Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/419880b0-a541-3d43-aac2-daaebc1140f7.roa
File: 419880b0-a541-3d43-aac2-daaebc1140f7.roa (raw, json)
Hash identifier: zHlinRpe4yw8p7cEFpwNTTvbW/W/7NNsf5SmvzwBzN8=
Subject key identifier: 6E:D5:18:99:9C:EB:95:58:B1:1A:74:B1:44:D5:CE:70:01:9C:11:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D934A91F08A811A2F09301800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/419880b0-a541-3d43-aac2-daaebc1140f7.roa
Signing time: Thu 14 Apr 2022 04:00:00 +0000
ROA not before: Thu 14 Apr 2022 04:00:00 +0000
ROA not after: Thu 19 May 2022 04:00:00 +0000
asID: 6167
IP address blocks: 161.188.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:93:4a:91:f0:8a:81:1a:2f:09:30:18:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 14 04:00:00 2022 GMT
Not After : May 19 04:00:00 2022 GMT
Subject: CN=d38bf502-3ab2-44d3-be6d-432de0728ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:87:56:85:f8:68:f2:3a:58:b7:e7:82:65:
8f:8e:36:0a:a0:44:83:ad:fe:44:7e:fe:14:0e:5a:
62:56:77:d7:96:de:de:27:10:95:34:8d:60:77:d1:
03:76:b5:bf:e3:e9:68:d6:bf:bc:45:ec:b0:d2:0f:
41:62:0d:b9:f7:fb:c0:a7:30:e5:39:95:97:2b:9a:
40:4a:1d:fe:21:f5:34:67:96:04:bf:ea:1f:cf:c3:
a7:2c:0a:11:a6:8e:12:53:73:b1:77:21:81:40:40:
18:4b:f5:2e:f9:0c:fe:a7:58:4f:db:c3:b3:b1:69:
45:68:e3:90:64:51:e6:76:ca:f7:da:47:8e:c1:98:
2b:99:e3:75:8e:b5:ec:25:f4:c2:a7:98:fc:d1:62:
28:99:33:f8:a8:0c:cc:6d:4b:c7:0d:f6:f4:6c:bc:
60:4d:1b:32:d0:ef:84:6b:c9:a1:5d:f6:aa:83:87:
76:d3:a8:91:32:1e:5a:5c:a0:44:08:10:f6:ef:52:
b5:28:ba:63:13:5b:d1:aa:4a:40:78:35:0f:11:49:
60:67:8b:11:0c:89:8a:96:3b:ca:13:39:e1:9e:bb:
dc:a8:2b:c9:e5:63:e2:42:c9:d4:9c:f1:5b:81:5e:
74:74:93:59:5d:3b:a8:41:63:32:4c:02:a1:33:4d:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D5:18:99:9C:EB:95:58:B1:1A:74:B1:44:D5:CE:70:01:9C:11:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/419880b0-a541-3d43-aac2-daaebc1140f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:24:f6:d4:a2:6a:2d:0c:8f:70:4a:df:63:04:8e:78:82:8c:
46:fa:99:4b:70:dd:e7:20:f1:b5:1a:15:84:35:b7:51:b5:fa:
a6:a0:ba:70:5f:a4:36:13:20:90:31:9a:58:ea:84:a5:4d:c0:
25:da:b0:af:67:ca:40:a0:e7:67:a7:84:ae:65:46:1b:68:b3:
54:fb:5d:87:b4:0f:69:4f:06:cc:7c:fd:e8:ab:8f:61:34:76:
1c:a6:ef:23:94:bf:6d:a3:60:a3:9f:cf:d8:99:91:64:6a:bc:
42:a7:3e:29:4f:36:40:23:71:85:b0:0f:1a:34:db:b7:cf:41:
1c:21:15:d2:be:94:79:62:9f:85:71:9e:9d:6e:ab:f9:6c:c3:
d3:9d:d8:aa:d8:3f:85:bc:b4:28:95:e8:ff:43:f6:7d:83:15:
29:aa:34:22:c6:c3:3c:91:79:7c:ee:7c:fa:3b:6a:19:89:0a:
63:e1:55:21:64:30:c1:f1:da:9a:00:ff:be:f8:f7:74:1d:b2:
1b:5e:08:10:e1:37:91:7a:4b:4b:c9:3b:81:e5:e6:3b:38:0c:
b5:79:4d:be:11:fa:48:2c:24:28:ff:d3:45:8f:b5:b9:86:a6:
d6:17:5c:e1:95:d3:9c:50:72:18:23:4e:5b:5b:e6:be:99:c4:
c4:c3:6e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:43:18 2025 by rpki-client