Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b6b745e-9af5-33a0-a571-c154595daf06.roa
File: 1b6b745e-9af5-33a0-a571-c154595daf06.roa (raw, json)
Hash identifier: VhCntW78kyQhVA56j6tPljjpI0OkvNOd37v2vFkakmQ=
Subject key identifier: 98:F4:43:D7:B7:87:0E:0F:AC:D4:5A:59:EA:15:FA:D7:F2:37:65:F5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F30D127157CBC2799BBCD9A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b6b745e-9af5-33a0-a571-c154595daf06.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:d1:27:15:7c:bc:27:99:bb:cd:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=1a4bba28-f306-477f-9e1c-b87e5aa2e26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:db:87:a4:97:f0:c2:43:eb:4c:91:db:ec:
8b:b2:89:b7:4d:80:63:65:2a:8b:f9:c1:00:df:80:
58:62:97:bd:14:72:ac:39:32:3f:41:29:8f:6e:2e:
8d:82:0b:21:b3:b1:40:4e:70:14:5d:a1:84:08:11:
0b:ba:c8:b0:62:47:5d:15:5b:65:0b:b0:50:06:2b:
2e:82:5f:2d:46:c1:42:65:1a:05:e1:9c:bb:37:b8:
9f:9b:1b:6c:10:c5:06:0e:7c:6d:95:b8:7a:ff:df:
01:80:9a:97:d3:40:fa:7b:b3:5e:21:a5:48:ea:b0:
19:92:1a:52:85:76:69:f6:ec:9b:46:50:8b:38:6e:
d7:ea:a5:20:bd:d1:23:63:46:9e:f1:1c:72:59:e2:
c1:5a:be:bd:95:0e:9b:9a:a1:92:66:60:3f:21:cf:
07:39:50:c6:7d:73:59:b1:67:98:cf:25:2b:fe:f9:
29:bd:43:cc:e7:4d:95:a2:37:81:7c:be:73:5b:86:
7f:36:3a:4a:f9:3b:ab:64:cb:09:83:15:60:d1:31:
10:ab:06:be:7f:ac:64:43:37:2b:da:8d:11:56:5a:
ce:b3:d1:23:57:5e:bf:a1:25:7a:57:39:62:f9:da:
e4:33:11:32:92:22:12:41:2e:34:d1:b8:4b:56:0a:
fe:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:F4:43:D7:B7:87:0E:0F:AC:D4:5A:59:EA:15:FA:D7:F2:37:65:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1b6b745e-9af5-33a0-a571-c154595daf06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:d7:24:99:df:17:a2:df:54:ef:5f:c4:97:f3:c2:48:83:4b:
5e:c4:67:ca:0f:3a:8c:4b:eb:ea:48:b1:02:cb:14:bb:b4:96:
dd:3a:c8:c3:09:22:ef:a4:3d:ab:7d:cb:26:14:21:5e:73:15:
39:3a:06:3e:64:8a:74:ab:8a:b6:81:15:d4:b7:50:d7:d3:46:
df:20:0f:e0:59:b7:bf:4d:48:38:b3:97:c9:f6:ba:7b:21:41:
ca:a7:80:11:45:77:97:4d:a9:0c:2e:d4:be:7c:5e:40:a9:5d:
0b:0a:57:da:ed:c1:02:eb:7f:98:8f:c8:74:2d:b3:c1:c4:47:
22:28:13:16:67:d6:aa:ab:f8:b4:60:95:29:ec:24:3d:52:3a:
29:54:7d:fd:ff:6c:c6:50:80:98:e6:2c:08:13:e0:be:4c:4a:
ef:b3:93:f1:03:8d:51:92:36:ba:24:bd:5c:4c:51:db:d8:95:
d7:cc:8b:7f:a6:c0:2f:15:4c:de:f2:e9:34:00:05:7b:a4:0d:
7c:72:d7:29:25:fd:b6:de:55:db:54:7c:5d:79:a5:66:ec:c2:
ad:d4:d4:7d:b2:5f:25:dc:4c:cc:a1:d2:f2:da:8f:11:9c:eb:
ab:24:8a:8f:1d:c3:c8:34:2e:c5:7c:a0:61:15:c7:08:ad:43:
a7:c3:60:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:20 2025 by rpki-client