Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9ed30ce-c32e-3c51-949a-36d3845167db.roa
File: b9ed30ce-c32e-3c51-949a-36d3845167db.roa (raw, json)
Hash identifier: kT0m0hJHahF/AuXA2Wdc6FzbnQOz3OWtbmhg0+NquaQ=
Subject key identifier: 6A:27:11:A3:EF:B7:52:81:37:D0:0B:12:34:FD:04:D4:0F:65:EF:36
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402CB67C6CCDF9E8A7C8636A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9ed30ce-c32e-3c51-949a-36d3845167db.roa
Signing time: Thu 08 Dec 2022 12:00:00 +0000
ROA not before: Thu 08 Dec 2022 12:00:00 +0000
ROA not after: Fri 13 Jan 2023 05:00:00 +0000
asID: 203
IP address blocks: 161.188.216.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2c:b6:7c:6c:cd:f9:e8:a7:c8:63:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 8 12:00:00 2022 GMT
Not After : Jan 13 05:00:00 2023 GMT
Subject: CN=17157909-518f-4d89-87e8-cd8293a8dfe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:ee:13:6b:34:20:2e:e5:02:71:aa:db:cc:
8c:7d:fc:25:19:cc:fd:ee:70:1a:7b:f7:4a:2f:b7:
51:11:13:d1:62:74:64:a6:6f:99:50:23:c5:c7:ab:
4d:ee:ef:e1:ac:54:88:df:95:34:12:fd:f3:85:c9:
64:da:1a:81:d2:e8:cf:9a:53:b5:4d:79:dc:6e:3d:
5e:f0:ef:ec:09:30:48:a2:5e:1c:7b:36:3d:c3:cc:
51:89:9b:3e:c3:c3:db:82:19:96:af:4f:2e:e0:d4:
15:6b:2e:ea:0a:42:73:88:87:a6:82:fc:15:d1:b6:
b3:39:ec:ba:8d:7a:52:41:bc:bf:7a:9f:9e:b7:46:
76:47:64:75:a0:75:0b:91:53:19:2f:67:20:01:c7:
e7:e4:6e:40:88:32:91:33:91:c4:49:05:91:8e:6c:
c8:5b:33:5e:53:ba:bc:fc:29:d5:28:a3:2d:e7:eb:
85:48:62:46:58:4b:f0:95:a8:48:a8:57:fe:39:7d:
5f:40:76:b0:b5:24:df:e0:54:46:2e:a4:38:54:22:
a6:ef:40:a6:05:5b:22:d7:3d:41:a2:70:bb:95:43:
b6:71:9b:56:19:3f:d9:f9:0f:00:78:10:67:95:c2:
14:eb:45:d5:9f:e7:18:ec:b1:2a:59:48:76:9b:59:
a6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:27:11:A3:EF:B7:52:81:37:D0:0B:12:34:FD:04:D4:0F:65:EF:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9ed30ce-c32e-3c51-949a-36d3845167db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.216.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:54:b5:48:51:e9:24:7b:20:72:1a:2d:92:68:5f:d8:af:a5:
ce:dd:88:85:7e:9b:89:10:70:ed:6b:07:2f:2b:2d:0d:a1:c1:
b1:f6:79:1b:87:38:85:67:85:51:5f:e7:52:0d:6e:72:7d:2e:
80:74:20:94:b0:32:5f:8d:73:f3:c1:ea:f3:97:32:1b:21:39:
9a:d2:71:5f:45:d2:30:6e:4e:b1:96:09:57:d4:af:de:e1:5c:
56:95:22:8d:cc:b3:c5:14:f1:94:09:8e:6f:e2:f0:29:1a:b9:
5e:03:27:fe:86:50:a0:cc:0e:b9:47:19:87:9a:77:80:d6:2c:
b3:94:1e:2f:3a:93:bb:23:ba:b7:03:bc:ef:80:e5:f8:71:09:
1e:71:93:80:54:45:47:68:86:a9:ec:0d:04:ee:60:b5:85:8f:
e4:0c:80:54:1d:91:29:18:0e:0e:76:68:9c:8a:d1:4f:2c:9c:
5b:0d:eb:ed:e1:d8:85:b0:ed:83:13:e7:d1:64:a5:0d:e2:34:
4e:7a:90:01:0c:fc:d0:a1:e4:40:da:53:eb:6a:1b:8d:68:34:
5e:f4:6a:74:c0:af:c7:77:4b:8d:5d:b5:85:3b:e7:05:9d:4f:
52:9d:f3:b1:8c:d4:40:2b:bc:4b:aa:3d:00:f6:dc:4e:87:db:
a4:05:57:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:07:15 2025 by rpki-client