Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7ccb4f5-f8ad-38a0-8117-6278ad399626.roa
File: e7ccb4f5-f8ad-38a0-8117-6278ad399626.roa (raw, json)
Hash identifier: gnc+Ooemxk+2DX5F3etma313EZI/vJIBle+OEtuI/2M=
Subject key identifier: FB:DF:C7:C9:DA:67:55:F8:4F:F1:2B:0C:99:00:28:D0:F7:8B:B1:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E166A5DB7A077B74D24553E20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7ccb4f5-f8ad-38a0-8117-6278ad399626.roa
Signing time: Mon 30 May 2022 12:00:00 +0000
ROA not before: Mon 30 May 2022 12:00:00 +0000
ROA not after: Tue 05 Jul 2022 04:00:00 +0000
asID: 6167
IP address blocks: 161.188.32.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:16:6a:5d:b7:a0:77:b7:4d:24:55:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 30 12:00:00 2022 GMT
Not After : Jul 5 04:00:00 2022 GMT
Subject: CN=7ac8c049-eeb9-48b0-8c50-91bab113bd0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b1:62:fd:0b:3b:10:f5:ac:9c:e9:16:6a:3f:
66:0e:8e:ee:62:ef:97:6c:cb:21:b6:41:ac:b3:28:
64:d3:4d:79:08:eb:bd:fd:9d:36:26:f8:5c:5b:bd:
d0:4c:fc:ae:00:db:89:0b:15:86:ab:49:f8:c9:84:
18:ad:86:33:76:5d:85:d0:c5:34:9a:6e:b7:02:10:
52:a2:b0:e1:a8:5c:f1:81:6b:c6:cf:e6:6f:5d:aa:
e9:12:56:2d:98:86:19:4d:40:bb:52:f5:c7:a7:99:
30:55:c4:f0:f9:42:ec:f8:d9:d2:58:bf:bb:2b:a5:
67:62:b1:60:6b:08:60:d3:79:d7:1e:68:23:56:cd:
31:78:13:80:62:9c:23:a8:77:4a:1a:5f:31:97:f6:
03:f5:8c:27:a3:79:b9:2b:d2:54:73:ad:12:d4:39:
7e:b0:38:3e:47:af:52:30:68:6a:0e:a9:9f:74:8b:
f7:f4:bb:86:87:b8:e8:4f:20:cc:f9:83:cf:98:2e:
03:fe:a9:5d:10:d6:d2:a2:ed:79:a4:65:f9:e9:9e:
68:bf:d5:5e:de:a7:71:97:7c:6c:13:d8:37:7a:82:
aa:53:d6:96:87:f5:da:e1:37:b5:a2:da:f4:82:a7:
1c:92:ae:3d:32:41:e9:89:43:43:62:3d:25:48:6c:
14:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DF:C7:C9:DA:67:55:F8:4F:F1:2B:0C:99:00:28:D0:F7:8B:B1:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e7ccb4f5-f8ad-38a0-8117-6278ad399626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.32.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:80:76:8a:d2:ec:c1:37:81:2e:41:24:d0:22:a0:6b:99:f5:
5d:30:b3:01:ec:76:d5:cb:fb:be:37:59:fa:2a:40:3c:3d:c9:
5a:c3:79:bf:ef:6f:bd:61:a4:e3:14:26:60:4a:cb:80:ce:d0:
0c:76:d2:cb:34:10:39:40:62:c7:de:01:cd:78:8b:c8:a8:3a:
3c:05:69:ee:ba:71:9f:3d:9e:b5:03:3b:95:1b:7f:c4:1d:a0:
40:d1:1b:bf:47:12:c3:e8:74:5c:3d:9f:ee:cd:50:11:c7:d9:
f2:d1:63:37:70:64:07:78:33:49:cf:9d:54:1a:92:1d:e0:06:
d2:87:b9:d2:25:62:e3:39:df:42:fd:9a:ae:00:1a:9f:41:b2:
54:d4:95:c9:de:28:80:53:46:3e:0b:da:f8:da:21:fd:f9:84:
77:d2:2a:13:18:00:f6:85:34:08:db:08:fe:5e:e5:8f:1c:7e:
78:13:72:7d:52:70:7f:b9:c9:1b:d4:77:c5:bb:68:9b:6f:e2:
20:50:ed:6a:0d:ec:82:30:b2:99:6c:c1:32:35:57:79:ea:f6:
ac:91:2f:5e:8a:3e:5a:b7:19:26:37:71:8c:91:98:8a:f9:cd:
ce:82:bb:b3:18:7e:c9:04:40:b6:b9:de:34:cd:9b:39:52:3a:
13:54:77:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:58:43 2025 by rpki-client