Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f498a63-82d7-303c-b333-353d33fb81ef.roa
File: 6f498a63-82d7-303c-b333-353d33fb81ef.roa (raw, json)
Hash identifier: owYxp6u+jwNKbYqWqQOjSnxFNWi3J75+WL6vfaz/6mw=
Subject key identifier: 75:C3:20:D2:64:57:9B:36:02:85:99:62:D0:12:7C:B9:E2:43:DF:1C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB775C0DA1E51F941E0291CA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f498a63-82d7-303c-b333-353d33fb81ef.roa
Signing time: Thu 27 Oct 2022 12:00:00 +0000
ROA not before: Thu 27 Oct 2022 12:00:00 +0000
ROA not after: Fri 02 Dec 2022 05:00:00 +0000
asID: 6167
IP address blocks: 161.188.0.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b7:75:c0:da:1e:51:f9:41:e0:29:1c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 27 12:00:00 2022 GMT
Not After : Dec 2 05:00:00 2022 GMT
Subject: CN=04941179-e1c9-4e08-9a62-cb3403d90dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:8a:79:bd:dc:70:8c:f5:2c:0c:a1:92:e0:66:
a6:3b:88:4a:24:45:1c:0c:6e:64:0a:eb:2f:a7:0f:
02:9e:fd:d6:52:50:6c:88:8d:85:09:e8:b8:69:5f:
5b:69:39:19:a5:ec:4c:ec:da:bf:6a:39:82:e2:94:
69:b0:fb:2f:8d:95:a3:d1:6b:30:0c:b4:af:1d:a4:
b5:71:57:19:5e:4e:43:2f:3b:6c:cc:2d:e6:96:d3:
b8:13:23:06:4c:35:04:86:65:8a:ea:eb:af:bb:8a:
03:b4:ee:cd:89:14:c6:49:5e:1a:f5:6c:ed:d5:a8:
98:0f:a4:6d:40:d6:ef:43:cb:21:26:d6:1f:af:01:
9a:d7:58:06:73:b9:10:aa:67:e1:c6:13:5d:13:47:
5d:18:51:d5:13:f4:87:6d:79:03:78:ee:b8:98:ab:
d4:b5:99:84:82:24:43:04:a6:ec:35:96:f4:31:f5:
03:4f:33:7f:5c:c8:14:d7:a6:f4:a7:2a:75:21:6b:
de:dd:1e:ee:ba:e1:12:b2:e1:5d:12:ad:10:a4:ff:
a7:1a:80:bd:55:99:fd:c1:c1:6e:63:ff:57:55:b2:
09:89:63:7f:af:46:31:19:fc:99:4c:d6:0e:2f:f1:
ad:b6:92:69:7e:59:b2:d3:83:10:fb:c4:e2:e1:48:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C3:20:D2:64:57:9B:36:02:85:99:62:D0:12:7C:B9:E2:43:DF:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f498a63-82d7-303c-b333-353d33fb81ef.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:6b:ab:1e:2f:47:ae:62:d3:05:17:20:27:c3:de:9a:f2:4b:
d2:67:60:95:bd:a2:bf:cc:db:39:01:68:0c:ab:ec:e3:1c:49:
73:4a:8a:5d:a0:af:57:27:2c:16:55:ff:c4:db:5d:51:f0:f4:
92:aa:8b:b6:16:0a:c2:48:f2:8a:42:6e:3e:0d:29:0b:83:78:
2c:d4:ba:e3:6d:cf:40:44:59:0b:12:76:e7:8a:38:84:b2:17:
54:22:1d:71:92:c1:a5:b6:d4:14:ad:86:aa:a8:42:eb:1c:d2:
6b:38:ee:82:0f:0b:c8:e0:09:9b:4d:0d:6f:cf:a8:64:b8:67:
51:79:99:a4:d6:c2:cc:fa:7d:de:35:d4:2b:ff:79:f7:2a:1f:
1e:a8:48:4d:15:79:cd:a3:9c:3c:b3:e6:7d:58:d8:6d:19:d0:
aa:df:ea:6a:ef:06:57:57:4a:f8:96:f2:24:f2:50:c2:a5:f0:
d3:92:84:39:40:92:a5:cc:90:93:d5:ad:e6:ba:22:08:b6:56:
db:e2:0a:e7:df:2b:1b:19:77:61:2d:98:96:cf:b8:94:af:de:
b9:ed:41:5f:63:dd:7b:bc:77:0e:c3:dd:cf:5e:85:b2:d1:e7:
b1:79:e8:14:13:b7:4f:1e:06:05:a0:c7:71:72:f8:46:11:81:
7f:e9:8a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:02 2025 by rpki-client