Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/023ffa35-be93-32da-ae47-a4d73dc73678.roa
File: 023ffa35-be93-32da-ae47-a4d73dc73678.roa (raw, json)
Hash identifier: TlJFiADKx396dvtaxKTJ6f/y4pP4QuQ/UhnlKN/m6HQ=
Subject key identifier: BA:91:F3:FA:98:93:8C:23:EE:81:2B:37:0E:C6:7A:11:72:4B:0A:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EF39A32BA7463B5C833D32F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/023ffa35-be93-32da-ae47-a4d73dc73678.roa
Signing time: Thu 18 Aug 2022 12:00:00 +0000
ROA not before: Thu 18 Aug 2022 12:00:00 +0000
ROA not after: Fri 23 Sep 2022 04:00:00 +0000
asID: 203
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:f3:9a:32:ba:74:63:b5:c8:33:d3:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 18 12:00:00 2022 GMT
Not After : Sep 23 04:00:00 2022 GMT
Subject: CN=46f32be1-47b6-42e1-98f1-253c5db99618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:b4:1b:6e:73:b9:a8:11:fd:7f:0e:8b:d5:
15:29:5d:45:78:08:95:e2:fd:63:04:85:e6:db:e7:
e8:9e:d9:11:17:bb:75:8b:3e:96:0d:b3:a5:c9:fb:
5f:46:5d:4a:37:48:a9:78:00:68:38:fd:e4:13:19:
b5:b7:bc:f0:64:23:b0:e0:bf:89:21:26:14:15:67:
ca:73:b1:ce:22:6d:a2:b1:9a:13:af:a8:00:ba:0b:
a5:ab:f3:27:7c:14:cd:1e:fe:5b:c2:3a:8f:f9:95:
aa:80:7e:ce:7b:48:fc:76:57:09:2e:5f:ef:92:b9:
b2:54:64:c6:82:b3:9c:d9:1b:69:1f:5f:d2:44:6b:
33:39:b3:59:26:2b:02:ee:b7:a9:d5:76:44:86:25:
ff:ae:96:df:a5:7e:fc:bb:17:fa:c2:97:dd:f9:38:
3e:55:8d:cc:3c:08:5b:20:d4:bb:95:c5:0f:1b:9e:
e7:1c:3e:7b:13:3c:d4:99:a8:30:0f:dd:1c:01:17:
b5:f7:ea:a7:6d:ca:6e:19:3c:8d:73:a5:d6:a5:4b:
30:91:4a:d1:60:3a:33:ab:6d:cb:db:1d:26:db:e2:
11:83:93:ff:1d:8f:87:1a:46:51:6d:2a:73:c9:43:
ee:ce:2d:ff:ec:b6:b9:f3:d8:0d:43:b7:53:05:fb:
50:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:91:F3:FA:98:93:8C:23:EE:81:2B:37:0E:C6:7A:11:72:4B:0A:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/023ffa35-be93-32da-ae47-a4d73dc73678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:f8:bc:7a:78:ea:cf:6c:ed:b8:d2:29:88:51:1d:27:b7:97:
98:a6:32:23:f5:bd:9d:ee:68:70:4f:5b:d5:8f:10:e6:94:8a:
71:06:e9:13:2b:77:a3:ba:29:cf:65:c9:72:60:7d:91:c2:e5:
49:7a:bf:39:97:3c:61:50:5d:1f:aa:95:06:3a:02:90:fc:02:
e1:f5:82:a0:93:4f:4f:5d:d0:78:b0:7c:60:dc:e2:66:02:2e:
69:11:ef:4a:82:0d:bb:54:91:94:79:eb:ca:d4:db:7e:da:2a:
d1:ac:31:70:66:26:9a:7e:ea:3a:45:9f:6c:62:72:49:ec:46:
e4:e7:c8:d6:7e:60:90:a1:bb:9a:ca:70:cf:34:b8:4c:06:04:
3c:30:59:11:49:cc:38:5e:20:f6:8d:27:76:66:de:28:bb:a2:
24:bc:38:bf:8d:1e:ed:fd:c3:57:9f:41:4c:ff:8f:60:14:19:
06:ec:69:0e:a4:b5:d8:92:55:26:ff:48:38:5c:4b:7e:2e:83:
94:7d:58:5c:13:f0:2c:fd:68:af:91:ac:8c:21:57:4d:73:ff:
36:42:e9:fa:6f:29:ee:cd:10:8e:a7:cb:df:55:96:13:cc:7e:
ee:89:8c:03:fe:cb:64:7d:30:78:9e:d4:78:1f:9f:3d:06:ab:
01:bf:10:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:00 2025 by rpki-client