Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fe89b44-a75c-3d09-b39c-1a43c0038b40.roa
File: 3fe89b44-a75c-3d09-b39c-1a43c0038b40.roa (raw, json)
Hash identifier: nAxDmnqarp0kaKXWXJNEA4eebU3m7OkklJhlcu7VlGc=
Subject key identifier: 23:FD:33:96:85:63:C3:F9:61:FD:40:EA:AE:ED:C1:6A:E9:5C:51:26
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F41D43EEA95A5D1D2D0F4B8C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fe89b44-a75c-3d09-b39c-1a43c0038b40.roa
Signing time: Thu 15 Sep 2022 12:00:00 +0000
ROA not before: Thu 15 Sep 2022 12:00:00 +0000
ROA not after: Fri 21 Oct 2022 04:00:00 +0000
asID: 203
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:41:d4:3e:ea:95:a5:d1:d2:d0:f4:b8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 15 12:00:00 2022 GMT
Not After : Oct 21 04:00:00 2022 GMT
Subject: CN=1f05d2ad-d6df-46a9-8290-165e1c70e0ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:60:9e:c7:f8:3e:0c:d8:9c:e1:8a:b3:e2:
7c:62:e8:ad:89:a0:ea:a6:df:42:a9:b4:6f:b7:df:
25:f6:5a:a6:17:90:8e:c2:b4:93:62:28:da:a6:fa:
05:a8:c4:46:fe:f6:c1:30:e8:35:79:65:f5:a9:b9:
71:07:7f:b5:c2:06:9e:2f:79:af:90:0d:7b:4d:40:
00:0a:6f:58:fa:44:a4:c5:69:87:8c:dc:cd:ce:1b:
78:cc:82:4d:32:46:6a:90:e9:e7:3d:be:bd:98:17:
bd:ea:b0:80:a6:ba:87:1d:21:ff:72:e1:bb:36:a0:
fe:9c:22:62:e0:71:98:c0:fd:40:70:94:4b:69:d0:
f6:23:ad:2b:3a:ec:47:31:cd:41:e8:c5:45:dd:37:
98:cb:e0:e1:a0:2a:21:79:6f:00:8b:b5:7e:a1:b6:
7d:58:20:87:ce:e3:3c:fc:34:c2:8b:2f:c0:2e:42:
6f:78:29:d7:48:d2:50:b9:cd:f9:17:bb:08:c2:96:
a4:ab:f1:23:d4:a0:15:a3:35:05:e9:86:5d:cb:78:
56:84:1d:25:ff:e4:bc:b7:70:29:31:f7:87:22:e4:
fa:0e:6b:39:66:53:06:a7:01:cc:68:13:3b:02:1f:
d7:af:f5:e7:e4:14:52:5b:5e:ce:3b:ae:eb:29:2d:
2b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:FD:33:96:85:63:C3:F9:61:FD:40:EA:AE:ED:C1:6A:E9:5C:51:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3fe89b44-a75c-3d09-b39c-1a43c0038b40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:b8:10:b5:92:45:6d:4f:9f:d0:7a:88:a8:a8:ce:fa:67:6c:
fd:07:72:85:5f:f9:8f:bc:77:e9:76:c0:05:60:88:56:5e:b8:
a2:19:64:f3:ea:c7:33:48:0d:8a:27:79:21:b1:45:27:78:a6:
fb:de:1f:0f:5d:d8:6a:50:96:e4:d8:ec:bb:3c:8a:9f:46:d5:
61:9e:40:4f:96:02:d6:77:3a:52:36:a6:90:ef:3d:dd:7f:63:
b5:d1:1d:b5:36:73:bc:d3:2c:14:dc:93:9a:0c:24:b8:6a:62:
58:7c:64:14:62:04:3b:b5:b0:ea:7b:7a:33:bc:1a:e8:b4:e9:
6f:af:a1:41:b5:f7:8f:39:aa:3f:99:f7:6d:f9:56:9c:18:03:
fd:94:31:37:82:29:52:4d:95:df:98:93:56:a7:15:5a:82:d5:
5a:93:eb:f1:8f:1b:ae:d2:c3:32:ca:13:f5:c3:1a:73:c3:23:
bf:df:68:a2:43:e4:91:7c:2d:66:a7:8c:d7:e1:81:0a:d8:2b:
88:b3:15:31:a5:cb:6c:76:76:66:48:a3:3b:3e:9a:13:e9:82:
e8:1b:27:d4:bc:bf:44:3f:1c:2a:ed:54:1d:18:45:b9:42:fc:
7d:e2:5f:33:3b:67:b2:cd:98:0e:59:35:b9:22:ca:c7:fa:fd:
3f:d1:ce:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:05:40 2025 by rpki-client