Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a9cae0d-6a7b-3aea-9e2d-675812196195.roa
File: 8a9cae0d-6a7b-3aea-9e2d-675812196195.roa (raw, json)
Hash identifier: c5vdUZGmEIFXMijv8aFTgTw/xGR6j6b4tTnE0qYrccE=
Subject key identifier: FD:B8:ED:F9:08:83:B4:F3:24:8F:13:CC:97:23:71:5D:03:5B:CD:B4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C971425F63CC6201DF4D6BF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a9cae0d-6a7b-3aea-9e2d-675812196195.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 161.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:97:14:25:f6:3c:c6:20:1d:f4:d6:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=111dbe2b-8168-47d9-8a72-8a9544b24c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:48:11:26:0c:6e:e6:12:f3:38:49:3f:6b:67:
31:3b:7b:d3:9a:72:9e:72:54:a9:50:47:8b:bd:e2:
69:17:61:c1:ab:3e:3f:88:df:5a:17:3a:41:af:72:
1e:a8:7f:7c:56:f6:c1:d2:8d:d1:91:81:03:67:5d:
83:ab:aa:1b:5c:ab:53:9b:31:b5:73:f6:55:e5:c5:
84:97:28:45:43:d0:a6:3b:85:4d:aa:38:1b:d5:9d:
a6:cb:6c:f0:be:6a:37:19:1a:2d:eb:c8:c8:8c:78:
0b:ab:58:63:8a:d2:06:2c:0a:80:d6:94:f1:39:08:
c0:c6:0c:14:dd:0d:6b:6d:ec:8d:0f:f4:a5:6b:fc:
33:e8:f4:90:a9:e2:2e:dd:7a:32:19:9b:de:34:6a:
23:91:6c:66:16:5b:36:e0:0b:15:23:9b:13:5b:0c:
d2:c6:b6:38:01:9d:29:a0:49:c9:fb:aa:94:9a:da:
55:4a:9c:ae:d0:03:db:25:74:e3:d4:1c:a2:0e:7a:
54:9c:a7:08:50:b7:70:f8:fc:eb:2c:da:cf:36:64:
55:d5:4c:4c:02:30:f7:d1:e2:d5:e7:93:0d:e4:5f:
ca:e3:bc:35:94:3c:54:5d:18:33:0c:ee:94:01:c7:
f5:85:52:c6:de:c6:e7:1c:03:4a:c3:6b:d6:09:f0:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B8:ED:F9:08:83:B4:F3:24:8F:13:CC:97:23:71:5D:03:5B:CD:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8a9cae0d-6a7b-3aea-9e2d-675812196195.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:50:4e:d3:8f:63:1e:70:21:fd:6f:d8:5d:d7:76:06:6d:ac:
1e:64:1d:7b:0a:2f:5a:cc:dc:6a:98:d2:9f:f7:9e:a2:0c:ef:
70:a1:63:7b:81:f2:96:bd:93:07:2f:e5:a0:ef:79:d5:42:33:
12:fb:de:7b:bf:75:af:d7:97:6c:0d:df:03:51:0b:48:41:63:
91:70:14:0d:8f:cd:34:0f:0d:bd:c4:4d:a8:e6:30:64:db:fd:
6e:f8:d5:e4:4c:69:8a:32:5b:44:15:0f:a2:d0:48:f3:91:0f:
a6:3a:1a:1c:db:96:22:e6:7b:da:97:21:a7:96:cf:46:c7:a7:
4c:41:c4:68:dd:68:58:ea:1d:12:35:ef:b3:93:69:cf:39:78:
1a:68:6c:fe:fd:0a:35:55:2e:79:1e:48:56:be:85:2d:d3:64:
f5:35:ab:4e:24:71:0f:11:ff:31:b5:4a:aa:ce:3c:59:99:f1:
63:37:8e:99:d8:72:24:33:cd:b1:d8:7a:3e:d2:bc:9b:9f:bb:
a0:7d:8e:da:c4:04:08:af:79:12:c1:52:3e:90:4e:a9:30:5b:
ea:3e:22:34:8f:67:77:7c:d7:f3:3f:01:c6:2b:43:bf:a6:3d:
19:c1:8f:90:7f:7c:34:63:5a:bc:77:e8:6c:06:1c:90:ad:de:
27:49:9c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:03 2025 by rpki-client