Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/641c90eb-8919-3d91-84ca-6a58e75de37d.roa
File: 641c90eb-8919-3d91-84ca-6a58e75de37d.roa (raw, json)
Hash identifier: B3B5tTUInfUy/WZ7bQwzVPefPaFsA6lZiu0egHOiODY=
Subject key identifier: 4C:DD:93:1E:44:83:59:75:7A:76:5C:1B:8F:52:7F:39:AB:38:E0:7E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBE3100080041BB6CE32CA548
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/641c90eb-8919-3d91-84ca-6a58e75de37d.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 161.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:be:31:00:08:00:41:bb:6c:e3:2c:a5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=d76d0321-49a1-4495-9f76-f6bde5b1a5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:3f:d5:49:e1:19:84:64:00:87:0e:c9:36:
31:f7:85:39:a4:5b:b5:8b:5f:a4:5b:e5:4f:c5:d5:
da:71:05:f9:57:d4:52:ca:1c:1a:24:d7:39:25:ee:
53:39:98:2f:b5:90:99:07:57:10:bd:1e:5f:85:03:
a7:3f:70:e8:84:2f:24:49:f6:d7:0a:d7:82:1a:cc:
71:f7:bd:fa:74:7b:38:5f:b2:78:e7:0f:50:86:09:
e9:b3:9e:b0:99:4e:3a:e8:d8:0a:83:c7:61:3d:dd:
09:02:a8:da:d0:fa:06:5c:da:a2:16:3f:f4:91:af:
7a:b9:61:24:29:9a:c8:27:4c:30:0a:f7:4f:f5:7a:
88:f1:28:4b:35:bc:71:33:13:96:e7:12:e0:b3:e2:
64:d4:d0:0b:58:76:23:78:23:19:3c:26:9a:63:67:
cc:2b:98:4e:ad:7c:8e:58:b1:09:83:23:56:dd:79:
6a:a0:c4:1c:f9:9c:7a:4b:b5:94:3f:66:f9:c6:f8:
30:fa:ec:cc:ae:a3:52:98:12:84:0e:64:61:04:43:
24:66:c2:35:6b:f4:c1:e5:1b:83:fa:9e:cd:c7:7d:
f8:61:8a:8f:e6:a6:eb:6d:d8:76:36:78:fa:63:35:
1b:fa:10:88:43:ac:96:bf:18:46:92:3d:b1:c6:f2:
8e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DD:93:1E:44:83:59:75:7A:76:5C:1B:8F:52:7F:39:AB:38:E0:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/641c90eb-8919-3d91-84ca-6a58e75de37d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:80:20:d8:29:ea:49:3f:04:37:5d:b2:0f:57:23:09:19:ca:
86:92:99:71:22:44:b5:b9:30:02:56:81:07:f8:37:51:6d:4c:
1f:8b:a0:a2:a1:3f:fa:17:85:5b:bb:48:d8:ff:9b:a6:0c:23:
70:f4:6e:ed:32:4d:e2:10:a6:5b:7d:ce:01:9c:3d:8b:01:90:
5b:ae:58:64:d6:00:14:aa:07:2b:f9:27:2b:16:41:cd:ae:f1:
0d:50:9e:34:94:e9:e8:d3:6b:30:b2:23:64:0d:a2:6c:81:63:
9e:1b:4e:33:10:f2:a8:ce:31:9a:2e:16:a5:43:e5:03:bf:08:
2d:bb:f3:47:79:d2:33:d4:9d:7b:95:df:dd:e6:28:d8:5a:43:
74:cb:1a:70:a7:d8:3f:db:6c:49:e8:a3:2a:21:8c:48:0c:89:
0f:0b:76:16:8a:a7:80:96:2a:d9:31:9d:64:4e:1b:72:20:87:
69:6c:46:bd:e9:4f:d8:02:96:f1:d5:f5:b6:bd:16:cf:fe:68:
56:9f:fe:85:d7:e4:d5:66:66:13:42:56:21:ac:44:4e:d7:3a:
a1:3d:f4:f4:d5:64:7e:4a:ed:e6:30:e2:8e:5c:46:9e:fa:7b:
db:8f:68:bc:b0:84:44:bf:a4:92:4e:7d:ac:32:15:59:fb:73:
97:4a:59:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:21 2025 by rpki-client