Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68f98f75-87aa-3eec-8bb7-5ef9294284e7.roa
File: 68f98f75-87aa-3eec-8bb7-5ef9294284e7.roa (raw, json)
Hash identifier: ECyhbUbKM6I9xcm6yISCZ1fpi6bAnDH9JZuGd1bMlW0=
Subject key identifier: BC:9A:A3:89:BE:A0:1B:EF:A0:A0:A7:E7:4B:5A:25:0E:C5:17:5F:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDEA1AD45F11FDB11301F0F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68f98f75-87aa-3eec-8bb7-5ef9294284e7.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Fri 16 Dec 2022 05:00:00 +0000
asID: 6167
IP address blocks: 161.188.16.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:a1:ad:45:f1:1f:db:11:30:1f:0f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Dec 16 05:00:00 2022 GMT
Subject: CN=c058e108-9c17-403b-8415-0e8e58f1ebe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:a5:a0:94:ff:77:a6:07:3b:05:a8:f7:45:
04:9e:64:86:76:6b:bb:24:d2:40:fa:7a:b1:7a:8b:
74:5e:0d:24:8a:9c:09:e6:7c:88:15:7e:4c:c9:42:
85:06:e6:97:1c:ff:d0:c2:05:0a:21:c0:77:d7:a4:
27:14:61:9c:f2:00:88:33:44:50:64:32:44:8f:1e:
e2:12:5e:4d:30:f1:f3:e2:9d:e6:58:47:38:b6:4c:
50:b6:31:a4:02:97:8a:96:0a:63:45:f1:e0:bb:7e:
ed:06:c9:e7:08:6a:23:e3:2e:45:f9:b9:08:f8:be:
0a:5c:b2:48:42:c9:f9:32:60:ed:e4:a1:de:04:7c:
55:6d:f2:59:05:ea:a2:a7:ef:24:cc:51:e5:bf:50:
ff:d8:1d:45:9f:d4:3c:81:1c:25:29:20:c8:eb:6a:
38:c9:55:14:23:4c:31:0a:fd:2f:fa:a1:dc:ed:b8:
96:8a:27:99:79:87:a0:36:50:4a:c2:b3:59:7c:5e:
51:c0:4a:82:ac:11:a8:35:d2:67:d4:dd:48:ae:44:
13:1d:42:38:2e:6c:08:54:fc:5f:25:7f:dd:47:74:
8c:eb:d5:5c:14:11:40:57:df:e4:8f:a2:e3:26:7a:
eb:a8:c6:70:2c:18:5d:59:e7:f3:c6:8d:dd:a3:24:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9A:A3:89:BE:A0:1B:EF:A0:A0:A7:E7:4B:5A:25:0E:C5:17:5F:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68f98f75-87aa-3eec-8bb7-5ef9294284e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.16.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:4a:0f:6f:4a:c4:04:44:53:82:59:c3:54:52:a2:02:93:3f:
fe:2e:cc:87:20:0f:c5:2d:57:fa:61:af:18:ce:32:6a:23:33:
38:05:ad:a6:07:13:38:73:e3:36:06:72:10:47:f3:7b:d4:7a:
8a:06:65:98:0e:e0:2e:35:2e:44:90:27:4d:fa:b9:3a:2f:e7:
25:dd:6d:78:55:5b:e1:cb:56:33:e4:f1:c4:01:87:85:ea:ec:
5b:b7:f8:d3:41:f8:ae:a5:0b:17:19:49:c6:2e:87:8e:a7:c0:
a6:86:2b:7c:eb:d0:83:72:e4:27:cc:2f:91:ff:af:7e:02:36:
d2:1b:aa:0f:73:dc:bb:01:40:04:c4:fc:2d:85:0a:cf:82:2a:
df:c7:12:08:a2:00:46:eb:b2:cc:18:91:1f:0e:fa:23:0b:20:
b8:d9:8f:cf:28:e1:b7:93:8f:c5:65:84:d2:2c:93:7c:c7:87:
3f:fe:f7:35:c8:71:53:85:3d:b4:9c:ae:5a:76:0c:c9:71:5c:
96:0d:6d:bc:58:49:2b:d7:26:66:cf:44:75:9b:a5:63:00:f1:
c4:64:6c:27:c2:84:2a:75:ad:16:57:a2:08:f7:1f:39:86:fe:
0a:09:28:f3:d0:34:57:7b:d7:d9:a9:e2:9d:aa:54:33:59:af:
21:a8:25:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:27:35 2025 by rpki-client