Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b4c5672-79f9-36c5-94df-9da92a28fa64.roa
File: 7b4c5672-79f9-36c5-94df-9da92a28fa64.roa (raw, json)
Hash identifier: H1OtnDrNVd6c9NK/Kk0NU0IKbTXYB0B04F/gMMq/xqE=
Subject key identifier: 6A:0B:6B:A8:DE:19:BB:11:0C:4B:18:86:2F:9C:11:CD:39:23:48:46
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D45629AA60618AFB3CE95D280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b4c5672-79f9-36c5-94df-9da92a28fa64.roa
Signing time: Thu 17 Mar 2022 04:00:00 +0000
ROA not before: Thu 17 Mar 2022 04:00:00 +0000
ROA not after: Thu 21 Apr 2022 04:00:00 +0000
asID: 3356
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:45:62:9a:a6:06:18:af:b3:ce:95:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 17 04:00:00 2022 GMT
Not After : Apr 21 04:00:00 2022 GMT
Subject: CN=9f72454e-b4e1-4ba6-b82b-feb0bbe37173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:65:53:aa:ee:36:2d:8e:cb:91:00:ce:d5:5f:
8d:87:3e:65:a3:3c:ab:d5:df:4c:48:b0:be:fb:73:
25:01:db:1e:04:7a:94:bc:10:87:b3:ef:d1:09:6f:
ef:de:fc:e9:60:2d:79:6d:62:5b:a2:6b:35:ca:44:
09:91:a9:57:d2:09:9a:da:f1:a7:88:e3:5b:8b:18:
c0:0e:83:21:1e:00:c0:a6:24:c9:af:e9:4b:ec:32:
7a:a9:da:2f:fc:07:98:2e:15:ec:c1:d6:0a:0e:05:
1f:45:3b:23:46:f5:d1:6a:95:8b:b1:03:23:c8:ea:
02:d1:0b:3a:df:eb:1d:ac:f2:32:8b:e1:4e:f1:1b:
64:bb:8f:a6:2b:ca:24:32:ea:2c:98:9d:0f:95:76:
e7:84:48:a4:66:7c:86:e0:08:62:d7:4e:f9:94:00:
2f:72:02:a4:c3:58:44:9b:0e:9c:a1:d4:8d:f6:fe:
75:5b:a6:de:1a:22:f4:cc:82:42:2c:26:77:1b:ef:
8c:9b:d2:54:16:30:5e:f1:fc:04:09:16:96:fc:69:
3b:44:21:62:93:17:d6:74:06:df:5f:f6:63:12:4d:
cb:c0:b7:1b:a0:64:57:d4:c1:1b:83:5c:a5:fc:81:
05:d0:4a:18:0d:c7:06:ce:03:f4:dc:ce:a0:bf:43:
b4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:0B:6B:A8:DE:19:BB:11:0C:4B:18:86:2F:9C:11:CD:39:23:48:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7b4c5672-79f9-36c5-94df-9da92a28fa64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:a2:9b:f2:8a:25:98:55:75:11:76:f7:e9:de:2c:1f:c6:26:
6d:3a:1c:75:c0:94:c4:96:8e:41:eb:55:0a:18:c5:13:df:b9:
c7:81:cb:47:2f:5e:d0:4c:ee:fc:ad:4a:6d:a9:cc:a3:e9:a9:
5d:88:1e:3d:85:ae:a9:4d:d2:e5:c2:02:d7:1b:34:7b:37:5e:
be:90:5f:88:b5:31:67:73:3f:0d:90:6b:c5:57:30:82:5f:ff:
ee:a1:85:f5:ee:12:0b:59:16:61:97:45:e1:1d:43:f8:ae:86:
98:f1:d7:02:1f:3a:09:1c:34:dc:3f:d8:c5:d0:7b:ad:84:5c:
20:af:fe:aa:16:bd:69:d1:88:3a:b1:ac:01:c0:2d:d5:fd:1a:
bc:51:57:d1:33:71:c5:52:ca:08:7a:7f:35:fb:f6:8e:c6:ca:
fb:18:cc:46:fb:cf:8a:93:b8:37:60:7f:1e:df:f1:5f:61:e2:
78:72:90:3c:60:24:56:02:e5:86:94:e9:77:1a:1f:4b:0d:34:
f8:f0:00:65:ed:a4:c2:45:a6:46:15:80:9e:92:5f:8a:00:b7:
63:cf:e3:8b:4b:ca:ea:88:11:2e:df:01:53:a1:f7:a6:37:14:
2c:2b:44:36:05:a7:a9:c8:1a:52:97:f8:96:5d:63:d0:cd:f7:
61:fc:40:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:38 2025 by rpki-client