Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72a7d99c-bb93-327a-b372-fd684d20340c.roa
File: 72a7d99c-bb93-327a-b372-fd684d20340c.roa (raw, json)
Hash identifier: 9T/R/yQ6/LiFfxSkvazNxMxerPOi7f4uNE96qRXivyQ=
Subject key identifier: 6D:46:5D:54:A4:EA:96:BB:78:FB:03:42:7F:22:AE:C8:24:3E:56:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E7E4331183A2D5D7C50A67DB0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72a7d99c-bb93-327a-b372-fd684d20340c.roa
Signing time: Thu 07 Jul 2022 12:00:00 +0000
ROA not before: Thu 07 Jul 2022 12:00:00 +0000
ROA not after: Fri 12 Aug 2022 04:00:00 +0000
asID: 36263
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:7e:43:31:18:3a:2d:5d:7c:50:a6:7d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 7 12:00:00 2022 GMT
Not After : Aug 12 04:00:00 2022 GMT
Subject: CN=e15e7537-0d9d-4c0c-9681-f9cb91036126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:50:4f:e7:66:43:88:cd:da:5d:84:45:1f:49:
0f:19:f9:e1:d1:fa:3a:6f:c3:53:14:78:d3:79:04:
d3:e2:a9:73:1d:d9:84:96:6d:8f:61:5a:ca:5a:90:
1a:c5:3c:93:06:c2:83:fb:15:86:f2:49:14:50:0c:
a0:a0:66:a9:20:d6:fe:68:4d:de:04:34:72:c5:1e:
e1:9f:ed:54:72:c5:1b:e7:6b:04:5d:16:49:8c:22:
5a:73:fb:4c:92:3b:92:9f:ba:a6:4c:12:7e:89:e5:
18:47:3b:98:64:c8:ac:d4:29:81:33:cf:4a:a3:12:
a1:69:cb:73:86:61:1f:d5:09:95:e1:3b:74:0c:57:
4d:93:c8:87:03:07:99:b2:e2:3c:02:cf:cc:65:23:
9a:bb:13:1b:c2:43:16:39:66:36:00:e6:9a:ff:37:
4c:e3:70:5e:91:b0:ec:67:f3:88:46:33:ac:8f:74:
d7:d5:2c:cb:7c:11:0c:e9:05:7b:05:47:e3:b5:8c:
05:bd:f3:7f:e7:45:4b:ca:19:3a:03:19:78:80:18:
5f:77:90:41:5e:89:68:a8:49:d7:8d:c7:f9:c9:55:
5d:14:3a:7c:cc:8a:04:4f:f1:6d:f9:10:df:c2:0d:
c5:1b:57:33:e9:9a:da:50:4b:31:13:35:ce:17:a7:
ec:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:46:5D:54:A4:EA:96:BB:78:FB:03:42:7F:22:AE:C8:24:3E:56:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/72a7d99c-bb93-327a-b372-fd684d20340c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:32:c3:d9:c7:48:41:66:15:5f:70:1b:d0:8b:c1:0f:c1:ce:
59:01:a2:90:c1:fa:de:92:50:5a:cd:60:4a:9a:83:d9:7d:01:
ce:c4:ea:98:75:30:15:3b:b0:18:13:0d:b4:53:b2:ad:16:0a:
d0:1c:1e:69:26:9d:88:b0:25:59:53:78:14:45:ef:8c:3b:7b:
d5:b7:67:15:23:14:24:b1:be:4c:f5:61:e0:61:b2:f8:1b:fb:
3a:81:e6:76:32:b3:55:ec:f7:a0:81:84:6f:f8:39:af:25:fc:
49:ef:9a:28:58:46:e0:a4:8d:92:58:02:b5:05:8c:99:dc:6d:
0b:30:31:5b:30:ca:1c:19:2b:ed:48:31:9a:a3:4d:44:e3:a7:
2b:36:a1:b1:2d:6d:8c:6e:f8:5d:af:77:8f:d2:f1:86:e2:22:
58:3b:28:1f:d7:f4:4a:8c:5d:76:59:9c:a1:39:73:a9:83:f3:
4e:2f:e1:56:11:d4:44:ef:39:5a:b3:c4:a7:3e:5c:70:c1:54:
af:7b:86:de:a6:c7:75:9a:33:8d:17:9c:1a:31:02:8c:7f:3f:
e6:c2:67:33:5a:c7:cd:ca:c2:3f:7a:df:7a:7f:e2:f7:5e:fc:
05:a1:ec:74:47:8b:8e:a4:5b:80:1c:67:0a:26:38:af:cf:32:
12:f7:b6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:44:23 2025 by rpki-client