Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cfcf9f3-90a2-39a8-9ee0-a03fc5996697.roa
File: 7cfcf9f3-90a2-39a8-9ee0-a03fc5996697.roa (raw, json)
Hash identifier: tI7Rz1+xqzFWBkaZ6y5Te+VSoz3lSHO7OwKjFClixGQ=
Subject key identifier: F7:AE:4C:F7:F6:AE:2A:D5:07:C3:89:C5:38:22:34:76:52:B5:86:C6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DB56729445E60116602376F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cfcf9f3-90a2-39a8-9ee0-a03fc5996697.roa
Signing time: Tue 26 Apr 2022 12:00:00 +0000
ROA not before: Tue 26 Apr 2022 12:00:00 +0000
ROA not after: Wed 01 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:b5:67:29:44:5e:60:11:66:02:37:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 26 12:00:00 2022 GMT
Not After : Jun 1 04:00:00 2022 GMT
Subject: CN=1f6f4f56-b819-4e8c-906f-ed2695f2e1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:d8:14:b5:a5:99:50:93:08:ca:54:9b:5c:
7d:ae:f2:0c:27:6f:b8:b8:22:8e:43:f7:b4:31:65:
4b:24:4c:72:db:49:58:ed:1d:0c:3e:88:3b:32:20:
e0:34:4b:f1:01:40:4e:8c:b6:7a:da:c9:ca:7c:ce:
31:25:43:1d:f7:21:ac:5c:6d:c3:72:b4:21:bc:73:
58:b4:34:b8:04:91:08:81:d1:91:f8:87:cc:47:5a:
a3:32:5b:8d:93:62:f2:03:b3:ec:af:29:81:0c:2f:
cc:70:bc:a9:ee:4b:f9:2c:6a:ff:0b:bb:d7:bb:26:
72:df:ba:b6:f3:d4:71:3e:3e:59:93:dc:32:26:b4:
e4:5c:ce:05:65:2d:dd:f1:ae:ab:23:4b:3c:37:26:
2d:60:e1:dc:49:29:52:c2:fe:eb:ed:73:60:25:6b:
30:c5:99:c1:12:12:ce:6c:1e:e0:d8:65:a5:4c:04:
61:df:03:15:22:99:2c:49:cf:69:cc:3a:d4:da:82:
a6:2a:c2:e4:d8:40:f1:c2:60:b5:c4:83:f9:fa:47:
54:4f:91:4f:a7:ab:18:47:cd:7c:d6:34:d7:44:9e:
95:92:79:04:e3:e5:04:17:ca:79:c0:98:e5:9e:52:
7a:92:b4:de:c7:09:8e:17:68:dd:73:91:9d:fc:fe:
69:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AE:4C:F7:F6:AE:2A:D5:07:C3:89:C5:38:22:34:76:52:B5:86:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7cfcf9f3-90a2-39a8-9ee0-a03fc5996697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:70:c5:6d:64:75:52:3a:40:f6:1d:db:44:36:47:5b:1a:e2:
4a:5d:93:45:53:6d:01:22:91:3c:71:95:4d:f5:06:85:99:73:
44:30:a0:cb:af:b1:4a:d5:b0:ed:ba:7b:37:e1:84:53:88:cf:
d7:c3:76:be:22:e5:35:f0:64:19:2d:a6:18:ac:d0:73:1f:83:
b2:bb:06:45:86:a2:8d:ce:1c:dc:d7:bb:cc:1a:d6:f6:bc:4e:
72:ec:37:33:b4:9b:96:74:50:a3:4d:bd:38:11:36:85:da:80:
88:f8:20:f0:db:11:a3:dc:37:93:66:9b:07:88:07:28:f9:48:
f4:b6:d2:2d:66:28:da:68:32:1a:23:88:4a:bd:4b:16:13:d5:
80:39:91:a3:67:9f:20:f1:44:6f:d5:ad:86:fd:7c:89:6e:62:
9c:b9:6a:ff:df:f6:33:1e:f3:bb:b4:eb:10:5f:b7:22:80:80:
07:a7:74:04:65:15:e5:df:d2:50:3b:fa:82:d9:48:53:88:3c:
ac:24:bc:c5:2a:4e:7d:2b:55:8f:7e:5f:a3:c6:d9:c4:30:86:
72:4c:9e:33:2b:e8:41:c0:93:09:39:77:72:91:10:47:ef:be:
da:bc:2e:d1:05:2d:69:9a:74:04:ad:26:b5:8d:e1:14:38:e9:
e8:31:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:43 2025 by rpki-client