Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b819f82-3a2a-3202-b252-2e025080d5a8.roa
File: 0b819f82-3a2a-3202-b252-2e025080d5a8.roa (raw, json)
Hash identifier: Yt44lVL4zggleYYOBytfmPEgHqdMR6w6wAnNgjEHuso=
Subject key identifier: 9F:0A:10:D5:1B:FC:57:4A:13:C0:3D:F7:98:EE:6B:B1:31:BA:CE:71
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E404AAACD6319D064FA9233B8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b819f82-3a2a-3202-b252-2e025080d5a8.roa
Signing time: Tue 14 Jun 2022 12:00:00 +0000
ROA not before: Tue 14 Jun 2022 12:00:00 +0000
ROA not after: Wed 20 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:40:4a:aa:cd:63:19:d0:64:fa:92:33:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 14 12:00:00 2022 GMT
Not After : Jul 20 04:00:00 2022 GMT
Subject: CN=ea38592e-8d9d-45e0-aae4-98cb2d58ecb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:3d:59:9b:64:c0:e2:c2:3f:c2:23:0d:c8:
42:66:84:e1:3a:3b:64:0c:63:11:4c:ac:18:6a:88:
f0:56:86:3e:97:d4:a3:d8:0e:f0:f8:6b:32:d6:e3:
b2:48:be:10:ed:43:15:b5:66:af:9a:4c:ee:c3:76:
e5:3c:e3:5c:38:3d:58:03:f7:25:12:8b:be:b9:35:
73:7b:a2:6a:90:c5:ae:cd:44:53:82:48:55:3c:3c:
8a:70:24:85:81:5d:07:2f:49:c5:20:8a:a4:9f:84:
91:d0:9b:bc:f4:42:c9:81:b4:0e:c4:f1:98:8c:b5:
c7:84:8e:26:1c:9e:c8:dc:67:86:6a:77:36:e9:1c:
b5:38:51:13:00:a9:5e:6e:38:00:a6:c0:aa:c7:a5:
0d:86:2d:25:6b:9b:ec:93:15:54:99:bc:22:38:3a:
ca:f9:67:ec:a7:a4:e0:b9:65:99:f1:75:df:b1:27:
92:45:50:cb:8d:59:18:e4:bd:a3:83:76:00:3f:53:
99:02:0e:52:e6:4c:81:40:bc:fb:4d:e7:8a:97:03:
d9:8b:5a:31:de:ae:22:9b:c3:47:16:0d:2e:35:93:
22:11:7a:9d:3f:df:49:74:6b:2d:cb:c8:67:3f:b2:
dd:b7:6c:ae:36:5a:90:0b:a6:d2:07:cd:5d:92:22:
ef:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0A:10:D5:1B:FC:57:4A:13:C0:3D:F7:98:EE:6B:B1:31:BA:CE:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0b819f82-3a2a-3202-b252-2e025080d5a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:90:78:93:42:67:95:c6:2a:6d:c1:73:b7:9f:55:06:12:7d:
8f:18:dd:45:16:96:07:40:3a:39:db:83:7b:58:9a:d7:5c:b7:
b9:0d:02:c4:d4:ed:57:02:dc:8f:9d:7c:7c:b4:bb:dd:3b:bc:
24:f1:67:ae:21:ba:89:bd:16:9d:b6:85:ef:6e:ae:a8:8c:5f:
6e:90:32:77:55:f0:b1:c7:da:5c:c7:d6:1d:88:e5:d7:c2:97:
66:d5:b2:52:e6:e4:8d:32:44:3a:5c:47:0a:69:08:ef:dc:f9:
ff:59:a4:75:31:5d:dd:6a:2a:e1:38:15:a9:71:bc:99:9b:c5:
ac:e4:44:08:3a:ac:d3:14:7f:b7:58:65:89:6e:f0:e9:a8:60:
6f:0f:fb:63:7c:e4:77:7a:23:10:34:1f:12:80:b4:d0:b9:61:
88:89:41:2b:f3:28:21:9b:49:6d:7c:1f:a7:73:b9:38:d0:bd:
03:04:56:3d:db:93:67:89:28:f8:19:dc:67:ab:e1:bd:d1:df:
5d:0d:0c:bc:ae:92:b4:d7:67:91:c8:ec:7a:01:f6:8b:b7:2c:
82:02:ee:f7:fd:8e:1a:d1:31:bd:0f:b8:cc:78:54:ae:e1:51:
a0:dd:a3:a1:47:78:3b:6f:31:e6:7c:4f:a9:b5:ad:52:7c:6d:
22:0e:71:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:19 2025 by rpki-client