Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb2f47e1-960a-3e95-a279-ccb3493906d1.roa
File: fb2f47e1-960a-3e95-a279-ccb3493906d1.roa (raw, json)
Hash identifier: WAJ/T0/P8EXkMnOzXmjhQlBixvPS1ahRBNcGV4oAa5E=
Subject key identifier: B6:15:13:4C:42:41:A0:5D:B3:4D:CA:B0:56:34:88:F9:AB:08:71:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD334271635BD1470261B4800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb2f47e1-960a-3e95-a279-ccb3493906d1.roa
Signing time: Sun 06 Nov 2022 12:00:00 +0000
ROA not before: Sun 06 Nov 2022 12:00:00 +0000
ROA not after: Mon 12 Dec 2022 05:00:00 +0000
asID: 6167
IP address blocks: 155.146.0.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d3:34:27:16:35:bd:14:70:26:1b:48:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 6 12:00:00 2022 GMT
Not After : Dec 12 05:00:00 2022 GMT
Subject: CN=96fc83d3-9afd-474b-b13f-270c0f5786a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ca:ea:0f:4f:d6:bd:4b:24:25:1d:8a:2d:fb:
2f:92:bd:95:a9:91:d5:6c:a6:f3:9f:7f:29:4e:de:
90:00:f3:9d:81:7e:b2:f8:41:30:6f:b3:4e:12:4e:
fe:b2:ed:8b:6c:41:6a:97:7c:19:92:6f:b5:56:91:
14:e2:ad:5b:3b:5e:e3:71:4d:27:4e:04:48:e8:a0:
e0:57:20:ff:cc:b6:02:55:7f:0c:cd:0f:18:e2:88:
94:13:b8:54:75:bb:0b:87:c0:28:3c:bb:6a:2a:14:
06:e9:a9:df:7f:14:ea:64:28:cd:e1:8e:f9:18:e6:
a3:75:39:30:11:fb:6a:59:79:43:44:de:55:3d:68:
85:cf:a9:06:40:89:9d:a8:f5:e4:09:f5:c4:1e:8b:
6a:1f:05:36:db:4f:98:17:95:7c:1a:9e:b6:77:38:
f3:1f:93:ee:e9:10:49:05:49:71:c2:ee:80:8f:2c:
fa:cc:28:8f:e7:89:43:0a:ea:99:8b:d2:ab:ea:39:
e4:8a:44:e1:e6:15:d4:2a:26:92:8f:b6:df:4b:c0:
16:8d:37:6e:2d:10:0e:d3:47:81:ec:b6:bf:f3:7d:
c7:6e:e1:a0:1c:52:52:42:e3:9a:89:5e:b4:e7:86:
81:0b:19:4b:74:40:5a:cd:92:9f:df:70:b3:d9:fa:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:15:13:4C:42:41:A0:5D:B3:4D:CA:B0:56:34:88:F9:AB:08:71:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb2f47e1-960a-3e95-a279-ccb3493906d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.0.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:4f:f1:38:46:a9:fb:c5:2a:3e:bb:cd:49:9a:bd:78:89:8d:
92:da:19:00:4c:4a:25:bf:f8:8e:cf:a3:fe:f1:90:63:f7:74:
ab:95:62:69:bc:af:9e:d0:9a:b3:18:0f:0d:f4:59:4c:60:01:
8c:d3:b3:b0:4d:3d:18:fe:14:ca:d9:c8:90:c0:9f:81:df:5a:
bf:68:ba:50:79:28:82:7b:ff:bb:6d:45:d9:de:63:68:62:f4:
8e:2f:ac:a3:0d:20:39:90:8c:73:a6:ba:79:74:c7:83:30:7d:
c3:b3:3c:f2:d7:9d:f1:2c:18:93:ba:06:cb:04:3f:95:0d:9c:
50:ff:22:58:16:1f:52:f5:3d:a3:ec:99:7f:94:cc:c0:9b:31:
ad:30:5d:9d:8e:98:a0:d7:91:b7:07:c0:e2:46:0f:c5:00:1b:
f6:01:dd:ed:34:d4:23:55:df:ac:fd:07:9e:96:d7:8d:a9:b1:
33:33:c2:b6:50:86:0e:b3:a3:26:00:eb:b0:f5:5b:23:73:aa:
68:ff:4e:a5:61:2e:36:79:4f:9e:e2:5d:b2:82:82:96:6b:e9:
6a:85:8d:0f:5e:6e:c6:75:09:76:d4:c5:6a:a8:5c:36:64:f4:
d2:06:47:8f:4d:f0:36:e6:6d:a3:0c:a3:21:31:68:60:13:7e:
81:b7:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:17:40 2025 by rpki-client