Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df1eb308-6cd1-3598-8048-cb3a5dc5cbdc.roa
File: df1eb308-6cd1-3598-8048-cb3a5dc5cbdc.roa (raw, json)
Hash identifier: VPxp5rYao8Lj/sE5X08c+tPivprIDlcBru3M2hvgDww=
Subject key identifier: F4:8E:37:78:4A:38:FC:E8:E4:0A:7D:11:97:1F:29:A1:F1:C7:9C:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F03DBBDBCEA5D2024D63A1D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df1eb308-6cd1-3598-8048-cb3a5dc5cbdc.roa
Signing time: Tue 23 Aug 2022 12:00:00 +0000
ROA not before: Tue 23 Aug 2022 12:00:00 +0000
ROA not after: Wed 28 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 161.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:03:db:bd:bc:ea:5d:20:24:d6:3a:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 23 12:00:00 2022 GMT
Not After : Sep 28 04:00:00 2022 GMT
Subject: CN=08634364-d200-4936-b6bd-be2eaac8b8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:0b:c2:68:ae:93:e1:b2:48:20:26:99:05:
a9:81:69:60:3d:41:84:85:e2:ea:22:74:81:85:14:
e5:4f:a8:f0:61:59:23:7b:ff:38:b6:aa:c7:74:52:
ad:20:2c:c7:77:8b:ff:fd:0e:a5:9f:bd:6d:52:e8:
11:9f:39:e7:4b:41:a0:a9:be:36:11:f3:ec:6d:27:
a2:3b:9f:32:c4:b9:bd:d8:7f:c0:f9:8b:b4:b3:05:
56:d6:de:b2:2d:ab:f0:ad:91:ae:90:d0:58:5c:6f:
56:a8:e0:87:7a:17:f2:91:bf:bb:f3:c3:97:f2:da:
c6:34:ab:a4:df:3b:1e:72:06:0b:14:5d:23:bb:e0:
4e:54:47:b9:18:10:7e:ad:57:2f:e6:60:ac:11:40:
f0:62:6b:fa:30:75:92:7d:8a:da:8a:a3:8e:a1:bb:
9c:60:f1:ce:27:59:67:0e:aa:e3:02:8c:82:31:e9:
3d:19:c8:91:43:03:85:58:cb:13:50:6e:ea:18:a4:
22:bb:d7:7a:16:fe:91:3f:53:4a:b9:6a:54:45:a8:
25:4d:00:5e:6b:9a:d0:1f:83:77:07:1c:9d:8e:f7:
eb:3d:5f:08:07:6e:20:d2:3e:20:eb:9c:bd:04:77:
8d:75:4d:49:71:d5:c1:fd:80:72:4e:84:44:32:22:
6c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:8E:37:78:4A:38:FC:E8:E4:0A:7D:11:97:1F:29:A1:F1:C7:9C:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df1eb308-6cd1-3598-8048-cb3a5dc5cbdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:fb:85:7a:3b:c5:59:bc:27:af:e6:be:ff:d5:3f:2c:f6:0e:
1f:1d:e3:c6:b7:66:9a:63:8a:6f:cd:09:59:b7:d9:54:df:f9:
ff:e7:76:96:ed:b4:ec:9d:15:4f:ac:b1:8d:e8:d6:1f:d1:bf:
6e:e5:a7:a9:d0:f0:b2:88:92:de:ee:5d:1f:5e:6a:93:0e:e6:
3d:40:6d:88:f2:46:78:1f:9b:5d:96:bb:2b:33:be:1e:fa:5e:
48:fe:dd:c8:d2:c6:8d:2f:45:a7:0f:10:a8:9c:cf:6f:e9:78:
26:0b:7c:1a:2a:a9:19:50:14:80:a2:f0:34:2e:12:80:82:08:
60:5f:dd:07:7a:ee:93:94:97:b0:87:d9:96:cd:9f:be:50:72:
d6:01:10:af:7f:d9:4e:c4:b7:1f:db:bc:0c:63:e7:7b:e7:34:
e9:8d:51:99:06:63:7d:26:18:f4:8c:47:9d:ef:37:bc:44:cb:
e2:ac:41:9c:3e:17:ec:91:95:be:32:45:06:76:ef:e2:18:be:
b6:f6:ba:39:d5:67:b5:b8:9e:76:20:50:46:3d:fe:fc:44:20:
b1:75:cb:57:f7:ac:c2:1a:48:b0:f1:2a:77:f7:6a:bc:fa:a4:
07:a6:5b:4b:ef:59:e8:32:28:38:2d:89:b9:98:6f:0f:c7:b2:
29:4c:86:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:17:23 2025 by rpki-client