Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f28dcfb-6300-3890-82ab-009486dcb022.roa
File: 5f28dcfb-6300-3890-82ab-009486dcb022.roa (raw, json)
Hash identifier: wXdNWFD7IsqxhAdtWDQx56t/nZOXGNC6hKKJtYe5nm4=
Subject key identifier: 80:D7:91:99:0F:1D:0E:88:B4:1D:F3:5D:34:FB:92:6F:62:50:FB:06
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F09CAB40F01966C5EE3FE5A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f28dcfb-6300-3890-82ab-009486dcb022.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 161.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:09:ca:b4:0f:01:96:6c:5e:e3:fe:5a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=be32d8eb-f52e-4f8e-a1bf-a1e0d2154cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:09:d2:e3:a0:dc:1c:66:13:04:c7:62:7c:26:
54:1a:2d:82:05:ed:72:aa:7b:06:c5:c8:14:0a:a8:
4b:62:82:a3:b8:5b:59:52:f4:7a:b8:55:b3:ff:72:
db:6c:7c:fe:2d:72:6c:f7:90:50:32:2b:e6:c9:78:
35:68:ac:1f:92:e7:ca:13:7c:6c:82:a8:9d:52:a9:
db:df:6d:5c:b7:b6:b0:82:88:a9:13:e1:a9:19:91:
87:97:2f:da:b6:44:c7:ac:3c:18:ae:ef:2e:42:ce:
68:8b:09:87:fd:d8:be:da:a9:d3:02:1f:98:66:23:
8a:8c:34:f7:d6:e1:04:96:07:e5:ec:ad:ae:10:e4:
89:e0:d6:0b:bb:e5:7e:2c:27:d5:f4:dd:f8:76:d8:
2e:71:f4:01:52:be:5b:0f:fe:71:6c:e8:23:92:57:
01:a9:de:42:4f:92:1f:29:e5:9e:32:16:71:90:9c:
95:31:45:e5:20:df:2b:11:2c:d2:de:42:54:f7:56:
60:5c:41:ab:ad:3c:b8:9d:9d:3b:60:e1:1b:a1:6c:
25:03:3b:2e:18:45:bc:9a:4e:1a:37:f6:c5:9b:ff:
fa:ac:a2:9a:0a:83:fe:82:10:dd:db:c3:d2:9b:c1:
49:70:ef:10:42:08:81:b8:0a:ae:c2:f7:4e:d3:6b:
b6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D7:91:99:0F:1D:0E:88:B4:1D:F3:5D:34:FB:92:6F:62:50:FB:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f28dcfb-6300-3890-82ab-009486dcb022.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:b2:2d:ec:be:be:a9:f4:c0:eb:16:41:75:6e:d0:0e:a9:d3:
6a:b0:e3:6e:8d:cd:60:5c:db:ce:b0:e8:12:3a:11:d4:9b:b0:
41:ca:01:3d:61:fc:4b:5e:ab:fb:d0:ae:95:76:fb:de:7d:76:
29:24:2f:78:f1:9e:52:bf:22:42:8b:65:3f:c3:fe:05:cd:67:
ed:16:66:c1:99:8d:ef:d7:d8:46:e2:a2:e3:0f:74:18:4d:f3:
84:23:63:0b:b1:89:a4:ef:cf:0e:d6:12:d8:5a:1a:35:50:80:
2c:ca:3e:1f:b3:7d:bd:15:11:45:72:a6:e8:68:44:05:53:56:
69:a0:53:da:a9:2a:f5:73:f5:5d:d0:03:03:a9:c9:96:f7:ac:
09:2d:27:f5:b0:d0:4a:b5:f6:fc:b5:b6:59:95:b0:49:1a:8d:
3e:4a:2e:25:00:63:49:e6:b5:f4:80:b1:a1:6d:dd:2c:4f:87:
0d:46:44:a4:fa:c3:76:b6:46:b2:73:10:a4:be:0f:29:5b:8d:
13:52:e6:9f:f7:ab:92:48:fe:d6:f5:ae:2b:7d:36:a9:81:18:
ed:20:c9:a9:a4:63:4e:1b:16:10:6a:40:4e:32:cb:5d:9e:c2:
d4:26:53:ef:52:18:fd:55:97:24:b0:4d:85:83:d9:24:86:58:
98:fa:c8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 23:10:11 2025 by rpki-client