Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bbb418bb-3d9e-36fe-b25e-4fed081d25b0.roa
File: bbb418bb-3d9e-36fe-b25e-4fed081d25b0.roa (raw, json)
Hash identifier: 8ERV/7P5OgBWDiokDYRsHRd2a5ZTyz8QzQTcEyMO52U=
Subject key identifier: D6:67:03:97:E0:17:03:67:39:F4:6D:D6:C2:94:F2:40:06:2B:07:75
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CCAB9296A54E4F6D405AF4900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bbb418bb-3d9e-36fe-b25e-4fed081d25b0.roa
Signing time: Wed 02 Feb 2022 05:00:00 +0000
ROA not before: Wed 02 Feb 2022 05:00:00 +0000
ROA not after: Wed 09 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:ca:b9:29:6a:54:e4:f6:d4:05:af:49:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 2 05:00:00 2022 GMT
Not After : Mar 9 05:00:00 2022 GMT
Subject: CN=d4a22cd1-3876-4a39-894a-3b1e0dbb681d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:e3:b7:19:a8:98:7d:b8:de:fb:1c:d6:90:
78:b0:3d:8c:13:d8:1f:37:03:60:32:bf:7e:96:81:
cf:f4:62:65:c0:43:b0:03:12:72:63:5b:3d:1a:33:
0b:3f:c8:17:49:a2:41:7d:e2:bc:c4:87:85:03:ed:
c1:93:76:fc:86:09:62:e7:f8:34:96:10:a6:c8:1b:
a4:6c:ad:fd:45:3f:01:06:56:a7:0d:f3:5e:c8:10:
ff:bc:1d:c9:81:3a:59:96:6a:79:ca:83:78:0e:40:
37:36:b4:67:49:64:aa:20:93:53:3f:06:13:b4:e3:
b8:a1:c6:ac:1c:90:6d:db:be:64:c9:d8:93:db:53:
6b:f6:ce:fc:9b:e8:98:3f:0f:6e:f1:fa:c1:fe:d0:
4c:b4:01:cb:6f:24:1d:08:43:d5:59:bb:dc:8a:14:
90:00:ab:b7:e2:bf:3c:70:91:45:44:f9:00:46:0a:
64:8e:1d:c5:3c:1d:41:63:31:d7:8d:02:f7:05:8d:
ab:d5:9c:68:21:07:06:88:1a:73:34:b4:69:24:09:
ef:80:a7:96:47:3c:ac:6d:31:6f:76:47:87:16:53:
23:31:5d:2c:07:88:4e:68:e6:09:ec:c2:8f:be:fc:
1c:d3:44:95:cf:ca:8d:e6:af:6b:ab:92:14:3d:9d:
41:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:67:03:97:E0:17:03:67:39:F4:6D:D6:C2:94:F2:40:06:2B:07:75
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bbb418bb-3d9e-36fe-b25e-4fed081d25b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:89:03:e9:31:ab:d9:39:2e:f4:d3:3e:91:aa:c6:ad:13:c3:
1b:c4:f5:b8:bf:2e:fc:ae:fe:fd:78:51:99:e3:e4:95:70:98:
b6:2d:83:1f:d9:d2:ec:e3:ff:64:8e:47:da:50:2b:29:72:ce:
19:67:c4:e2:b8:1b:54:b8:d8:1b:e5:af:7b:eb:f3:19:44:f2:
08:7d:e8:77:23:f5:97:13:a0:e6:67:72:a5:08:62:66:10:c1:
2e:20:6c:e0:29:a5:02:09:64:b2:96:d2:ef:7c:21:3a:e4:97:
35:a8:68:11:85:07:4d:c3:aa:68:d3:25:de:aa:56:b1:9f:79:
c7:38:df:20:cd:92:56:e0:74:3f:99:f3:14:d7:80:80:4d:f5:
a6:ce:40:3a:fa:e0:68:b0:2e:9e:1a:8e:53:d2:a9:ba:12:56:
24:fb:ec:29:f3:2b:15:0f:9b:35:23:99:1d:09:c0:85:7b:ed:
b1:b5:61:a0:e5:f8:75:ba:a4:ca:5d:df:b6:a3:42:e4:3d:e1:
bb:6e:37:b7:6c:fa:78:b7:0a:f1:71:f5:8b:ac:72:4e:65:51:
26:c3:a1:5d:ff:38:f3:bf:bf:30:03:4b:e7:07:1f:a3:26:6a:
b6:32:1f:99:6e:ca:82:67:eb:fa:5d:91:7b:54:0d:a7:b3:dc:
c3:02:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:44:09 2025 by rpki-client