Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b33a50ff-d759-35d2-9660-c0626b5fa354.roa
File: b33a50ff-d759-35d2-9660-c0626b5fa354.roa (raw, json)
Hash identifier: +Y29ydTEK684eoMk8EhHPYwCWasj12TxXIqyYtdm0Ec=
Subject key identifier: 96:F7:EE:F8:F1:44:41:88:32:08:63:A6:74:80:71:80:9B:5F:D4:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D6C780190EF43F7B59202FB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b33a50ff-d759-35d2-9660-c0626b5fa354.roa
Signing time: Thu 31 Mar 2022 04:00:00 +0000
ROA not before: Thu 31 Mar 2022 04:00:00 +0000
ROA not after: Thu 05 May 2022 04:00:00 +0000
asID: 203
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:6c:78:01:90:ef:43:f7:b5:92:02:fb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 31 04:00:00 2022 GMT
Not After : May 5 04:00:00 2022 GMT
Subject: CN=aece431d-54cc-4e39-af5f-2aab44e52562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:8d:75:6a:ad:39:e1:8c:bd:18:e7:22:38:
f4:a6:b1:4c:09:7a:0b:48:36:c4:bb:24:65:0d:27:
b7:0a:b6:a0:60:c3:4a:ad:e1:67:17:e0:eb:f3:66:
a4:cf:09:97:87:a8:c1:68:ef:bd:99:f8:8c:b7:c6:
56:17:f7:7b:82:27:8e:7a:f8:d1:fc:a3:07:99:96:
55:22:09:f0:9b:4e:0c:74:f8:1c:50:ca:b3:6c:54:
d5:a7:20:66:7a:61:99:08:4c:ee:b6:2e:09:5b:99:
99:55:3a:5d:d5:72:bf:91:4f:86:6a:4e:24:e4:53:
3d:e5:9a:5b:fa:ac:8b:08:1d:52:19:42:ed:60:df:
ae:1f:7a:a0:ad:6e:48:1d:6a:e6:b7:f4:fc:40:2f:
23:24:8a:d0:60:04:2c:db:2a:0c:01:31:64:97:65:
4e:09:27:a7:bb:af:fa:4d:cc:07:72:a5:19:f7:0c:
4d:b8:59:49:06:ba:e7:c2:da:29:24:c9:56:d7:81:
07:d6:0b:81:8b:80:ba:84:6c:62:b4:69:5e:aa:a5:
dc:9d:ae:6f:25:b2:c7:38:99:6c:d0:7e:19:d3:dc:
bf:1b:f1:6a:a0:45:3f:9a:d6:fe:b9:11:7d:32:35:
2e:87:a5:18:24:f0:84:61:8b:7f:ec:1a:1e:d4:39:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:EE:F8:F1:44:41:88:32:08:63:A6:74:80:71:80:9B:5F:D4:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b33a50ff-d759-35d2-9660-c0626b5fa354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:03:dd:94:19:e3:0a:65:a6:ce:75:54:b8:d3:98:05:ed:47:
71:8a:88:2e:b4:c4:1f:56:81:24:60:ba:8c:50:0f:04:4d:42:
ab:6a:80:7c:8e:f6:61:cf:cc:c8:3f:63:bf:8b:b4:80:48:24:
04:61:52:2b:b1:07:99:5f:6a:36:ef:48:9c:71:8a:f0:ca:1c:
a1:8b:95:be:6a:fb:59:1e:f0:c1:02:d2:66:3f:e0:cd:94:3c:
a2:bb:77:3c:af:c4:a7:c9:46:04:ea:35:6e:77:60:6a:2f:d8:
91:9c:4e:d2:e0:18:fc:64:db:22:c3:e8:4f:6d:da:e1:18:a3:
d8:a9:8e:c3:9d:10:18:3d:b6:9c:bc:96:ab:e5:46:de:e9:16:
e9:df:23:17:b4:49:88:be:58:e6:6c:ab:82:75:5e:c5:fd:4b:
68:e2:3e:ff:b0:7e:ab:2d:7c:1b:a3:1a:07:ad:84:d2:d0:0e:
91:4a:2a:ab:20:15:60:04:45:97:e2:fb:8f:17:bf:a6:c0:47:
3e:7f:83:cd:a0:ae:fa:8e:a8:5f:19:d6:2a:89:1b:b6:4e:11:
52:e7:3e:5d:41:12:37:9f:25:5e:bf:30:6b:78:5b:74:6e:1b:
69:01:98:6e:d8:fb:07:63:17:47:d4:14:33:46:1e:1c:ae:4c:
9b:86:1a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:16 2025 by rpki-client