Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4743cfa7-951f-37b4-b70e-8f0c944d5d28.roa
File: 4743cfa7-951f-37b4-b70e-8f0c944d5d28.roa (raw, json)
Hash identifier: OYUu/zqbdwLacgoNuDm0sJC1mxYSgP4wqhtQVOiJ130=
Subject key identifier: 45:6E:77:D4:E2:07:2A:2C:2A:68:67:0A:D3:6C:F7:F2:68:78:79:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840275CE101B0A078A94E5E7940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4743cfa7-951f-37b4-b70e-8f0c944d5d28.roa
Signing time: Tue 06 Dec 2022 12:00:00 +0000
ROA not before: Tue 06 Dec 2022 12:00:00 +0000
ROA not after: Wed 11 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:27:5c:e1:01:b0:a0:78:a9:4e:5e:79:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 6 12:00:00 2022 GMT
Not After : Jan 11 05:00:00 2023 GMT
Subject: CN=9582decb-0b89-48d6-85f3-34655f238dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3e:73:92:93:7d:4c:b6:35:32:21:07:0a:51:
4f:a6:16:5a:23:e9:46:93:42:07:31:80:1f:dd:42:
63:c4:b3:f9:ed:e9:b2:d6:02:9a:42:53:5f:3a:ee:
a1:a7:cf:da:7b:62:ac:1f:0e:fa:43:2c:10:8a:a8:
ae:ab:98:5c:6d:5c:1d:02:c0:a1:a4:a6:37:0e:6c:
63:fe:b6:a0:da:56:0a:c9:61:74:85:66:28:ef:aa:
bb:52:50:a0:01:74:64:c1:1a:ae:b2:7b:a0:d1:85:
0c:ae:e1:12:9e:49:40:3d:de:b6:5f:01:76:62:74:
dd:19:2c:2a:08:57:88:bf:3f:78:19:e6:1e:d6:ae:
e3:e7:7a:ea:cc:8c:3e:9c:aa:fb:22:ce:9a:1d:7f:
bc:b9:bd:2e:ec:12:bf:0e:ac:f0:80:dd:26:6c:9a:
f3:a7:e5:09:a4:88:97:b5:94:e9:1b:e6:ca:51:4c:
6f:66:68:cf:48:b2:99:ed:a2:9c:16:7b:e0:b9:49:
e6:50:20:3f:23:a9:22:e9:c7:e5:33:db:b3:dc:8d:
79:ff:34:de:dd:89:c7:f0:ea:39:fe:bc:bb:a9:a7:
26:e9:6d:56:27:5e:45:11:4a:ab:10:30:91:d1:b6:
34:7e:ca:32:32:9d:a0:9d:05:82:10:39:89:f7:8e:
c5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6E:77:D4:E2:07:2A:2C:2A:68:67:0A:D3:6C:F7:F2:68:78:79:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4743cfa7-951f-37b4-b70e-8f0c944d5d28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:98:2d:c4:57:a8:38:71:c7:59:25:85:74:70:e0:01:1f:45:
8a:a0:3e:fa:00:15:a8:56:2a:9e:ff:9d:d7:9a:ef:8f:3a:f5:
17:b2:8f:2a:24:ed:dd:5b:12:4e:d5:9b:1f:c2:30:92:5e:9e:
f6:a9:a0:4c:34:cb:bc:7e:2b:9e:db:a8:f2:ce:23:07:b3:1a:
5d:3a:14:dc:e6:46:ef:92:ee:3e:29:4d:88:b9:d1:66:42:3f:
81:2c:f5:e0:32:f5:31:60:b1:25:fb:cc:da:14:59:a4:6f:81:
42:65:a9:d0:51:72:8b:d7:3a:cc:61:70:ab:4b:4a:05:ef:7f:
00:d1:8e:da:4c:9f:db:5a:22:fe:ea:1a:ff:c2:a2:23:ce:fe:
9b:28:2f:c8:10:ca:b8:f2:3c:42:9b:02:21:0f:e7:16:6a:c0:
1a:36:4c:c7:80:81:63:32:bf:82:cc:e4:a1:56:18:12:91:5c:
bb:e9:45:ff:aa:b9:dd:f8:f6:c5:90:3a:7d:16:13:ec:ab:34:
3d:bb:d7:9c:8d:4c:a0:6e:09:a3:4f:4d:fb:4b:10:02:59:74:
e6:28:57:16:33:43:05:86:a0:3b:21:fa:27:3c:e4:07:1e:66:
df:52:03:4e:d3:d3:68:3b:8f:3a:5e:e5:78:56:08:43:00:e3:
e4:99:06:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:17 2025 by rpki-client