Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2775425a-c040-3f45-b3de-4bb9e715a1f5.roa
File: 2775425a-c040-3f45-b3de-4bb9e715a1f5.roa (raw, json)
Hash identifier: 55Cai46KLKA5n50ETlTRu3aywl7B1akXRw0c5NyTnfM=
Subject key identifier: FB:09:9F:98:81:0A:A9:C0:CF:FB:5A:02:AC:0D:67:C4:4C:08:C3:B9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F63D30AE45BE99A84573DD380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2775425a-c040-3f45-b3de-4bb9e715a1f5.roa
Signing time: Tue 27 Sep 2022 12:00:00 +0000
ROA not before: Tue 27 Sep 2022 12:00:00 +0000
ROA not after: Wed 02 Nov 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:63:d3:0a:e4:5b:e9:9a:84:57:3d:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 27 12:00:00 2022 GMT
Not After : Nov 2 04:00:00 2022 GMT
Subject: CN=09caddb1-e9d2-487c-af75-911504895704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8a:be:a6:51:23:aa:63:5f:4d:54:60:fd:bb:
8a:f7:28:e9:d6:a9:6d:1e:ea:e2:31:5a:d9:01:ee:
b9:02:80:40:dd:43:17:6b:76:96:60:6e:0c:16:9c:
ed:a9:e8:a9:76:34:5a:60:4f:c1:dd:ea:ac:17:fb:
0b:19:6a:d3:c9:01:84:ac:4b:52:e4:5a:8b:78:b3:
a2:8f:e1:19:f2:2d:60:f5:90:92:3f:97:12:35:aa:
25:34:62:e0:42:fd:fd:29:85:c1:43:f8:f4:82:b4:
7a:19:8a:f8:1b:8e:8c:0b:57:59:83:59:13:77:12:
0b:9f:5c:58:ed:c2:f5:81:5d:ec:ea:9f:a7:2d:73:
da:c9:ff:fc:cc:8d:cf:b8:de:6b:15:39:77:cf:0a:
80:59:81:1d:f7:cf:6a:12:5d:fd:68:38:6a:75:7f:
28:9e:fa:da:b6:85:95:0a:61:fc:2f:7a:d1:d7:03:
12:8f:f3:b6:57:87:81:e8:57:e6:fc:87:5b:50:24:
b3:a7:38:88:42:53:e3:6f:b8:3f:bc:c4:9d:a7:f1:
38:50:d0:cc:4d:01:9b:8d:4f:8d:1c:9a:dd:a5:20:
b4:fe:0a:1f:2c:50:de:da:e2:6c:49:93:98:59:00:
4c:ac:7a:6c:be:0c:c4:7c:bf:8e:85:b9:4b:12:27:
c1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:09:9F:98:81:0A:A9:C0:CF:FB:5A:02:AC:0D:67:C4:4C:08:C3:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2775425a-c040-3f45-b3de-4bb9e715a1f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:2f:5b:be:dc:9d:d7:a1:85:88:e6:32:bb:97:40:3c:6e:3b:
46:90:ba:ea:7b:c5:6b:0e:1d:0b:df:7c:ce:ce:a9:87:63:8a:
f1:c2:13:94:05:83:8d:b7:53:83:9b:a4:de:4f:79:f9:d9:96:
b9:1b:fc:de:fe:9c:b2:a1:89:70:d1:0e:12:f7:ee:d7:1c:f8:
79:f2:39:45:98:fd:b0:4a:d8:43:2d:7e:de:78:16:04:83:52:
a9:5f:89:f0:9b:cb:e9:2d:80:c4:61:82:32:cc:a1:71:e0:5a:
fc:78:fe:47:f9:0c:12:06:c0:ed:f4:45:6b:72:cd:d7:2c:a9:
be:e6:74:f7:29:77:c5:25:ef:3f:f8:57:d4:26:6c:25:41:f0:
48:e8:7e:09:f4:a8:04:7a:af:8f:f0:06:05:3d:82:3d:be:43:
2f:8d:ad:aa:7e:e7:bd:d2:09:d8:89:29:fb:ad:b2:93:3d:a9:
d9:5e:02:f3:0b:86:1a:7e:fb:2d:e7:f1:74:e5:4e:69:79:c4:
98:cb:16:e5:bc:44:84:96:20:cd:63:fd:43:34:a5:4a:82:7d:
ff:43:21:52:3e:90:91:bf:3d:6b:f4:0d:8c:ba:63:6f:7c:19:
8b:f8:b5:1b:84:19:24:60:0f:31:b8:02:3a:b5:f7:a6:63:31:
0b:ba:b4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:16 2025 by rpki-client