Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad1ba078-3fc0-3820-bdb8-d09ff6b7ee9b.roa
File: ad1ba078-3fc0-3820-bdb8-d09ff6b7ee9b.roa (raw, json)
Hash identifier: umNz0MbUmWJ7NBJKc+X1ryrnWn4ZfZ03lh6g0jNWIXU=
Subject key identifier: F6:F5:A7:5A:2F:D3:C7:72:37:55:23:72:AA:C5:EF:8C:4E:65:E8:A9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584010E974570061B2DD9BB04B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad1ba078-3fc0-3820-bdb8-d09ff6b7ee9b.roa
Signing time: Mon 28 Nov 2022 12:00:00 +0000
ROA not before: Mon 28 Nov 2022 12:00:00 +0000
ROA not after: Tue 03 Jan 2023 05:00:00 +0000
asID: 6167
IP address blocks: 161.188.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:10:e9:74:57:00:61:b2:dd:9b:b0:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 28 12:00:00 2022 GMT
Not After : Jan 3 05:00:00 2023 GMT
Subject: CN=7df190bb-e96d-439f-8d7e-a5483d4e4850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:da:f9:53:49:c1:1f:e7:89:56:62:98:1d:77:
15:16:a9:a1:d4:b0:01:8e:f8:01:66:45:f6:8e:74:
ee:ef:b1:4d:9c:a8:2e:30:da:3c:9a:fe:7c:24:51:
26:24:0c:92:b4:01:c8:e1:ce:03:84:ce:9f:5f:4c:
c8:a0:71:e9:b9:f1:47:c9:bc:60:3d:2c:e8:29:cb:
30:46:10:9e:e3:aa:49:d0:f9:a2:85:7b:e6:18:92:
a3:07:ab:0d:2a:45:5f:76:5b:19:00:1c:74:de:5d:
42:8e:87:9a:1e:cd:8a:85:a3:58:a7:6f:31:dd:62:
33:07:bb:5c:4e:b9:1d:41:5f:2b:c4:a8:cf:b2:c4:
dc:dd:e2:69:ba:51:a5:01:03:93:e2:a6:71:91:70:
8c:ae:a8:e1:61:1b:f4:c7:0c:f8:11:72:16:99:1a:
3c:f9:95:6e:98:a1:22:3a:68:7e:a6:b7:85:d9:69:
56:c6:bf:ea:42:60:46:b4:98:84:ec:c9:47:4d:2a:
0a:70:29:2b:00:e2:78:fe:c9:80:21:f1:26:a6:d3:
b6:da:f1:af:64:16:8b:4e:98:09:79:eb:97:90:90:
14:ea:21:af:79:12:34:27:e9:ce:36:f3:0b:d4:94:
b5:37:1b:e5:5c:90:04:0e:bf:be:08:6a:44:8f:1d:
67:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F5:A7:5A:2F:D3:C7:72:37:55:23:72:AA:C5:EF:8C:4E:65:E8:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ad1ba078-3fc0-3820-bdb8-d09ff6b7ee9b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:65:76:8e:27:20:38:d8:84:39:06:c2:47:c7:bd:f0:a1:0b:
4b:17:80:6f:ba:0c:eb:1e:ed:1f:ae:d1:5f:94:72:a2:40:54:
d6:a2:db:1b:40:a6:82:25:ca:8b:02:e5:93:aa:a7:5f:c1:bc:
6a:55:c6:76:88:64:9f:95:b6:0d:94:4f:ff:2b:aa:e6:87:68:
81:f0:8c:75:c6:cd:19:15:f9:3d:37:6a:0c:7a:dd:9d:68:58:
a8:76:94:93:ec:26:04:a4:8a:40:9e:6a:ec:ce:d9:88:39:ff:
4d:44:39:4b:1f:a4:cf:0b:a8:d2:89:bf:05:a6:e1:6b:e3:f2:
ab:94:26:4e:15:da:37:13:d6:0a:fc:6e:0e:fa:28:d8:ec:3f:
03:6b:da:75:b1:80:83:6e:23:06:04:3c:8c:ed:7b:aa:d7:60:
b5:be:13:db:c8:8c:57:ea:24:42:5b:1d:27:6a:91:88:e0:d3:
89:d0:a0:5a:b9:db:ae:d3:4d:54:a5:ce:6f:8a:e7:b5:09:54:
ed:fb:e1:91:32:f3:bb:96:c7:b3:54:d7:c0:78:e5:10:eb:58:
4f:a9:79:65:d4:e0:ac:0a:77:e9:06:73:82:58:3b:a0:03:2d:
1a:d9:41:79:e9:76:46:41:3f:93:11:d2:e1:09:8b:d6:b3:7c:
ec:b1:73:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:00 2025 by rpki-client