Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3170cc70-08f9-3381-ab48-ac48d8cbdefd.roa
File: 3170cc70-08f9-3381-ab48-ac48d8cbdefd.roa (raw, json)
Hash identifier: 3PqZM/kmbPWiWu+FRM0rVpjK3Vby8xgb5xwBZ1fUelw=
Subject key identifier: FC:E8:2B:BA:93:78:63:78:9E:F3:76:D3:AF:7C:6D:E5:EC:15:92:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DDC844FDFDDF674BCEEEE5D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3170cc70-08f9-3381-ab48-ac48d8cbdefd.roa
Signing time: Tue 10 May 2022 12:00:00 +0000
ROA not before: Tue 10 May 2022 12:00:00 +0000
ROA not after: Wed 15 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:dc:84:4f:df:dd:f6:74:bc:ee:ee:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 10 12:00:00 2022 GMT
Not After : Jun 15 04:00:00 2022 GMT
Subject: CN=403b01c5-2772-4b06-a468-f7527d2a92eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5b:c7:ce:d2:0c:ba:6c:14:f5:52:59:d5:a0:
39:01:15:99:f4:07:1a:2d:52:e7:dd:f1:48:c2:cd:
c7:b1:2d:9c:0f:7b:28:49:0e:5a:15:4a:bf:f0:c4:
3c:96:f7:cd:b1:50:b5:89:07:de:3c:08:0c:31:0b:
f7:5f:64:f7:20:4d:c5:a0:42:aa:1c:35:1a:ce:5f:
24:d1:b1:e1:72:7b:58:d1:4e:e4:59:b8:b3:bc:25:
d6:75:f1:4c:d6:ac:04:4b:88:78:41:62:52:13:20:
19:c1:97:b6:9b:e8:32:df:df:2f:5f:51:05:69:5a:
bd:40:43:0c:74:40:6f:3a:a3:ee:34:e6:d8:ea:c6:
4f:e1:44:ad:55:75:f6:e4:cc:dd:65:24:76:16:fd:
11:e8:8b:bc:6b:e6:90:e9:6d:d0:4f:6b:f0:17:0d:
b1:1b:05:3a:01:97:57:90:89:27:58:fb:b1:42:98:
54:73:57:c0:2e:2d:a2:74:51:43:43:47:93:4f:58:
08:f9:a2:2c:b6:28:89:d6:cb:2f:07:09:23:ed:bc:
3f:6c:15:b6:29:1b:6a:7f:22:b0:c6:33:c7:b7:00:
e7:5d:2b:1d:2e:15:27:73:db:d1:26:e4:13:4e:7a:
88:7a:0f:88:74:c6:45:10:e4:87:06:ed:c2:33:c1:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E8:2B:BA:93:78:63:78:9E:F3:76:D3:AF:7C:6D:E5:EC:15:92:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3170cc70-08f9-3381-ab48-ac48d8cbdefd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:c5:2e:b1:a0:ad:61:6f:67:09:bb:79:c9:ed:63:00:c2:2a:
4b:02:47:2d:dd:3c:d7:e0:a4:ab:55:34:f0:7c:87:5a:9b:c2:
f8:97:cf:f3:85:20:f6:1f:de:c1:18:42:79:5e:50:0b:45:ac:
14:aa:f1:94:1e:7a:c3:15:6b:ea:f0:2f:bc:59:76:e9:a9:63:
19:e4:29:e9:b0:0f:73:17:a0:1d:d3:d3:8b:f8:7e:f7:01:8e:
a5:57:ed:8a:ab:c7:b1:f5:34:09:7f:6a:c0:1d:4b:1b:c4:cb:
05:44:f9:12:4c:07:29:fd:c8:49:f8:65:c7:ee:98:60:6d:7c:
14:2f:f4:63:d4:fc:cd:d8:c5:22:e2:8b:40:24:00:bc:f1:53:
2e:d7:5b:11:ac:02:bc:6b:ba:2e:26:31:1f:c0:c3:29:2d:29:
9e:78:95:f9:49:b6:91:2a:05:f3:38:fc:da:da:98:22:6a:5a:
d5:5f:f0:93:af:ec:ab:ab:d2:d6:b2:c3:81:71:ee:cb:fe:0b:
db:42:15:c9:dd:f3:75:82:e2:06:65:02:3a:ed:1a:2b:4d:67:
3f:eb:56:e2:d9:5d:84:b8:b6:ab:a2:07:6c:84:d8:c8:de:35:
18:da:e4:89:2c:11:92:da:b4:bd:1c:81:83:93:c5:9c:cd:09:
fe:64:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:00 2025 by rpki-client