Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0848a28-c010-3d13-b9f1-675c533e653b.roa
File: c0848a28-c010-3d13-b9f1-675c533e653b.roa (raw, json)
Hash identifier: /FEOfQSJca4UJzg8VXqErWzYICSgjrKc6P3IL9trgfU=
Subject key identifier: 77:45:49:A0:01:7F:6D:60:7F:BB:65:8C:DB:33:B4:24:89:EA:5A:21
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406A916B70748E6CADA269E400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0848a28-c010-3d13-b9f1-675c533e653b.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 161.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:91:6b:70:74:8e:6c:ad:a2:69:e4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=dd49316c-705b-4178-9999-49289e9daeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:9a:b1:b0:64:0f:aa:64:b1:39:a7:07:d2:
34:08:db:7d:37:96:e6:0b:4a:8e:e2:c4:21:7f:e4:
be:42:0f:12:cf:de:49:57:8a:cd:ce:06:89:9c:2b:
e5:bb:0f:8f:19:62:74:e8:b0:f5:d6:3d:7e:65:e1:
57:2d:8e:62:cd:db:c3:8b:58:22:a3:4f:61:43:01:
2b:22:76:f7:61:bd:01:5d:35:9a:5a:cd:62:92:2c:
3c:75:0b:17:c7:7a:e5:d3:4c:f0:26:bc:fc:ed:0d:
0a:8f:21:f0:28:57:e1:e3:d1:a5:1b:ae:13:9f:39:
18:f9:d3:58:4d:b3:39:c6:8c:e8:9d:7d:6f:ae:35:
d2:ff:b4:8f:33:83:71:15:5d:da:77:96:ed:b6:71:
6e:48:bb:cb:6d:52:ec:e8:04:f7:f2:66:73:d5:04:
9b:88:19:64:3a:80:56:7a:db:11:64:f9:3d:ec:93:
94:eb:02:83:ad:bb:71:d6:31:4b:29:fc:89:9c:2f:
4a:04:08:2b:3d:cf:79:c9:e8:d3:9b:03:53:08:88:
a7:79:66:23:35:a6:c7:97:f4:37:4d:70:70:30:ec:
36:38:44:88:17:85:ce:cd:f3:de:7c:23:fc:11:52:
5d:09:b3:2d:39:57:d8:02:0c:7d:63:cc:be:4e:eb:
e8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:45:49:A0:01:7F:6D:60:7F:BB:65:8C:DB:33:B4:24:89:EA:5A:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c0848a28-c010-3d13-b9f1-675c533e653b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:a3:4d:56:8e:34:df:a6:00:2c:34:09:23:02:1d:94:3d:bb:
e6:e6:81:9f:ee:29:58:72:4b:ab:bd:4d:30:95:36:8e:c2:7e:
b1:bb:62:cd:38:9d:88:90:ba:7e:f6:6f:a3:42:18:73:c3:e6:
7b:d6:9c:e7:77:64:6d:0f:a0:7c:b7:aa:b6:e1:d9:6b:08:cc:
71:fc:e3:87:82:15:12:b3:09:a6:7f:47:4a:80:eb:a3:5a:00:
80:66:df:d4:14:64:78:09:cf:67:d3:5c:14:ba:25:57:13:c0:
73:a4:6a:cb:99:3f:8c:27:6e:61:e3:94:c5:67:d6:37:04:3e:
f4:1a:ae:5c:c8:18:e5:ec:93:1f:2a:3f:70:df:bf:e6:a0:b7:
c0:19:d5:29:2c:ee:14:5c:59:5b:41:3c:96:9f:7b:7f:32:15:
e8:4a:7e:71:24:45:2b:a7:47:72:82:de:fd:8c:f7:d6:3d:ec:
1c:76:a5:da:40:21:3e:a9:40:3a:75:1e:59:09:7e:23:3b:a4:
78:af:2f:93:2a:1a:47:fe:d5:ca:d4:e9:23:18:cf:5f:61:85:
ea:d7:1a:57:f8:b9:62:49:d9:4b:2d:33:8d:71:c7:54:81:d4:
79:8d:af:18:d4:45:f6:e7:0f:6a:d7:0f:fd:d2:0b:64:cc:7f:
30:2a:ad:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:15:20 2025 by rpki-client