Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d26c4a2-2695-39a8-a19e-79eac000f100.roa
File: 2d26c4a2-2695-39a8-a19e-79eac000f100.roa (raw, json)
Hash identifier: ElFvprCO4jB7LzTBfKBGrMCIBBQ5d1ClVzNoEhVd190=
Subject key identifier: A2:C7:32:D8:6F:28:07:9C:32:BF:A5:CB:5C:56:1C:60:53:0D:B2:BD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E78F8668E70721B14BD449B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d26c4a2-2695-39a8-a19e-79eac000f100.roa
Signing time: Tue 05 Jul 2022 12:00:00 +0000
ROA not before: Tue 05 Jul 2022 12:00:00 +0000
ROA not after: Wed 10 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:78:f8:66:8e:70:72:1b:14:bd:44:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 5 12:00:00 2022 GMT
Not After : Aug 10 04:00:00 2022 GMT
Subject: CN=2021ca4c-d60a-4a10-8921-60c5e11cc29a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:38:c0:b8:71:ae:e2:03:98:34:b0:8e:94:29:
37:c7:ed:a3:d4:35:c0:3d:e0:48:2d:17:6d:23:81:
97:87:80:dd:9f:5c:f1:b7:3a:8c:8d:48:ea:44:3d:
3d:65:5f:8d:44:ea:4b:d7:a4:9a:91:df:e6:97:90:
c3:71:46:e0:49:bb:47:91:27:99:3e:8a:3c:80:46:
b3:b0:26:9d:c5:7b:aa:f9:9c:89:37:1b:ed:c3:bc:
cd:d7:21:8c:77:8c:33:2f:f0:a9:f6:9e:72:a0:e8:
f0:e9:19:d5:2a:b4:2c:b6:e2:b0:6c:c5:c1:24:b0:
75:6c:96:3b:52:33:ab:2b:c1:1c:20:75:cb:ae:7d:
a6:fb:30:3f:e5:ec:e7:7b:95:b9:7f:59:13:a0:05:
e4:46:a7:6a:0d:64:23:7e:ea:0e:07:22:8e:66:9b:
b9:39:bd:28:c4:cd:89:4f:84:45:d0:de:ac:4d:74:
45:ef:a7:14:eb:87:28:a4:51:c9:11:3b:4b:ae:8c:
c4:b0:3b:bf:25:51:8d:e8:c6:8d:d1:c8:2f:70:1c:
fd:94:34:09:9d:5a:87:7c:f2:5d:0f:f4:cb:7e:9b:
d3:9e:37:b9:af:ac:32:45:bd:83:a8:5f:18:bd:17:
a6:c2:26:70:f7:9d:bd:2e:16:55:fe:71:a6:bb:49:
d0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C7:32:D8:6F:28:07:9C:32:BF:A5:CB:5C:56:1C:60:53:0D:B2:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2d26c4a2-2695-39a8-a19e-79eac000f100.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:8a:ec:ef:4d:74:4d:10:b1:b3:c3:42:d7:03:94:09:c2:03:
c0:63:b2:b0:67:db:9a:41:74:1f:c7:13:15:ae:3d:54:5c:a5:
19:9f:95:c0:41:5d:ab:c3:fa:ec:ec:9c:26:e3:36:4f:4b:ec:
43:c7:bb:f7:b9:b5:8f:86:6c:62:c4:af:fd:a8:65:92:f1:ef:
4a:b0:9e:5f:3b:38:8f:3e:9e:af:5b:07:a6:57:2a:1d:a0:14:
04:63:dc:ae:42:de:72:df:e0:10:f2:3a:47:2e:3b:72:d1:d7:
8f:da:c6:9d:30:70:44:00:95:78:f7:1c:cd:b4:4b:ba:41:3d:
23:a7:36:77:2f:10:56:6c:91:d9:ac:53:52:03:40:f9:d7:c2:
23:06:44:7a:b5:83:e2:f8:de:2f:91:87:c1:97:8b:35:af:9d:
1d:1f:db:a5:9f:f2:0f:dd:b9:98:01:2c:2e:01:7c:66:58:7c:
bf:2d:06:c0:ec:4a:b9:e0:88:a7:4d:67:63:bd:e1:cf:02:db:
cc:87:01:29:77:a6:7c:87:7c:5c:ae:85:74:92:b7:8a:bd:9b:
87:9e:09:d3:56:2f:70:e7:8c:45:86:a0:e3:0e:21:58:63:db:
7d:7a:b5:c6:c3:29:f6:2c:0d:c9:6e:e2:b7:29:3d:b2:9a:b3:
88:98:f2:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:01 2025 by rpki-client