Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bb9db76-e83c-328c-95a9-8cac8e102fdd.roa
File: 0bb9db76-e83c-328c-95a9-8cac8e102fdd.roa (raw, json)
Hash identifier: Sfk+E4RtHX2EuP3lr+fiIBOZqf75boPZJVFjEcaMzMU=
Subject key identifier: 55:72:F4:A0:C4:6B:3E:F2:F0:30:BE:E3:D6:95:56:4C:AF:30:C2:A8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D3388664A57AE52926E6D5200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bb9db76-e83c-328c-95a9-8cac8e102fdd.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:33:88:66:4a:57:ae:52:92:6e:6d:52:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=f3d165e2-68c1-4a96-a52f-1b6b04796e57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:9b:a4:54:fd:ad:09:bc:37:78:be:60:a8:
fe:55:5c:3e:13:be:59:ac:8b:ff:d9:95:c3:7f:3f:
94:b5:f8:a4:34:4a:0b:a3:8d:73:89:e7:95:04:6f:
1a:1e:2b:5a:33:28:9e:9b:13:12:15:a8:be:5e:a6:
22:49:66:a5:37:1f:59:2f:f1:c7:6a:93:d5:12:a5:
a9:d5:c7:0c:27:5f:c0:d0:0c:bc:80:23:73:99:75:
69:5b:22:2f:c2:c4:13:f4:dc:97:82:69:aa:c5:15:
1d:58:95:9f:f7:4b:fb:8c:f7:55:33:72:db:ad:00:
7b:5b:49:e5:77:8f:78:23:08:f4:32:b2:33:bd:d3:
fe:a1:08:80:e6:f9:f1:e6:c5:10:59:a3:b1:65:db:
9d:fe:8d:cf:21:15:34:23:49:22:9e:2d:e3:b4:56:
2e:12:ce:3f:c6:4f:04:c8:7d:1b:a2:6e:58:11:72:
af:3f:4a:c2:af:da:4c:c1:a7:07:ba:95:cc:98:b7:
ee:4b:93:77:ce:aa:49:46:04:6f:35:cd:af:ea:7d:
09:d5:55:90:e3:90:09:c6:cc:8e:d0:1c:76:83:ef:
81:aa:a2:a2:c7:89:fa:a4:82:4a:8e:a2:f0:4f:16:
75:be:88:74:83:a6:01:c5:41:23:9f:9a:cd:a0:0d:
c1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:72:F4:A0:C4:6B:3E:F2:F0:30:BE:E3:D6:95:56:4C:AF:30:C2:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0bb9db76-e83c-328c-95a9-8cac8e102fdd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:58:41:34:9c:2f:18:6a:3e:ca:ba:24:43:dc:f9:9e:7b:2a:
06:a5:f9:84:55:d2:9c:d0:0e:ad:24:fd:c7:16:81:48:de:5d:
78:c0:90:cc:97:f1:27:63:1b:56:f0:ad:90:27:21:25:e1:ae:
9a:ca:9a:72:cf:1b:a9:21:1e:ff:9e:61:fb:32:74:06:cf:01:
78:46:6f:10:ed:3d:6b:e0:e4:97:d4:3f:32:37:5a:74:99:77:
7a:33:ff:82:c7:51:b9:1f:2b:cc:23:e3:a7:15:0b:08:45:17:
7a:d4:16:67:1b:1b:9e:e5:2b:60:2b:0d:38:06:0a:cc:9c:df:
0f:d2:f3:5b:93:6a:f6:f1:9e:22:e0:08:a3:e6:42:0d:ee:41:
f8:d6:38:aa:3a:b8:82:74:1a:dc:ec:61:71:50:b2:8e:8e:65:
53:af:99:31:f7:3c:c2:6e:33:f7:0f:ee:8b:7f:95:f3:65:63:
4b:78:32:c6:ed:79:f8:5e:11:92:ef:32:fe:74:f5:bb:aa:30:
21:38:a9:82:60:1b:75:ee:8c:97:91:9d:7e:22:74:fa:e6:06:
88:b3:00:e0:f2:d4:54:91:c2:e3:79:8b:cd:31:cd:a8:58:36:
00:b5:cb:87:eb:ff:a7:6e:43:02:04:ab:5a:e7:62:af:1b:e1:
67:a9:89:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:09:13 2025 by rpki-client