Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aad8adba-2593-33d3-bb84-cfe63cd01d11.roa
File: aad8adba-2593-33d3-bb84-cfe63cd01d11.roa (raw, json)
Hash identifier: D8nLZ3ZFl+0ya0cKU7jgOn9xMii6VpIDjLfo2s7q4v4=
Subject key identifier: 47:92:E2:C2:F4:9D:B2:DE:07:70:AE:A7:BA:7E:A2:34:5E:29:F7:D1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F30E7C0E2F0DBC30422608040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aad8adba-2593-33d3-bb84-cfe63cd01d11.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 161.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:30:e7:c0:e2:f0:db:c3:04:22:60:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=7bebd079-a2ea-47f0-a543-29e8dff23a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:42:e1:8d:fd:72:0c:c7:cd:d3:f0:2e:07:d8:
6e:96:60:96:7d:1c:c1:6c:99:0d:b1:5e:c2:d3:1e:
ab:6b:49:d8:82:42:1f:ad:32:ea:1f:68:b8:4d:67:
ab:84:bf:4b:12:2f:9a:88:97:9f:1c:27:02:50:4b:
bf:ce:85:48:ca:cf:bd:e6:42:b7:26:2c:d2:64:1d:
5b:2f:bc:e6:18:31:d4:22:3c:89:24:2a:3a:46:e1:
30:1d:b1:df:31:7e:93:1b:e7:f7:b7:7f:49:28:6b:
86:27:46:7e:03:be:46:0c:aa:07:8f:d1:c0:fa:f9:
52:04:7e:30:f7:36:ef:a2:40:6f:bf:d1:1c:dc:4d:
20:7a:6d:6a:17:3a:c1:4b:7d:d4:34:c9:b7:17:46:
3e:48:11:ea:fd:e5:56:5e:f4:24:dc:13:17:da:84:
95:14:df:58:9d:59:ea:5d:83:42:a3:ca:48:fe:25:
53:e5:96:b6:1b:f1:21:ae:8e:21:ea:be:9c:ef:6f:
12:be:fd:16:d4:29:da:84:88:58:21:bd:8b:b9:60:
7f:8b:33:59:c2:5a:95:c9:bf:c7:e7:86:01:36:e6:
4e:d5:f7:a0:fe:f8:57:97:ff:61:0c:5d:da:92:cb:
b1:2e:3e:df:0d:6c:6c:5a:4f:59:c5:a9:d5:0b:fd:
07:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:92:E2:C2:F4:9D:B2:DE:07:70:AE:A7:BA:7E:A2:34:5E:29:F7:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aad8adba-2593-33d3-bb84-cfe63cd01d11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:4e:39:81:14:09:22:97:30:ad:bb:f3:d4:28:5a:1f:40:e1:
48:ce:6f:37:f2:36:c6:e0:18:0f:31:ef:09:1a:e8:39:0f:fa:
64:50:01:9b:bd:14:43:b1:dc:10:06:f4:2e:fb:22:6b:a7:ab:
f7:ba:94:25:16:4f:f4:91:af:5b:7f:38:48:6c:e5:fa:63:df:
db:27:9d:e1:5e:6d:91:66:47:ad:f8:f6:26:24:69:33:65:31:
bb:f3:17:be:4d:8e:9f:52:16:16:ca:4e:e7:d6:3c:ba:67:1c:
15:97:5d:aa:ed:fc:46:c3:7b:a0:5c:60:ef:6e:49:10:f5:9c:
15:28:1e:8c:ce:63:0e:b9:c6:3e:ee:a1:2c:7f:80:85:b5:b5:
b1:5f:c0:5d:9c:53:51:4a:48:58:67:b6:d4:32:2b:3a:32:2b:
8c:fd:bc:d1:67:97:9b:e3:10:08:e7:56:d9:de:58:5c:54:6c:
3b:c9:89:01:09:d2:35:31:af:4a:04:6f:32:b9:62:61:44:e0:
bd:53:34:9c:3c:f0:5e:05:de:23:58:c4:5b:73:96:a5:47:6c:
e0:df:f9:58:95:47:d6:12:af:34:2e:78:c2:e0:9d:2c:bd:fd:
e4:6f:95:0b:ce:1a:bc:0c:fe:92:70:e2:de:49:f7:52:3a:68:
f1:ba:bf:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:51 2025 by rpki-client