Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5628bf7-d341-3b98-a031-79270bb11ec2.roa
File: a5628bf7-d341-3b98-a031-79270bb11ec2.roa (raw, json)
Hash identifier: jVIsl1cjHf9HXf0zhAxt+decZGw2UJi1mKhhYSO9cuk=
Subject key identifier: 40:D3:B4:22:B4:69:09:07:58:52:59:70:E2:48:68:72:C8:7B:82:7C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401BD8D4DBFBF91ED5C8D30800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5628bf7-d341-3b98-a031-79270bb11ec2.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 161.188.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1b:d8:d4:db:fb:f9:1e:d5:c8:d3:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=5087cbfd-08ad-4bbf-ba7d-7e9b74a1c8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ca:ce:93:95:5b:30:92:53:6d:47:23:50:9e:
f9:40:26:1b:16:96:ee:5c:88:b2:23:8d:28:f3:d2:
63:f7:2d:19:75:f2:2b:15:77:af:65:da:2f:e5:28:
44:e4:cc:21:f8:43:03:6a:c1:07:9e:fc:11:e6:ef:
c0:17:49:8b:21:f4:70:a9:c7:1b:71:45:17:e7:31:
1c:88:4f:e7:14:67:e0:63:9a:60:2e:b6:1e:cf:aa:
33:48:3e:7a:0d:37:8a:ff:da:bf:d5:c4:5b:5d:c1:
fb:26:3b:85:94:07:3e:60:5d:fc:4f:43:62:93:d9:
36:06:9c:1e:5c:1e:ea:38:a9:48:8e:b9:51:21:23:
05:a6:ef:61:55:4b:5d:c9:58:6e:c1:a7:c3:92:5f:
34:c0:ab:6c:99:a5:d6:82:d2:1f:9c:e0:eb:01:27:
52:f6:39:f0:e1:ea:34:2e:97:0f:67:b8:bc:f4:de:
7a:cf:12:da:37:0c:9b:72:bf:2a:0e:0d:d7:a6:95:
af:94:e2:32:94:0f:41:2f:1f:47:17:7f:52:7e:0b:
c8:89:b0:b2:47:5b:e1:96:2a:2b:2d:03:2a:e7:5c:
49:83:a3:a0:06:18:2d:26:5c:0e:52:57:52:89:55:
04:f1:03:9e:8b:40:1a:08:44:53:a3:5e:94:f9:09:
91:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:B4:22:B4:69:09:07:58:52:59:70:E2:48:68:72:C8:7B:82:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a5628bf7-d341-3b98-a031-79270bb11ec2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:fe:a8:77:89:37:8d:51:00:67:17:0d:0f:21:8a:58:e3:f3:
4f:86:ba:e4:8e:76:c0:97:6d:c7:18:65:d6:58:2f:8c:7d:5c:
0c:b9:37:1d:c3:f1:dc:83:0d:3f:56:57:aa:00:1c:3b:aa:12:
d1:d0:4d:84:6d:c2:84:3b:9b:1a:75:69:05:8a:37:8d:8c:4a:
59:ea:5e:5f:29:13:43:23:f5:5c:b6:69:e1:ca:cb:34:cd:33:
63:de:d2:0e:90:0d:9d:e0:7c:1f:82:7d:e1:eb:84:a6:fd:91:
63:06:cb:db:63:10:85:1e:15:b6:95:8e:65:5a:61:c9:b4:94:
02:15:b4:7c:2d:4a:d3:54:e8:f9:0f:7b:7d:b0:54:16:69:50:
1f:ae:b7:65:85:ad:96:4d:76:a4:e7:f9:02:e3:38:75:16:59:
bc:b0:2e:0d:7a:03:d5:1a:6d:f5:e3:3d:ff:7b:a2:0d:c1:25:
9e:cb:e1:77:9c:c5:67:b5:2b:0d:9f:53:80:fe:f9:5d:c7:37:
ec:5a:ee:75:79:38:64:81:f4:fb:0a:1d:08:1b:c9:dc:2f:2b:
bf:f2:1e:bb:a9:6b:f6:25:2e:e0:07:03:ac:fb:11:00:50:0a:
24:f0:f5:c3:04:21:73:06:69:1a:87:6e:f5:ad:aa:6d:b0:28:
20:09:2a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:15 2025 by rpki-client