Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd5af413-a46c-302c-8277-dd08d3a0cf36.roa
File: bd5af413-a46c-302c-8277-dd08d3a0cf36.roa (raw, json)
Hash identifier: QIQ6dg2UnXDgXitrSKHPkMIit9i9wE2EF5C6miAES18=
Subject key identifier: 42:2F:6B:CB:31:E1:33:D6:01:6F:F7:6A:7D:D4:86:F1:85:E3:BC:F2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C920B7B138CB868FABA3C9300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd5af413-a46c-302c-8277-dd08d3a0cf36.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 161.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:92:0b:7b:13:8c:b8:68:fa:ba:3c:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=a1234f23-48c1-4110-9e5a-875d67003bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:03:b9:b8:83:dc:72:79:89:75:6a:db:00:b2:
79:63:2c:43:ba:5b:a7:f7:80:63:17:a5:fb:1f:2e:
88:68:c8:4b:ec:34:23:a3:a6:31:14:22:52:3b:a0:
1d:49:c2:c2:9c:c8:ac:1e:4f:9a:b0:79:0a:b8:da:
b3:7b:ae:8b:e3:f9:42:3f:1e:0d:58:c2:b5:b6:46:
96:11:fd:7c:09:26:1a:38:09:30:ba:9b:9e:b6:96:
1c:81:5f:70:78:3f:f6:b4:80:a0:44:04:46:e6:f9:
44:1c:71:2c:f6:75:1c:04:1d:e2:db:40:f7:5a:2d:
ae:e0:d8:88:34:4a:12:b6:62:e9:4c:5c:9a:49:31:
bf:6d:c3:88:85:4b:49:45:ad:bf:40:d7:60:10:41:
e3:39:7b:21:04:44:d0:55:e7:4f:19:a0:d5:f3:a2:
11:18:d8:eb:80:f3:c9:29:a5:46:29:a4:e8:71:b7:
37:8a:c3:c7:70:75:45:f2:79:fa:2e:cc:bc:e1:11:
4f:93:5b:4d:1b:0d:da:93:e0:8f:97:29:58:6c:ec:
f9:9d:dc:7f:f3:17:ba:7d:40:01:05:89:60:52:48:
db:55:7b:fb:64:8f:67:c0:b5:89:63:d4:99:44:03:
85:1a:94:92:d4:14:83:4f:09:64:1e:34:fa:07:5d:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:6B:CB:31:E1:33:D6:01:6F:F7:6A:7D:D4:86:F1:85:E3:BC:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd5af413-a46c-302c-8277-dd08d3a0cf36.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:81:ce:90:35:cc:40:54:1b:fe:5a:d8:a1:ec:9c:32:e9:25:
5d:b1:b2:db:02:e2:16:5d:54:57:95:29:50:30:e7:aa:00:96:
9a:fb:8d:ab:58:af:f4:02:16:32:73:5e:11:96:1c:cd:aa:43:
e6:6a:5b:41:bc:1b:5f:f7:d7:b9:dc:39:46:fc:95:3e:51:93:
4a:b6:1d:73:69:b7:45:a2:af:7d:3d:34:1f:06:3b:67:0f:c5:
f1:ba:78:eb:88:ac:e4:2f:06:f7:28:75:76:1f:83:4b:5d:27:
42:61:ba:5f:75:d0:bd:1b:df:48:ce:79:55:92:72:52:c6:fe:
2b:91:6f:e5:72:3e:16:e5:97:ae:ea:9c:01:3d:6f:e1:09:e4:
c7:9e:8a:c7:d7:bc:7e:5d:1e:e9:20:2a:b0:f7:37:6d:e6:1e:
75:dc:1c:54:c0:59:c3:d5:2b:0e:a6:af:4e:a9:58:3f:0f:29:
2d:86:d0:3b:01:c7:39:bb:83:c1:55:99:a2:9d:65:81:0d:77:
a2:61:23:5f:14:f6:ca:8c:e6:c7:af:ba:07:e6:0f:6f:bb:f0:
68:55:b9:49:24:da:11:e6:47:4d:50:3d:aa:49:d4:f3:85:c0:
55:cd:59:36:05:dc:70:b8:23:8f:42:0b:99:f1:5e:6c:5e:b3:
53:2b:f5:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:41:59 2025 by rpki-client