Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/809ba368-6bf6-3917-9f5c-ed378fdc70aa.roa
File: 809ba368-6bf6-3917-9f5c-ed378fdc70aa.roa (raw, json)
Hash identifier: ua83ZJ6raBj/xNO3lR1ahbiSKydzJTfeSJfr3IMlKw8=
Subject key identifier: 0E:27:69:3B:75:B1:C9:A3:43:44:DC:7C:59:D9:F8:DD:2E:D9:3A:A5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCEC0F69DF06C124080367580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/809ba368-6bf6-3917-9f5c-ed378fdc70aa.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 161.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:c0:f6:9d:f0:6c:12:40:80:36:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=6049a0c1-5341-4b2c-8446-abf90026a1e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:9d:7d:a3:2b:86:79:50:b2:8e:a9:6f:36:19:
a7:43:16:bb:81:e4:79:fd:96:15:80:02:d2:fd:00:
04:f6:8a:7b:31:1f:1f:af:3e:d2:e1:b0:94:29:dd:
49:82:c8:c6:5d:2b:ac:9a:10:07:cb:43:83:e3:40:
47:dc:3b:fa:88:1c:4a:95:db:b4:29:af:e2:f3:9d:
f1:e0:0e:d5:ee:6e:f7:59:69:17:6a:ca:4f:4f:28:
92:82:19:3b:ff:f5:77:87:b3:38:80:c5:0c:61:c2:
91:9b:84:6f:d7:42:20:4b:18:9b:11:98:7f:af:5e:
9c:db:77:a0:a0:54:33:1a:20:26:73:bd:4c:cc:44:
39:13:15:c1:6c:ed:02:b1:d1:2d:7f:f6:65:d7:19:
48:c3:0f:bd:c8:30:65:fc:f4:9b:c3:cb:2b:18:d5:
40:8d:4b:57:62:f1:89:63:24:73:0d:f8:39:78:eb:
81:f0:80:70:49:a1:2f:1d:3c:e1:0b:5c:c7:a7:9d:
14:a4:d2:ef:39:7d:f1:79:09:4c:7f:49:4f:ab:37:
4b:c0:6c:1c:fe:f3:b4:86:d8:32:0c:d6:46:9e:f4:
78:73:45:3e:45:0c:8e:58:08:a5:b1:bd:d3:66:42:
22:a7:58:24:e0:d2:8e:bc:26:e6:81:20:29:fb:a7:
74:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:27:69:3B:75:B1:C9:A3:43:44:DC:7C:59:D9:F8:DD:2E:D9:3A:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/809ba368-6bf6-3917-9f5c-ed378fdc70aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:9f:f6:5a:b7:57:cd:f9:1e:72:f3:ae:9d:a7:09:25:d7:85:
de:22:5b:60:33:67:0b:3b:a7:e8:91:63:d8:73:9a:e8:77:b3:
46:4c:25:b3:02:51:76:86:d7:7d:d4:cd:7f:80:e3:52:46:2c:
38:89:43:19:fa:5d:e5:e4:c4:98:f6:76:30:99:6f:e4:b1:d5:
b5:35:1d:75:10:9b:99:e4:11:c1:86:7c:00:d0:0f:3e:5d:e3:
ae:3f:3d:f7:fc:0c:59:e4:a1:bc:9b:86:37:d0:83:96:a5:dd:
38:0c:af:e6:26:5c:9b:09:49:a6:44:80:56:b9:2b:bb:c6:fb:
75:2c:1a:f3:f4:91:80:97:fd:73:92:f1:ec:7c:e6:00:cb:86:
77:ea:60:23:83:9f:9f:30:6c:0b:0f:e9:50:f3:f2:ac:1e:da:
23:90:33:b8:52:2f:58:64:8c:98:31:77:f7:d0:3b:18:f0:9f:
a5:6f:a5:7f:66:2f:f4:87:90:1c:26:e5:5d:7d:4c:a8:e9:66:
9b:73:d9:7f:f6:c9:2e:83:f3:24:6b:dd:da:56:f4:ec:1e:1d:
a7:74:81:7b:10:20:74:97:6c:83:95:ed:29:36:a1:43:a9:76:
42:a7:ec:d2:39:65:bd:49:49:2a:3c:5b:ac:2c:8c:d5:b0:30:
71:59:38:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:53:50 2025 by rpki-client