Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99b352e7-cfb0-3de0-b943-01dbd532c330.roa
File: 99b352e7-cfb0-3de0-b943-01dbd532c330.roa (raw, json)
Hash identifier: GqX0B6BwhT0TSatzlYFF4JJkzYgcD80pLJ9byZTT06w=
Subject key identifier: 3E:FF:21:40:AE:12:93:87:4D:FF:D5:06:41:67:B5:7D:A2:CC:07:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CE54E4F17D3610C4ECA99DD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99b352e7-cfb0-3de0-b943-01dbd532c330.roa
Signing time: Fri 11 Feb 2022 05:00:00 +0000
ROA not before: Fri 11 Feb 2022 05:00:00 +0000
ROA not after: Fri 18 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 161.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:e5:4e:4f:17:d3:61:0c:4e:ca:99:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 11 05:00:00 2022 GMT
Not After : Mar 18 04:00:00 2022 GMT
Subject: CN=0518e6d6-fc3d-44f0-8dc5-fde60f6b9c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:dc:4c:13:95:d3:f5:b6:78:ac:75:63:9f:
48:13:4d:af:7e:fc:93:6d:91:3f:e5:6a:09:3a:79:
6a:8d:ff:d2:5a:a3:56:80:a6:90:27:20:0f:57:0a:
3c:0b:07:a2:51:ee:04:d2:2c:3e:e1:2c:83:12:7e:
e3:e8:12:4b:93:8c:61:e1:b0:ab:a1:58:24:79:ec:
06:af:48:01:36:da:38:af:a4:c3:fb:d2:33:f5:ce:
27:92:dc:53:9f:77:ef:e8:88:14:28:b6:2b:d3:81:
98:da:53:a7:44:94:57:de:be:cc:b5:e4:a6:36:2e:
11:0c:4a:3b:5f:91:5e:47:22:9e:5d:c9:3d:c8:bf:
60:2e:b7:fa:9a:df:15:b4:ea:71:ae:71:8f:25:93:
21:20:75:d3:df:52:31:df:b8:ea:21:ef:fe:87:cb:
2a:a9:87:4d:4b:1e:25:65:d1:70:2a:d2:29:4f:71:
87:33:38:15:bb:ae:41:02:dd:8f:37:58:71:d3:03:
70:a2:c0:f7:9f:cf:fa:2f:3f:55:e5:a0:df:11:63:
7a:29:52:0d:5c:7f:d1:c7:a0:94:22:ab:78:43:29:
e9:dc:91:62:ac:0f:91:2b:3e:c0:0b:24:a2:70:53:
d1:27:ad:a7:81:dc:00:7b:61:29:a8:45:80:9e:2a:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FF:21:40:AE:12:93:87:4D:FF:D5:06:41:67:B5:7D:A2:CC:07:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/99b352e7-cfb0-3de0-b943-01dbd532c330.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:c7:01:91:d6:26:b8:db:a7:02:0b:a4:ea:b2:6d:68:ab:69:
28:fb:fa:d8:d3:d4:60:b9:a9:32:e7:c7:37:2c:8a:84:47:ea:
ff:1b:68:90:c6:8c:9a:ea:c3:9e:94:41:2a:3f:20:39:b7:c0:
6f:89:33:2d:a4:08:16:de:bf:ff:43:c8:fa:41:12:50:e8:c0:
a7:ac:40:9e:25:ca:c4:ee:f3:b4:57:98:87:44:f4:4f:9f:5d:
c7:67:c0:82:2f:9e:a3:d7:ec:43:0a:ca:18:0d:92:3c:56:90:
c8:ea:7d:d1:6f:00:0c:62:d5:44:df:b8:05:12:a3:3c:37:b4:
df:87:bc:4e:ca:9c:4a:fe:93:c0:ea:77:17:b1:fe:d5:21:95:
db:62:3a:3c:fa:78:91:15:9b:68:c0:99:1c:b6:db:80:a7:cf:
e1:76:77:a8:97:a4:09:3e:a1:10:19:67:7c:3f:e6:04:b6:0f:
28:9a:8a:bb:62:95:12:b1:34:cf:24:e5:8c:28:f5:a0:73:c6:
2e:a4:f3:33:be:62:c6:79:c1:2e:f2:0c:b9:4d:d8:ad:96:39:
7b:f5:c2:c5:04:67:fb:ea:e4:f8:9c:31:05:e9:bf:bd:63:f1:
42:d2:7c:3e:b5:0c:15:8b:d6:c4:82:a3:3b:c1:88:a3:5e:ab:
2f:7e:6b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:58 2025 by rpki-client