Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/abef5db6-aed8-3b23-acad-35cc3086b25f.roa
File: abef5db6-aed8-3b23-acad-35cc3086b25f.roa (raw, json)
Hash identifier: rUCMBmbM6a/zJ7A0aYstI/fM3CQKwdLmJtjJKZ48TYI=
Subject key identifier: 4E:61:83:DB:B2:ED:3B:DE:77:CE:55:03:67:64:C9:DB:6D:31:B7:14
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5BDD1BB0C8F8C654732EE240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/abef5db6-aed8-3b23-acad-35cc3086b25f.roa
Signing time: Sat 26 Mar 2022 04:00:00 +0000
ROA not before: Sat 26 Mar 2022 04:00:00 +0000
ROA not after: Sat 30 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.188.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:5b:dd:1b:b0:c8:f8:c6:54:73:2e:e2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 26 04:00:00 2022 GMT
Not After : Apr 30 04:00:00 2022 GMT
Subject: CN=4e137831-aef4-4abb-8a59-94cefe277534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:b9:8f:2b:3a:a0:df:89:5f:ac:4f:1a:e1:
17:b7:3b:6f:bb:5c:1d:34:61:a0:b1:cf:ac:b1:cb:
ac:55:a7:5e:ef:59:8f:ae:83:b0:e8:7f:29:63:87:
98:70:42:0a:be:cd:da:30:96:40:bf:d6:e7:06:c7:
e6:8d:14:a0:77:a0:83:5a:e8:9d:27:2a:e7:41:2f:
8a:08:8a:fb:03:bd:50:08:72:04:68:4f:84:b7:2b:
41:13:fb:f9:fa:ae:39:bc:ef:a9:de:dc:a8:b0:52:
2b:8b:24:43:f9:23:f9:11:5d:ec:c4:6a:c0:c6:fb:
cf:c8:bc:05:39:0d:3c:a4:9c:ef:14:5f:df:af:18:
17:56:28:c2:65:7e:a8:f3:a4:f4:3e:c1:6c:93:46:
85:f6:6f:5c:e0:8d:c6:19:fb:82:2b:6f:cd:23:75:
33:5a:d8:8e:51:55:87:04:04:f7:db:c5:d5:25:bd:
cc:5e:f2:e0:f0:bb:4a:85:db:5a:dc:14:ce:8a:59:
70:d2:d3:10:ab:84:fb:9c:49:d0:cc:3a:d3:51:09:
65:1e:8f:fd:f7:88:49:93:5b:81:7f:e7:37:c5:a0:
ce:c2:d0:a9:37:4b:6c:83:6f:48:85:3a:1f:21:b8:
b0:f8:6c:6d:89:31:f9:3b:60:45:2c:4d:e1:69:d0:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:61:83:DB:B2:ED:3B:DE:77:CE:55:03:67:64:C9:DB:6D:31:B7:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/abef5db6-aed8-3b23-acad-35cc3086b25f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:1c:f6:56:9d:eb:f2:eb:8a:a1:21:7f:32:89:d2:72:d2:93:
8c:98:fd:0d:51:42:c7:6b:33:b9:49:cf:21:b3:c9:2b:99:b7:
c4:d6:78:85:ea:e0:95:8a:13:c1:13:03:63:b7:55:37:ac:4a:
52:d0:d8:38:d9:ee:79:17:95:da:e9:f9:51:1d:44:6a:3c:a6:
2e:d0:65:40:fe:42:29:87:8d:ca:76:26:a2:ff:9a:98:91:8b:
47:7d:21:46:3b:33:1d:01:28:3b:fe:cd:0c:8e:39:ff:94:47:
15:99:c2:c4:6b:df:1a:de:83:e4:3c:5a:46:a1:91:61:39:21:
f5:c1:35:21:1c:6d:11:93:b8:0a:cb:8d:14:41:45:17:2b:7e:
e7:47:37:87:86:23:58:ba:9e:d5:34:6b:fa:23:f4:c1:59:cb:
71:2c:27:06:ff:cb:2a:fb:38:a4:41:20:8b:2b:6a:25:15:75:
c1:69:85:55:bb:d8:cb:85:bb:45:95:28:25:fa:15:3e:1a:c8:
bf:d3:46:ae:d0:68:bf:f3:91:97:fc:f9:f4:be:43:81:9b:87:
48:ff:f1:72:dc:d1:27:21:db:7e:09:bb:da:f4:aa:4e:d2:b5:
27:36:45:68:f8:6e:a6:97:f1:b7:48:9a:25:f3:36:75:f8:74:
19:51:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:21 2025 by rpki-client