Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f60da95-2e16-33f9-8582-ec5bcf121ea5.roa
File: 1f60da95-2e16-33f9-8582-ec5bcf121ea5.roa (raw, json)
Hash identifier: DOhFWyMUaPSQYuUKIBnf8S/jVwSLt3pd7aMJrW6Ptv8=
Subject key identifier: B6:E7:47:CC:6A:3D:17:4A:72:29:7F:96:73:85:34:BC:37:B9:F1:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CF1D62BF0FE9B4B9930AE9D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f60da95-2e16-33f9-8582-ec5bcf121ea5.roa
Signing time: Wed 16 Feb 2022 05:00:00 +0000
ROA not before: Wed 16 Feb 2022 05:00:00 +0000
ROA not after: Wed 23 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:f1:d6:2b:f0:fe:9b:4b:99:30:ae:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 16 05:00:00 2022 GMT
Not After : Mar 23 04:00:00 2022 GMT
Subject: CN=ec370d06-7929-4ef6-9aa0-91c90f2f1e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:38:82:bb:8e:1c:8b:53:72:9d:22:74:80:17:
4f:d5:b9:07:10:7f:7c:03:06:fc:e1:7f:33:04:3f:
7a:a6:08:87:ff:d7:6c:c7:f9:82:9d:a1:5b:a0:d1:
83:8c:a0:f9:a8:e6:6f:0e:d7:3e:95:35:57:11:74:
74:ed:2a:d7:30:bc:ab:1d:c8:3d:fe:09:0a:58:ae:
b1:7a:92:6f:e9:45:10:c8:82:27:b2:46:41:06:94:
d4:dd:21:1d:d5:6d:29:87:cc:61:38:96:cb:e0:a2:
e5:a1:df:7d:91:94:c0:1e:40:cf:3b:c9:db:22:b9:
7a:9a:e0:17:92:be:97:13:ca:5b:c8:63:55:ed:88:
6b:d5:b6:b6:08:ec:e5:87:22:1a:e6:42:28:bc:1c:
d7:12:60:48:64:90:24:ae:d2:f7:ef:4f:33:37:3f:
62:d1:5c:5f:c0:ff:72:80:16:a7:76:5c:ef:1d:7f:
c8:bf:0e:19:30:b1:20:50:a0:bd:f5:d1:00:71:f9:
c6:b5:32:e2:98:f1:fd:87:e9:b4:22:7e:7b:39:2b:
9e:6d:c0:b6:81:ef:37:fa:f8:3c:2b:54:8a:74:2e:
3b:28:2a:d0:02:15:d1:b3:a0:96:01:65:9c:e4:5c:
e9:4a:f3:de:c7:9a:b8:ca:3b:7c:31:5a:f8:e7:33:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E7:47:CC:6A:3D:17:4A:72:29:7F:96:73:85:34:BC:37:B9:F1:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f60da95-2e16-33f9-8582-ec5bcf121ea5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:98:dd:6e:1c:ae:c7:fe:a9:07:6d:af:d7:b2:36:fa:bb:78:
b9:4d:d8:85:a4:93:4c:ae:06:07:6c:53:84:27:56:eb:ef:58:
ab:6a:43:2f:26:5f:a1:ab:41:87:9a:e3:ba:45:dc:db:9b:de:
a3:2d:1c:a0:fd:12:20:03:f9:2f:ff:c0:83:cc:9a:ef:4c:0c:
0c:ce:e6:a6:cf:8d:52:fe:87:1b:ad:7e:a7:87:75:66:2a:6c:
9b:94:c2:c7:a3:44:71:7b:a7:e3:06:d1:b8:5c:75:45:72:61:
08:40:da:91:0b:18:ed:4c:c2:fc:4b:05:6f:cf:28:03:0a:9e:
8f:87:98:89:4a:da:ae:6a:b2:21:f2:e5:37:70:e6:17:e3:86:
43:a8:02:e0:07:99:37:35:58:f5:ea:94:d7:81:61:07:ce:6b:
7c:a3:a6:63:d2:8b:56:00:2a:34:90:2d:c6:40:c1:54:c9:d9:
89:87:41:35:6a:76:0a:81:9b:72:32:65:51:98:a4:5e:db:da:
43:49:c2:23:72:be:ac:e4:69:43:a2:22:14:f2:10:6e:6a:0b:
95:fa:8a:68:7b:56:26:54:c0:06:d9:e2:95:11:2c:2d:3b:cc:
87:73:ff:f4:43:80:b4:14:d9:b3:38:82:c5:ed:12:f2:22:7d:
e2:57:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:03:26 2025 by rpki-client