Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3659464-749d-33b3-8591-dd2b5d6c9672.roa
File: e3659464-749d-33b3-8591-dd2b5d6c9672.roa (raw, json)
Hash identifier: ntf7h1jPvzIzvNLbWeeLO08WjkHrQ/uBceCbBJFhQNU=
Subject key identifier: 47:30:D7:EC:78:B1:92:01:5E:F9:F3:6F:E8:AF:64:F9:32:FD:E0:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C712F025D5134FB0F54D79480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3659464-749d-33b3-8591-dd2b5d6c9672.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 161.188.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:71:2f:02:5d:51:34:fb:0f:54:d7:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=501140ef-dcf3-4a45-a844-0ee28a97739e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:48:03:87:29:c2:55:89:0d:53:9e:82:24:97:
23:5a:00:99:2c:a3:1f:be:eb:a3:66:9a:3b:75:f9:
e2:0a:52:44:fe:70:0c:a1:f4:b0:0c:f6:44:b1:14:
ef:1f:c8:4e:7c:73:1b:db:51:b4:1e:72:45:06:a0:
b3:29:8b:76:b9:01:67:39:7f:64:6e:f6:9c:f8:9d:
8d:94:e7:38:e9:11:c0:80:9d:86:e8:8a:9e:f8:89:
76:b8:2a:b2:ac:91:98:53:6b:92:cc:7e:98:47:7f:
96:21:4d:fc:b9:79:53:66:26:e7:74:17:b3:16:d1:
3f:5a:79:41:bc:5c:23:3f:72:ea:42:7a:bf:3c:79:
9c:21:fe:f4:3a:38:73:9a:60:8b:d2:3f:8c:f3:84:
d2:00:56:23:e4:a9:20:6f:db:be:29:f3:f0:91:83:
1c:da:7d:b0:84:26:4d:ec:2e:df:b4:ff:35:8a:66:
ee:ab:7d:fd:d0:ca:1b:0e:fd:a0:d1:8b:a9:33:da:
9e:f1:0b:c1:de:2f:94:f7:df:18:59:28:b3:c4:c4:
80:45:28:b3:54:45:e5:f3:a0:a9:5e:9e:99:b0:6d:
a3:04:b4:48:0b:f7:17:f2:10:39:fb:14:d4:69:c1:
fc:5d:86:70:3d:8e:df:25:49:47:cf:c1:f8:4e:43:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:30:D7:EC:78:B1:92:01:5E:F9:F3:6F:E8:AF:64:F9:32:FD:E0:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e3659464-749d-33b3-8591-dd2b5d6c9672.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:92:4a:3f:1e:9a:07:7b:e6:4c:f3:27:20:f4:0b:28:1d:41:
2c:ea:fc:3b:16:7d:91:6c:6e:d1:9d:63:06:cd:99:63:cf:ad:
d6:8e:ee:a8:af:48:81:4e:eb:74:89:32:0d:fe:67:6a:a7:66:
89:4b:a9:b1:91:14:0e:89:01:3e:27:d8:80:45:a6:83:45:8f:
31:6b:18:ed:07:9f:5e:a8:6b:ee:1d:c7:51:a4:2e:7a:4e:41:
50:bb:31:a6:9d:67:b2:bf:7c:84:a2:d1:3a:a0:41:69:fb:39:
a5:cb:b5:db:a2:51:61:bc:a5:e6:fe:72:8e:53:7f:2b:61:24:
52:90:87:b1:3b:fe:12:4f:4e:f3:e5:1b:8e:5b:19:c8:6d:a5:
41:93:c6:fe:28:55:a7:49:bf:d3:55:14:8c:a4:2e:15:01:d9:
34:af:36:76:7d:3e:1d:be:d3:29:fe:59:14:25:6e:fb:c8:0f:
aa:4f:62:8e:3e:fa:8e:a3:a8:d3:fa:93:96:fa:34:c7:a6:af:
36:e2:8c:d8:3b:e1:9d:1e:56:a9:2b:ec:3a:1d:8b:02:c7:b1:
ac:4e:b0:3b:a1:1d:00:55:2e:fb:9a:90:3d:14:ae:2c:22:f3:
af:60:10:37:89:f4:7b:d0:c1:f3:dc:e6:a0:16:06:fc:73:ea:
14:bb:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:28:59 2025 by rpki-client