Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c52c7510-96a4-33ec-a5f2-ce9f3da382c3.roa
File: c52c7510-96a4-33ec-a5f2-ce9f3da382c3.roa (raw, json)
Hash identifier: sgitxJePejI2R2UHYjjXhE/7gc3PWBVd7ySp7DzV2Pc=
Subject key identifier: 87:33:CE:D6:2C:5A:53:4F:0A:DA:7E:CA:BF:8D:F4:9D:22:A7:C9:4D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6FF77731E2931E245EEF3E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c52c7510-96a4-33ec-a5f2-ce9f3da382c3.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 160.1.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:f7:77:31:e2:93:1e:24:5e:ef:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=ba28de0c-e37a-4356-a707-11b690532c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:4b:21:9e:01:22:52:c8:18:66:4d:3e:c8:9f:
bb:99:d9:fd:b5:ec:15:66:bc:6a:d6:f7:b6:33:47:
df:e1:e7:3c:11:92:5a:c0:fb:77:ff:9e:f0:fd:18:
f2:27:27:f5:ec:5f:2d:aa:5d:57:4d:11:fb:c9:8b:
6e:1f:4a:52:5a:35:c8:98:69:4a:ca:58:50:b2:04:
b7:ae:fe:f7:dc:f1:f5:47:fe:24:3d:8c:2a:b4:eb:
00:33:fc:08:aa:d2:bf:61:19:d7:b5:e3:1b:7d:85:
54:39:c1:05:0d:50:a6:56:e5:f9:86:c4:18:32:24:
d3:bf:b0:00:92:a2:82:3c:d4:a2:75:78:87:34:45:
8f:ed:fb:8d:ed:9c:83:4f:a7:08:bf:78:e1:8c:7a:
7c:08:59:d7:3e:fc:4d:e4:f8:d3:bf:e8:06:6e:2c:
d8:37:7b:55:ae:07:5a:f5:ca:2c:05:7f:26:ab:8d:
28:2b:e8:2f:f7:c9:b4:4d:3f:c3:02:dc:f7:fb:64:
21:4f:06:e6:fa:d8:64:dd:11:5e:fa:26:f8:e1:ca:
32:3e:5f:0f:d5:3e:45:bb:80:4c:d7:c7:fc:b5:e1:
dc:79:ea:76:b3:77:1d:9b:0e:33:d1:79:91:c8:c0:
cc:fb:df:03:78:f5:77:0b:3f:f6:31:fd:47:29:39:
f6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:33:CE:D6:2C:5A:53:4F:0A:DA:7E:CA:BF:8D:F4:9D:22:A7:C9:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c52c7510-96a4-33ec-a5f2-ce9f3da382c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
160.1.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:f8:89:8b:dd:c8:33:c7:47:e5:2d:80:fb:5a:98:0d:c3:4e:
99:5c:2d:90:9b:f9:98:63:16:ab:cf:18:75:0d:5f:d1:2e:4f:
7b:3d:eb:9a:df:22:e1:98:f1:d3:b5:22:91:d3:4a:f1:06:53:
f4:e8:54:15:33:2a:20:8a:70:0a:58:8a:fa:e1:99:ae:8e:b7:
53:4f:be:63:9b:a7:29:15:47:3b:95:1f:e0:5e:d4:59:b5:a5:
81:d9:62:97:a3:69:d1:91:dd:91:a8:8c:23:60:46:ac:10:3a:
4c:e6:bd:48:b8:da:0f:0a:4c:6b:f1:ed:4d:79:f4:de:71:1f:
57:1a:29:8a:52:2c:bc:d3:fa:92:55:81:88:49:af:31:83:5c:
c1:51:9f:3c:fe:bb:1f:d2:8d:2f:4c:9a:cc:d1:9f:b0:66:fa:
23:3f:09:6f:04:08:8a:b1:a1:96:5c:72:dc:f3:46:22:45:94:
fb:be:a0:77:e2:97:30:89:da:4c:31:fa:dc:c2:b4:a9:55:a3:
b8:d8:6d:46:9a:be:e8:69:92:a3:b2:24:56:e3:ff:f7:6b:6b:
ea:e4:fa:83:29:96:b4:25:38:76:aa:bd:ab:3c:d9:31:38:bb:
3e:a2:fc:13:34:50:81:5d:46:5f:3f:10:f0:4c:be:cd:91:b9:
51:b2:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:39 2025 by rpki-client