c6:eb:0c:
70:16:ce:fd:4d:54:b6:8b:7d:76:2d:62:ac:42:d6:c5:13:f9:
4b:62:04:84:bb:fa:65:54:83:16:0a:f9:58:ee:65:44:f1:9e:
21:57:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:05:32 2025 by rpki-client