Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baccccf3-03bd-3211-9df9-6567bd7d385b.roa
File: baccccf3-03bd-3211-9df9-6567bd7d385b.roa (raw, json)
Hash identifier: PUVylSJJe/GXZcESDDSAH1e09GOrZbygs3/vCxZXSTQ=
Subject key identifier: 25:D2:FC:0F:CF:BB:48:BA:20:B5:5B:A1:A6:CE:18:DA:3A:FF:B9:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F4D242FAF9D83816C6C449200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baccccf3-03bd-3211-9df9-6567bd7d385b.roa
Signing time: Mon 19 Sep 2022 12:00:00 +0000
ROA not before: Mon 19 Sep 2022 12:00:00 +0000
ROA not after: Tue 25 Oct 2022 04:00:00 +0000
asID: 6167
IP address blocks: 161.188.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:4d:24:2f:af:9d:83:81:6c:6c:44:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 19 12:00:00 2022 GMT
Not After : Oct 25 04:00:00 2022 GMT
Subject: CN=4c17446b-8723-4874-adee-e110ead3e048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:95:36:3e:06:93:b5:29:fc:44:6c:ee:c2:
c9:41:9c:d7:58:ba:f7:3d:56:a5:81:3e:42:0e:11:
c2:98:9f:94:9b:a6:43:df:8a:b7:48:88:0e:ef:d8:
0c:6c:f4:b4:fe:6d:bf:21:94:c7:3a:43:2c:7b:5b:
de:80:f0:ec:0b:49:e7:25:2f:45:56:bc:62:f3:4c:
21:dc:75:6f:bb:8c:2b:ac:59:76:49:f1:8d:79:eb:
5d:01:01:6c:c9:bf:b7:d5:36:09:44:8e:b8:29:50:
6d:e6:bb:b1:df:27:24:73:e3:d4:46:1e:0a:b7:1d:
e6:c6:50:39:6f:b9:89:26:bb:f4:25:77:49:b6:57:
16:ba:22:e7:02:9d:99:71:d6:a5:2d:6e:ff:27:b8:
92:66:f1:1f:67:82:b9:b7:27:e4:28:5f:5d:2c:ea:
8f:72:c4:01:cc:6b:75:9f:45:47:12:a1:7e:78:b2:
82:d3:d0:2b:53:0a:52:1c:0d:02:b3:5d:56:cb:23:
01:13:bd:1a:f8:57:a3:43:71:ac:97:27:73:da:61:
32:9f:08:98:41:25:13:34:1c:ee:d4:54:bc:3b:ff:
64:0b:2e:e6:18:ab:61:43:93:4c:84:ff:06:f0:5b:
a6:57:8e:14:c5:1d:7c:3d:2c:78:5a:b9:81:52:5d:
e4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D2:FC:0F:CF:BB:48:BA:20:B5:5B:A1:A6:CE:18:DA:3A:FF:B9:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/baccccf3-03bd-3211-9df9-6567bd7d385b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:43:59:98:51:3a:98:dd:b6:e4:1c:e6:b6:04:d7:7a:f6:77:
12:3b:ae:38:8e:00:81:56:75:6b:c2:ea:cd:00:e6:f6:6f:a0:
2e:fc:b2:5f:fc:bb:bf:94:72:a3:ae:06:37:c4:67:d8:e3:97:
8d:aa:b5:cf:f1:b2:90:75:39:94:a6:97:5d:cd:91:70:fd:f1:
7b:21:a3:e8:c0:25:e5:9f:e6:f2:95:53:bf:f8:3f:de:93:b6:
04:37:29:9b:40:2b:b8:c5:6c:03:4e:21:dd:ed:c8:a8:5f:7c:
80:b5:c9:41:c7:d3:d1:54:42:69:22:64:95:4e:bc:bc:aa:52:
e2:ca:42:59:46:b2:10:ed:50:d2:ac:4e:39:5b:a5:ba:28:6f:
84:57:c4:1e:39:15:eb:c5:f6:c4:df:91:5d:a9:16:c8:05:bd:
92:2b:11:a2:28:07:c5:e0:e5:62:f3:71:04:39:72:c1:35:36:
c5:03:f7:26:22:57:fb:bd:af:b5:6a:d7:b1:ca:d3:ea:c5:8a:
20:81:bc:cf:82:19:79:54:be:ae:0d:ad:12:76:9b:f1:75:38:
a5:2d:6a:20:73:ce:03:19:90:f0:9b:67:99:8a:dd:43:c2:6a:
b3:f5:d5:3d:10:4e:a9:6a:12:91:46:d5:f2:96:df:26:e0:fa:
e7:a5:ae:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9NJC+vnYOBbGxEkgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkxOTEyMDAwMFoXDTIyMTAyNTA0MDAwMFowLzEtMCsGA1UEAxMk
NGMxNzQ0NmItODcyMy00ODc0LWFkZWUtZTExMGVhZDNlMDQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDqVNj4Gk7Up/ERs7sLJQZzXWLr3PValgT5C
DhHCmJ+Um6ZD34q3SIgO79gMbPS0/m2/IZTHOkMse1vegPDsC0nnJS9FVrxi80wh
3HVvu4wrrFl2SfGNeetdAQFsyb+31TYJRI64KVBt5rux3yckc+PURh4Ktx3mxlA5
b7mJJrv0JXdJtlcWuiLnAp2ZcdalLW7/J7iSZvEfZ4K5tyfkKF9dLOqPcsQBzGt1
n0VHEqF+eLKC09ArUwpSHA0Cs11WyyMBE70a+FejQ3Gslydz2mEynwiYQSUTNBzu
1FS8O/9kCy7mGKthQ5NMhP8G8FumV44UxR18PSx4WrmBUl3kewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCXS/A/Pu0i6ILVboabOGNo6/7mdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmFjY2NjZjMtMDNiZC0z
MjExLTlkZjktNjU2N2JkN2QzODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEobwgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1DWZhROpjdtuQc5rYE13r2dxI7rjiOAIFWdWvC6s0A5vZvoC78sl/8
u7+UcqOuBjfEZ9jjl42qtc/xspB1OZSml13NkXD98Xsho+jAJeWf5vKVU7/4P96T
tgQ3KZtAK7jFbANOId3tyKhffIC1yUHH09FUQmkiZJVOvLyqUuLKQllGshDtUNKs
Tjlbpboob4RXxB45FevF9sTfkV2pFsgFvZIrEaIoB8Xg5WLzcQQ5csE1NsUD9yYi
V/u9r7Vq17HK0+rFiiCBvM+CGXlUvq4NrRJ2m/F1OKUtaiBzzgMZkPCbZ5mK3UPC
arP11T0QTqlqEpFG1fKW3ybg+uelriE=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:31 2025 by rpki-client