Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb3570ac-5453-3933-ad79-07754f95ac0a.roa
File: fb3570ac-5453-3933-ad79-07754f95ac0a.roa (raw, json)
Hash identifier: kIACQ5vk58upt+ezEYom8OM211p6FBP3wIUVu0/V1DI=
Subject key identifier: AF:88:C7:38:11:89:BF:3E:05:77:6C:A6:3E:5B:7A:0B:B1:42:5C:24
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858405FA2532564ED68ED900EBF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb3570ac-5453-3933-ad79-07754f95ac0a.roa
Signing time: Mon 26 Dec 2022 12:00:00 +0000
ROA not before: Mon 26 Dec 2022 12:00:00 +0000
ROA not after: Tue 31 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 155.146.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:5f:a2:53:25:64:ed:68:ed:90:0e:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 26 12:00:00 2022 GMT
Not After : Jan 31 05:00:00 2023 GMT
Subject: CN=acd0f689-6721-4a8a-8fb6-b8575106261b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:cf:68:d5:04:e6:d1:2c:27:53:71:47:b7:
5d:8a:9d:fb:86:bd:4e:36:4e:67:1a:b6:5c:ba:11:
37:11:fd:23:ac:dd:8f:e3:f8:64:e5:54:f7:d9:0b:
d4:22:ad:de:b3:cf:ff:79:6c:26:ec:f6:0e:16:6b:
4f:73:17:a9:1c:79:1a:d0:cd:50:ed:f8:56:63:7d:
5b:93:a2:6c:07:01:0a:aa:24:50:a6:f0:3b:2a:83:
27:d4:2c:e9:f9:f8:67:8b:09:db:8b:81:39:62:f5:
af:2a:9c:ce:17:6d:4a:dd:f3:dd:4b:f0:c4:ba:70:
d9:71:a7:d5:58:05:ab:07:a4:a7:86:1c:22:8c:b3:
bf:c4:ea:25:1a:1c:05:69:0a:b8:86:b5:a6:16:67:
b8:31:72:2a:6e:b1:dc:e6:cd:2f:2d:d0:72:d9:22:
72:43:a0:e6:33:a5:42:41:f4:bb:c0:6b:3b:00:2a:
12:f3:29:06:13:4b:bd:e0:85:b3:04:ec:e5:10:95:
90:77:36:41:c4:f5:61:aa:b4:55:37:c8:ee:a9:06:
e7:42:11:eb:09:8f:cb:eb:2e:b1:67:1f:04:d4:e9:
d2:9c:1e:de:3e:f9:4f:82:52:f7:ef:65:55:92:35:
f6:ea:5c:c2:cf:32:af:ae:c4:6d:f3:c0:e8:d1:aa:
0a:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:88:C7:38:11:89:BF:3E:05:77:6C:A6:3E:5B:7A:0B:B1:42:5C:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fb3570ac-5453-3933-ad79-07754f95ac0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:2c:83:1b:0e:74:a8:cb:0d:a8:d5:04:26:90:45:21:ca:12:
11:b8:39:dd:d7:0d:9f:0c:95:f1:f2:0f:df:41:1b:df:6e:5b:
fb:2f:6d:9d:a0:8f:c2:f8:61:db:89:88:4d:af:80:91:0d:68:
c5:c7:35:b9:eb:c7:7f:42:94:b8:c3:0e:76:83:37:0d:c9:47:
ae:66:0f:ad:e1:2c:66:6f:37:54:76:81:6b:ee:8f:8b:a9:be:
e5:28:3f:5e:35:ef:95:ef:a0:58:04:bb:70:b0:9e:fd:9f:19:
56:b8:b5:94:ba:29:84:b8:32:20:89:25:81:80:45:1f:a8:a0:
8d:93:5c:53:02:b1:17:ca:5e:4c:e6:dc:fc:b2:6f:f0:2d:c9:
57:de:4c:bd:cb:83:37:a1:06:a7:ff:15:7e:3d:16:2f:0b:09:
ae:8f:96:cf:2e:f7:0d:c4:14:e7:4a:bd:a5:ad:12:d0:7f:32:
22:30:af:64:ca:b8:0b:f7:a3:3e:af:70:1a:09:f8:ac:72:71:
5e:46:33:95:e5:25:43:c9:d4:78:e3:38:0e:ed:56:86:53:68:
5e:90:50:45:de:b5:37:fb:3a:2b:e3:99:81:19:7e:f1:2f:7c:
52:ad:7a:2f:a2:e1:04:58:13:a6:13:09:e2:80:9d:08:03:9c:
7c:db:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:58 2025 by rpki-client