Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47a98b94-7865-3d8b-a5c7-96cdacb2d564.roa
File: 47a98b94-7865-3d8b-a5c7-96cdacb2d564.roa (raw, json)
Hash identifier: aPvPhKAW5Fy+GqDvhqIxfanUndgkFr6RJOkgfjnOuOM=
Subject key identifier: 52:EC:DD:A3:26:7D:09:F1:37:85:DF:C0:BF:B3:AD:29:FF:85:E3:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E51DB2DCEC7394D84A8E71980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47a98b94-7865-3d8b-a5c7-96cdacb2d564.roa
Signing time: Tue 21 Jun 2022 12:00:00 +0000
ROA not before: Tue 21 Jun 2022 12:00:00 +0000
ROA not after: Wed 27 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:51:db:2d:ce:c7:39:4d:84:a8:e7:19:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 21 12:00:00 2022 GMT
Not After : Jul 27 04:00:00 2022 GMT
Subject: CN=e4ac57a4-50bd-49a3-8b42-528d010b8e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e4:f7:7d:5a:8e:31:a0:8e:16:eb:44:21:cb:
5c:67:f1:10:42:03:85:ff:ba:3b:de:e1:e6:17:04:
0a:d7:76:21:6c:74:90:f7:ac:28:c3:69:da:62:81:
dd:80:ca:5a:9e:5c:bf:75:ab:4f:ce:ce:fa:e3:84:
dd:e1:5a:e7:c5:a9:f2:f2:fb:26:87:a6:4c:96:44:
85:ed:ee:69:0f:43:4c:57:6a:12:7c:94:da:fd:fd:
b9:9d:de:3d:f9:34:9a:3f:72:a9:71:62:ca:f0:32:
24:02:44:81:4c:57:b1:14:07:7b:8d:17:7d:8e:31:
91:78:e9:d5:ea:29:00:fa:72:5c:00:a5:93:aa:16:
93:f9:b5:d3:49:98:30:02:53:bc:93:b9:bd:a5:02:
03:91:c1:4b:39:5c:bb:a9:b6:b4:50:c8:9c:82:c1:
a3:67:b9:7b:d1:16:77:78:71:31:2a:15:b8:b5:74:
b4:1b:fe:bc:5d:83:c6:b8:87:e6:58:10:75:25:8b:
d1:e7:a7:8f:a0:e6:04:7d:35:94:1d:9b:e4:5c:d9:
09:7e:10:04:77:61:2a:48:3c:e1:5d:0b:1f:72:65:
85:6f:ec:c4:d9:75:2d:15:92:2f:05:06:5c:2e:81:
5d:b3:cd:b6:32:99:53:2f:e8:c4:66:da:57:74:73:
09:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EC:DD:A3:26:7D:09:F1:37:85:DF:C0:BF:B3:AD:29:FF:85:E3:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/47a98b94-7865-3d8b-a5c7-96cdacb2d564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:31:22:d1:6f:38:1b:fa:23:45:13:ea:28:93:3d:d5:d0:9f:
c9:b9:e2:de:b5:e7:0d:58:63:87:7c:32:58:f2:55:dd:57:36:
fa:61:96:a8:79:3b:88:03:64:10:b4:de:24:3e:0c:dd:a6:42:
69:17:b8:c1:d3:5d:91:49:a4:a9:2f:1d:02:63:6d:3f:37:45:
7e:d6:bf:34:2b:a8:45:1f:37:59:07:53:e5:36:39:f3:4d:a4:
a3:c3:a5:bb:67:b3:ec:ca:f6:46:34:07:40:63:13:dd:7c:8b:
55:c0:2a:61:ee:9c:c6:77:3d:23:2e:b6:8d:49:d7:ef:54:ea:
22:8f:63:de:1c:c6:1d:50:b0:49:c4:6f:ec:9a:05:0d:f0:2c:
27:03:d1:79:75:f8:ac:25:74:32:0c:3e:10:c9:d3:16:95:04:
19:94:69:d9:72:fc:25:3e:04:49:af:2b:a8:57:08:1b:ec:92:
c7:4e:a0:17:c7:fd:ad:55:46:a9:91:e4:b4:04:09:65:26:0a:
c8:58:6e:63:c1:0d:53:b3:e7:b7:85:5d:7b:1b:f2:28:48:92:
c4:d7:ac:cf:d5:56:10:8b:0a:5f:73:f6:4c:c1:c3:24:ad:37:
8b:30:7f:d0:0e:c3:95:e4:e6:9a:6b:09:d2:5d:f1:14:33:9a:
6b:2a:3e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:00:19 2025 by rpki-client