Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8c7204a-b09d-3a31-9c21-8f066fc86571.roa
File: c8c7204a-b09d-3a31-9c21-8f066fc86571.roa (raw, json)
Hash identifier: x+ewQL5O73wi/t04Zb3ok19KwNFWW7s8alfK7gOkiJw=
Subject key identifier: 9F:2E:A5:DA:15:98:35:B4:FF:BF:A8:AF:54:A1:54:64:E0:B7:1C:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EDCBEB71E70ACFE6C14D1B480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8c7204a-b09d-3a31-9c21-8f066fc86571.roa
Signing time: Tue 09 Aug 2022 12:00:00 +0000
ROA not before: Tue 09 Aug 2022 12:00:00 +0000
ROA not after: Wed 14 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 161.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:dc:be:b7:1e:70:ac:fe:6c:14:d1:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 9 12:00:00 2022 GMT
Not After : Sep 14 04:00:00 2022 GMT
Subject: CN=12cd4605-4a35-4c29-8efa-7cb34fed36f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ea:bd:97:95:ed:60:b8:3c:16:73:2f:40:58:
58:60:d7:2b:0f:c6:91:93:29:7c:e1:fa:5f:6a:4e:
49:fa:6f:84:12:c0:f8:b9:77:42:90:c3:4f:f8:5b:
4d:48:dc:91:f4:f3:68:a1:f8:1a:05:9a:29:ef:29:
15:3a:1e:bb:58:39:6b:00:e1:8f:83:9f:65:7f:11:
20:a7:e3:c9:23:8e:9f:ff:27:86:62:03:45:f7:b2:
9f:33:9c:d7:e3:42:32:78:03:dc:f1:c7:2d:d6:54:
f5:e5:4d:76:f7:14:3a:cf:2b:95:bd:2d:8d:eb:48:
e8:31:b5:5e:34:12:5f:b8:bb:d1:97:f1:85:9a:f0:
3c:cd:16:00:bf:2e:81:cc:fe:e4:a5:e6:4a:a2:c2:
18:01:08:90:34:de:fd:48:40:a5:78:2b:84:82:36:
37:c6:29:5b:f9:28:f0:fe:c8:31:57:3a:14:4b:5f:
9c:2e:28:14:dd:4e:76:58:87:3c:55:a9:fd:1b:43:
80:21:86:31:fa:1e:8a:a0:9c:b1:69:08:31:9b:43:
23:30:4a:0c:96:80:0b:bb:7b:75:12:64:d2:39:e0:
4a:9c:c0:e7:ad:55:82:03:fe:33:25:00:2a:36:df:
60:c8:e3:10:6a:88:78:dd:70:67:26:d2:4b:dd:ff:
05:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2E:A5:DA:15:98:35:B4:FF:BF:A8:AF:54:A1:54:64:E0:B7:1C:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c8c7204a-b09d-3a31-9c21-8f066fc86571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:da:1c:6e:a3:51:3d:64:2f:f8:02:88:ee:05:e5:4a:96:cf:
b0:4a:44:8a:c4:a3:2d:cc:bc:1a:99:8c:a3:ea:6f:63:39:0a:
aa:45:9a:30:77:63:25:62:64:0f:64:8c:99:58:bd:19:6f:d5:
be:23:32:81:fd:2c:06:b4:74:e9:e6:df:4c:e4:e6:7f:cd:ee:
dd:75:99:a2:09:88:5b:65:c3:db:a7:d7:17:56:f3:c1:3b:5b:
43:78:65:dc:42:23:5d:1d:37:72:2b:98:db:13:f4:d6:3c:77:
76:89:c6:30:b6:bf:2b:14:42:3d:fa:c9:9c:b8:b4:35:a9:80:
9e:da:12:11:01:1d:b3:02:8a:13:ff:25:07:83:a9:3e:c1:55:
3e:ae:b9:de:26:b9:df:90:d8:31:c3:bb:fe:7d:a9:42:2d:f4:
5b:42:8b:71:ea:52:e3:40:4c:75:65:b2:62:56:ac:b7:4a:c0:
51:b9:11:9e:79:1a:1e:86:ec:57:b6:28:35:38:f0:af:6c:ab:
a9:b9:f3:54:c3:a2:02:b4:e4:30:68:28:bf:50:0a:73:30:07:
b9:67:a1:37:9d:90:d3:a9:b0:69:d3:35:8a:40:77:0e:e3:d8:
bd:81:05:fe:70:2c:0c:e2:76:6d:07:fe:a4:d8:f9:fb:a6:ac:
fe:f7:63:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:38:37 2025 by rpki-client