Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02f3ad8b-9a78-3b25-9abb-9b0b2915fb31.roa
File: 02f3ad8b-9a78-3b25-9abb-9b0b2915fb31.roa (raw, json)
Hash identifier: cMFT5+EqK5Lf6jrmiABK2NUikJZ6ZM59KvXkemaWfz0=
Subject key identifier: 98:C0:61:1A:62:D4:70:20:3C:D6:57:29:CE:69:8D:F9:B8:E0:45:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E31F4716604784727DC6CE780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02f3ad8b-9a78-3b25-9abb-9b0b2915fb31.roa
Signing time: Thu 09 Jun 2022 12:00:00 +0000
ROA not before: Thu 09 Jun 2022 12:00:00 +0000
ROA not after: Fri 15 Jul 2022 04:00:00 +0000
asID: 6167
IP address blocks: 161.188.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:31:f4:71:66:04:78:47:27:dc:6c:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 9 12:00:00 2022 GMT
Not After : Jul 15 04:00:00 2022 GMT
Subject: CN=a8479065-65f3-4f41-b511-a37a5330513c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e3:07:a6:95:ce:12:32:ea:76:cb:d6:c8:4a:
6b:ff:96:e4:7a:59:7e:dd:d7:0f:af:39:8f:e9:78:
2a:1a:32:a0:25:8f:21:29:c2:ed:ea:7e:f5:3b:ae:
69:a2:fd:3a:20:c9:9e:ef:9c:86:a6:a4:44:c7:ea:
65:cd:8e:90:15:aa:29:1d:74:b1:d0:72:49:e1:29:
46:75:58:c0:b9:f2:8b:53:88:ef:d9:91:7b:a7:71:
0b:50:a8:07:9a:b8:ca:10:0e:bd:48:c6:b6:19:41:
4c:27:73:cd:cf:7c:03:60:96:41:e9:6a:58:9f:aa:
37:ef:7b:a1:a6:3d:5f:ef:b7:27:8d:53:69:d3:8b:
5e:33:f9:f0:5c:68:1c:02:be:85:95:b9:c7:ee:d5:
f6:0d:1f:ab:74:0b:df:7e:33:ef:f1:92:33:a7:89:
df:f0:13:04:c2:8f:84:e1:ee:ae:6c:19:03:fa:c4:
f7:b0:f8:e3:94:fb:f9:ae:0b:60:59:f1:6a:3d:69:
1d:74:35:f7:cf:cf:5f:4e:92:60:d5:28:ce:30:d6:
16:4b:fd:3b:f2:11:97:8b:40:71:99:1c:d4:f1:fe:
f9:52:73:99:d6:3d:9a:a4:2d:67:55:e7:e0:6e:a2:
6a:eb:4a:6d:d4:af:2b:f9:99:7a:ff:85:3a:6f:5b:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C0:61:1A:62:D4:70:20:3C:D6:57:29:CE:69:8D:F9:B8:E0:45:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02f3ad8b-9a78-3b25-9abb-9b0b2915fb31.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:09:b6:a6:7d:fa:b7:89:bb:33:67:a8:59:0e:93:30:63:f0:
be:94:95:3a:c0:88:c6:a6:77:fe:20:03:29:ef:48:13:eb:a2:
45:54:bc:be:a1:36:db:cf:60:8b:4e:a6:79:64:95:b1:38:ab:
e2:81:15:8b:4e:dc:6d:dc:9f:f1:a5:46:9a:42:9c:bb:e7:9d:
70:35:e0:ca:4e:c1:54:78:86:68:0e:11:f7:c5:45:9e:67:6f:
4d:8c:31:82:75:07:28:74:fd:bf:f6:67:98:90:28:cd:95:95:
ad:50:f5:1b:37:ab:99:e7:a7:c0:9a:05:d3:b8:6f:25:3f:79:
d7:9d:e9:f7:e2:42:94:ef:e9:29:34:9f:23:57:ca:31:58:a2:
9f:85:8b:8e:fb:a9:6f:da:e6:9d:b8:86:65:b4:6c:44:1d:cb:
e8:d9:08:5f:70:9a:0c:b6:db:b7:f4:8e:88:bb:dd:72:af:9f:
6c:a5:16:3e:8e:41:83:78:51:45:9c:43:69:93:db:0f:f7:79:
17:1f:a3:f4:6e:82:95:ea:fc:90:30:23:bf:92:fe:9a:fc:8f:
d3:ad:78:0b:68:36:33:ce:84:7a:3e:c2:f5:ad:64:7f:0c:2d:
ce:e5:9b:02:86:07:37:b2:20:f7:24:d9:c7:35:27:e7:01:8a:
03:f7:95:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:39 2025 by rpki-client