Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebf95875-3eed-35a2-bae7-d036240e168f.roa
File: ebf95875-3eed-35a2-bae7-d036240e168f.roa (raw, json)
Hash identifier: O0AvWG4if2XESjkIsqPpAlU7o+UJGiPTW1Cz4YMOwIM=
Subject key identifier: 9D:80:E9:72:CA:37:E9:ED:EA:3F:69:F3:42:A4:CF:21:2E:C9:1D:33
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583ED8623BF46D1A14858868C42B
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebf95875-3eed-35a2-bae7-d036240e168f.roa
Signing time: Mon 08 Aug 2022 12:00:00 +0000
ROA not before: Mon 08 Aug 2022 12:00:00 +0000
ROA not after: Tue 13 Sep 2022 04:00:00 +0000
asID: 6167
IP address blocks: 155.146.64.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:d8:62:3b:f4:6d:1a:14:85:88:68:c4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 8 12:00:00 2022 GMT
Not After : Sep 13 04:00:00 2022 GMT
Subject: CN=efb8a09d-3d03-43d6-95b4-3ca4f2817a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:a7:a8:99:d8:14:a1:80:71:4c:2a:21:b3:
03:61:22:24:4e:35:65:f7:e2:19:7a:3f:76:54:59:
66:32:b0:8a:fa:26:6f:79:25:a9:0e:a9:04:8a:9b:
fc:7c:9c:d9:d6:d5:79:e4:05:d5:10:a9:29:e2:98:
ef:0c:42:a8:8d:d3:61:7f:68:3e:30:c3:80:d9:7d:
34:8d:00:4c:e6:20:35:94:77:ae:1f:19:a1:8e:e9:
8a:67:cc:3b:c8:0c:f9:82:b6:95:54:eb:da:fc:ac:
d4:2a:5f:d9:66:5b:99:7d:91:2f:9d:52:98:59:95:
60:4b:08:ca:b8:31:44:db:e1:5c:e9:08:ee:20:e7:
90:0e:35:ec:48:f3:1a:5b:7a:78:d0:d1:92:11:48:
8b:01:d3:fc:e2:d7:0f:3b:55:73:89:7b:b4:fc:dd:
8a:4c:28:3c:eb:27:8f:52:f3:15:1f:5e:f0:00:d5:
4b:2e:d2:ee:03:8b:53:2d:f0:4b:97:00:ac:bc:a7:
90:92:ac:b0:16:76:ca:bd:7b:98:ae:39:46:49:9e:
96:c1:3e:13:c7:58:a3:2f:52:c5:cf:a9:11:f2:89:
c8:5d:5e:66:57:88:6e:c2:2b:8c:c7:f3:61:42:df:
36:ee:7b:9c:34:8d:b9:09:13:a2:25:1d:b2:24:a4:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:E9:72:CA:37:E9:ED:EA:3F:69:F3:42:A4:CF:21:2E:C9:1D:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ebf95875-3eed-35a2-bae7-d036240e168f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:88:56:9f:76:88:6b:b3:95:45:15:1d:5c:94:e8:66:40:87:
72:e1:cb:9b:d5:ee:23:24:39:a3:ba:e3:5a:fc:f9:00:4d:ad:
4a:c6:2d:63:7f:a4:0e:4c:ee:ad:25:83:fb:fd:54:97:fe:f5:
ea:3c:f0:ba:44:d7:ea:48:91:58:0a:73:73:2e:a3:2c:fe:06:
10:f4:c4:5d:7f:36:06:dd:05:60:22:09:ee:c3:3f:fb:3f:8b:
98:ce:0b:3c:6f:23:d3:cb:e4:73:2a:06:3c:30:27:90:89:3a:
5f:23:5f:ba:f5:2e:ce:0d:3f:6d:73:4a:08:15:a3:7f:cd:35:
57:c3:34:0b:9c:6b:bc:11:eb:9a:71:4e:74:6f:c3:32:2e:5e:
6d:01:cc:d7:24:9e:7e:6c:7f:b4:b7:63:37:62:e3:25:98:16:
e4:c8:de:96:16:dc:1e:08:35:4d:78:ba:17:07:83:7e:01:d0:
41:5c:77:44:d5:54:66:ec:03:07:bb:4d:90:c3:b9:dd:69:ea:
85:55:9e:57:9f:91:a9:be:1a:60:f7:7a:a5:23:76:55:19:37:
44:35:14:95:c1:98:e7:b8:5e:78:76:74:c0:28:c9:b1:ce:69:
54:c9:4d:17:1e:e6:d5:cf:33:3f:45:04:cc:9c:2b:58:86:4f:
92:9a:f7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:55:50 2025 by rpki-client