Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64412c04-d20e-3f4d-b62d-92533e28140d.roa
File: 64412c04-d20e-3f4d-b62d-92533e28140d.roa (raw, json)
Hash identifier: D4yK+Oscjs8IiWNlTrt6SibUV732XfhqbuYTeAbmbkg=
Subject key identifier: 3D:06:D0:5A:9A:B2:33:B4:E7:26:F1:B7:7D:72:4C:8F:AC:2D:9D:3B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CAAD9B5A6E1E26655A4892BC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64412c04-d20e-3f4d-b62d-92533e28140d.roa
Signing time: Fri 21 Jan 2022 05:00:00 +0000
ROA not before: Fri 21 Jan 2022 05:00:00 +0000
ROA not after: Fri 25 Feb 2022 05:00:00 +0000
asID: 6167
IP address blocks: 161.188.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:aa:d9:b5:a6:e1:e2:66:55:a4:89:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 21 05:00:00 2022 GMT
Not After : Feb 25 05:00:00 2022 GMT
Subject: CN=ebf7b487-ea6a-4603-a715-56c72467c675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7c:92:12:37:b0:fc:05:9e:87:a2:d0:0c:20:
2d:24:9e:e1:01:94:17:48:c1:85:2c:84:e6:1d:eb:
4b:95:58:50:ac:fb:8c:83:aa:4c:1a:4a:19:8f:82:
31:41:fb:4b:b0:98:0f:b4:b2:8d:11:43:bf:86:e6:
c0:ca:d8:24:a2:86:22:3b:60:23:c0:36:d0:3e:51:
19:c3:5f:41:d9:be:87:b6:ff:ba:49:7c:75:ee:45:
16:f6:5b:b0:0e:fc:cb:5c:d9:4a:21:0b:b4:7e:27:
4e:a1:fb:a2:a7:b5:2c:82:57:25:b5:56:e8:e9:7d:
e1:31:d7:35:d1:03:a3:90:8a:b3:bd:ed:46:ee:2a:
5f:92:fc:4b:4f:e6:7e:82:41:fe:5f:6b:9b:a8:65:
53:7c:55:3c:9a:67:9d:6b:5b:d2:d9:b3:e2:f0:98:
97:44:cf:d7:6c:f3:60:36:ed:68:07:1e:63:40:03:
ea:fb:17:32:af:1e:e5:f6:de:85:87:26:63:c2:2c:
6a:86:72:3d:e2:39:bd:84:7b:2d:60:df:44:62:e1:
85:07:ed:70:8e:a5:1d:4b:3a:43:14:e4:16:f4:a7:
c5:c3:b2:44:c0:28:a5:64:86:1e:c4:48:c3:57:3f:
d4:c7:7a:c5:e9:ae:48:cd:b9:c5:ac:d7:74:e0:66:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:06:D0:5A:9A:B2:33:B4:E7:26:F1:B7:7D:72:4C:8F:AC:2D:9D:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/64412c04-d20e-3f4d-b62d-92533e28140d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:4f:ee:07:68:7c:95:98:6d:14:be:bd:38:2f:79:6e:76:ee:
93:f8:38:eb:3c:c3:40:79:8e:46:69:ef:f6:6d:dc:80:73:ac:
8f:92:fd:74:7c:47:9c:db:81:0b:a8:cb:38:0d:30:f8:26:dc:
3f:fa:5b:18:9f:51:d9:2e:9a:8e:12:de:e6:b0:19:5a:e9:9e:
e8:11:d7:ff:9a:5d:5c:e7:08:89:09:fb:a6:ac:6b:bc:da:59:
00:e0:48:dc:4c:e7:e3:37:8d:97:5d:b6:c2:3d:98:06:60:82:
62:cf:6d:19:e6:4c:5a:2c:a4:3d:e2:18:b0:ad:99:75:3e:73:
08:24:08:a1:1d:c3:4f:61:9d:8c:5f:e0:27:4d:72:06:89:98:
27:03:12:10:0c:2f:a1:45:81:73:7a:85:64:b0:2d:d0:95:aa:
d3:25:83:94:6f:2d:ab:73:c4:9a:5f:18:e8:17:99:3b:21:ef:
ff:12:2e:31:f9:10:be:18:b6:21:ad:ba:df:17:3c:ab:1e:e3:
ac:45:7f:1b:16:3d:cc:b8:43:bd:54:9b:2c:77:d3:34:e2:f6:
bf:97:99:9e:6c:b9:8a:bc:20:76:04:e3:69:65:1a:d9:ff:82:
83:c4:82:9b:94:b1:66:1a:3e:b5:10:09:bc:93:57:c4:fb:9d:
8f:93:10:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:38 2025 by rpki-client