Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aa4671d-3404-3cfd-a4db-9b90857548d3.roa
File: 7aa4671d-3404-3cfd-a4db-9b90857548d3.roa (raw, json)
Hash identifier: 68r8pFUCQrxLQFzRavnDiJlXcG7d/bQVJ+xj+Dsp0Oo=
Subject key identifier: E9:F5:03:32:E3:02:91:D5:F9:46:62:30:C4:3F:41:2C:2F:AD:39:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F69259DBAF2AE3E4954356B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aa4671d-3404-3cfd-a4db-9b90857548d3.roa
Signing time: Thu 29 Sep 2022 12:00:00 +0000
ROA not before: Thu 29 Sep 2022 12:00:00 +0000
ROA not after: Fri 04 Nov 2022 04:00:00 +0000
asID: 3356
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:69:25:9d:ba:f2:ae:3e:49:54:35:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 29 12:00:00 2022 GMT
Not After : Nov 4 04:00:00 2022 GMT
Subject: CN=6bd6064d-9328-4f78-b364-de21617d353d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e1:d4:45:e4:9b:33:2a:32:d8:0d:e5:37:5f:
7a:c7:9a:ca:e4:45:cc:6c:47:bc:94:ee:ce:4d:ec:
54:17:28:02:58:73:35:7b:b6:b1:c6:8f:03:a2:f1:
30:2f:a1:c9:4c:0d:5c:be:84:23:e7:7e:63:da:dc:
10:fa:9c:2e:34:7a:03:26:1c:fa:e2:4d:3f:73:2a:
44:57:ca:e0:31:13:20:a6:06:4e:5d:4d:2b:cf:92:
f9:d3:09:43:8a:fd:53:4d:a7:12:e2:8d:56:55:0d:
c7:1f:eb:ed:6f:d9:50:42:0b:12:f8:11:e3:dc:01:
94:95:51:9f:15:14:09:c9:86:8a:74:97:14:0e:5a:
e1:fc:db:f6:f3:49:fe:b2:17:96:d9:4d:91:fe:1f:
5f:4d:e8:7f:d1:c9:04:68:ec:cf:fb:77:75:d4:80:
fe:13:2f:ad:9b:e9:85:d4:7e:c1:11:a4:ba:26:34:
06:3d:14:c5:46:d0:eb:82:2a:f6:f1:2d:1c:2a:d6:
39:79:f1:30:cb:ce:46:25:1d:c6:e5:10:22:a1:e6:
fe:b7:7e:a4:d7:46:c0:6d:78:b0:f2:fb:4c:6b:1c:
f9:6d:b5:8f:70:a5:6c:55:c2:3b:42:1b:9b:26:46:
0c:0d:02:ab:55:f8:a0:dd:94:a8:41:a5:63:3a:2b:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F5:03:32:E3:02:91:D5:F9:46:62:30:C4:3F:41:2C:2F:AD:39:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aa4671d-3404-3cfd-a4db-9b90857548d3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:e1:3a:a3:75:74:00:7b:70:c4:01:6f:fe:9a:28:0b:ec:0a:
0c:47:7b:bd:13:7a:bf:67:d8:c4:47:13:da:92:80:1d:9a:ea:
96:1b:a9:c8:20:49:c6:03:b1:b4:d0:aa:d5:a0:23:2a:1c:4b:
b7:1e:2b:1f:5b:1f:dd:1d:ef:7a:91:ab:a5:95:2e:80:1e:56:
83:41:1d:cc:25:32:72:ff:a2:67:29:2f:3e:67:7d:3d:4e:54:
69:85:1a:20:6b:41:3a:d1:56:3b:66:f2:4c:07:60:1e:f3:78:
d4:12:0b:4c:a1:03:9a:79:88:6c:92:61:7f:d5:e8:e4:5b:d6:
09:c3:d2:6b:aa:9e:a7:ee:35:d8:4f:45:a7:6a:4e:f3:de:ca:
0c:5d:1c:1a:e4:1b:3d:34:ac:23:79:34:0e:f8:f0:ce:0e:73:
d6:e6:36:65:33:fd:36:46:c1:46:28:54:ec:3a:f4:41:30:6f:
d2:7b:d0:47:2b:59:65:69:05:22:30:d8:3d:81:1e:12:ef:16:
65:b9:81:01:64:95:3c:4f:3b:b0:ad:92:64:0c:a9:33:08:7d:
80:b1:f0:4c:47:96:16:3d:90:7a:13:1a:58:67:a8:d7:e5:c5:
ac:22:b3:a7:42:f3:74:35:75:30:8b:a5:96:0b:28:7a:b8:65:
02:52:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:39:52 2025 by rpki-client