Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc0af6f1-d778-3abf-9bea-59051f3b3cd5.roa
File: fc0af6f1-d778-3abf-9bea-59051f3b3cd5.roa (raw, json)
Hash identifier: 9q6GzCjQQU3oziYlwo02BFX+ODH0lExFVQKMdq2DgOA=
Subject key identifier: BC:57:3E:C2:1E:2F:B8:8D:DB:64:00:2A:6F:6A:88:45:2A:31:A7:5B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840030A9164E2F9B2704418BA50
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc0af6f1-d778-3abf-9bea-59051f3b3cd5.roa
Signing time: Wed 23 Nov 2022 12:00:00 +0000
ROA not before: Wed 23 Nov 2022 12:00:00 +0000
ROA not after: Thu 29 Dec 2022 05:00:00 +0000
asID: 22394
IP address blocks: 155.146.128.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:03:0a:91:64:e2:f9:b2:70:44:18:ba:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 23 12:00:00 2022 GMT
Not After : Dec 29 05:00:00 2022 GMT
Subject: CN=8384c1f4-2fa1-47d8-95e0-e8326b7253c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:48:a5:78:9c:ac:35:0a:66:35:65:46:46:eb:
1a:fd:35:88:4e:6f:cb:33:88:74:8b:51:df:53:86:
52:8e:01:28:f8:a6:09:c4:82:32:8c:e9:31:b8:dc:
43:cc:10:03:49:1c:95:4f:f9:2e:f1:9a:f4:83:31:
5e:3e:59:58:86:e2:18:aa:52:53:17:cd:d8:48:0e:
8b:2f:fa:84:7f:c2:bd:05:e7:9a:e0:c8:52:cf:4b:
ff:6f:52:3b:b8:13:70:20:1a:0a:11:7f:c2:ad:6f:
ad:16:b2:20:a6:e6:32:71:b0:4b:17:ed:6d:73:67:
68:27:73:38:a2:4b:09:77:13:8a:7a:11:b5:a6:29:
4a:c6:2f:a7:0a:c0:0b:65:32:2a:b8:a6:c4:78:33:
a2:3f:ab:ee:6f:f7:9c:99:96:d9:2e:50:1b:85:29:
4c:36:9d:49:73:7c:28:2e:9d:10:0e:7c:57:4c:1b:
72:ee:1c:62:87:72:23:17:b5:13:a7:2f:74:d0:ff:
3b:93:04:f7:52:8b:8e:30:4e:c0:05:3e:5a:78:23:
cb:6b:b1:2b:53:80:ea:b4:95:0a:d1:c0:69:35:f1:
cc:99:2b:bc:2a:a2:45:ec:22:94:db:6b:bc:29:25:
14:81:11:25:51:36:7f:7e:5a:c8:9e:5b:2d:d2:95:
99:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:57:3E:C2:1E:2F:B8:8D:DB:64:00:2A:6F:6A:88:45:2A:31:A7:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fc0af6f1-d778-3abf-9bea-59051f3b3cd5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
155.146.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:eb:a2:ec:95:01:bf:13:e2:9d:07:26:01:5d:28:72:98:09:
b5:cf:dc:75:c4:f0:53:a4:42:a6:04:cb:30:91:23:6a:aa:43:
21:ba:fd:9c:1b:ab:db:ff:92:6c:6e:ee:3d:f1:7d:df:08:c9:
72:81:ab:21:12:ae:d0:60:43:c2:d0:02:38:74:a8:be:8e:76:
8f:7d:bf:2a:f7:4a:79:9f:39:03:2c:05:9e:95:45:6e:0b:45:
ea:6f:dc:a1:c4:ef:b8:86:4a:89:f3:df:c6:6b:ca:d7:c9:8e:
d2:03:46:83:32:06:18:c2:0c:9c:38:05:51:84:a7:04:ca:71:
32:8b:3f:b4:0d:93:13:13:d2:78:9c:7c:d9:d1:5b:88:56:dd:
c4:d5:46:a2:15:05:7e:81:1b:a5:f7:da:22:da:16:2f:12:fb:
bb:92:35:8f:78:b7:e6:14:f3:b6:35:8a:a6:f6:2f:38:f4:39:
93:39:10:25:33:4e:7a:38:03:e2:e4:6b:9e:05:f0:55:f2:79:
2c:50:aa:3c:e5:ed:31:7e:9c:57:ca:a3:82:cb:4e:02:9a:f6:
01:bf:0f:ed:1b:e8:6c:cc:8b:06:19:b2:92:ea:4a:6a:45:0a:
93:e0:d6:da:b6:9b:a0:6c:67:92:0e:a5:7a:11:34:38:02:9f:
3d:a3:59:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:12 2025 by rpki-client