Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e821ab97-359a-37f9-ba54-9a224a56ca49.roa
File: e821ab97-359a-37f9-ba54-9a224a56ca49.roa (raw, json)
Hash identifier: DlbZ3qDpywGEAISGETtgKJ9ZY+NlSxF1k3d3TOxv8FM=
Subject key identifier: D1:97:2D:F0:9E:E5:45:BC:AC:87:EC:F6:3C:A1:CF:04:1B:D9:56:86
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF53A5BA533D831BE62EDD400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e821ab97-359a-37f9-ba54-9a224a56ca49.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 161.206.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f5:3a:5b:a5:33:d8:31:be:62:ed:d4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=1bba3503-cacc-4d43-90de-5150227ac537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2f:2a:e3:be:87:c3:c0:35:84:98:36:0b:30:
c6:8c:b2:a7:8a:2d:a0:5c:8d:54:d4:e9:7b:0b:3b:
2a:26:6b:40:d1:18:5c:fd:97:ad:f8:02:5b:81:ee:
ec:2c:9b:20:ee:24:5a:6b:e5:56:6d:21:fd:b9:ea:
39:09:fe:ca:81:96:70:ca:d6:25:6d:28:1f:e7:ed:
f1:e4:6a:e7:cb:d7:39:a5:c8:9a:e3:72:96:15:24:
5f:c3:dd:16:97:91:b9:79:a2:2f:d2:e0:a0:a4:a8:
0f:0a:5f:fd:da:f0:b9:b4:40:e7:44:d1:d9:be:f5:
99:d4:6f:13:84:8d:b5:e1:fd:10:a1:b3:42:f8:77:
74:0a:22:30:5c:fa:cb:9b:85:ab:87:0b:24:bd:7e:
a4:23:6f:38:c4:de:21:aa:7b:38:2c:58:5d:0b:bd:
8b:a1:7b:28:9c:0c:f1:00:01:d3:4a:ab:30:65:e5:
e9:59:21:12:8d:e2:84:6b:42:ea:d0:67:4a:3a:dd:
99:3e:00:73:99:c9:52:ae:8b:ce:67:22:6c:8c:cd:
a3:56:41:d2:db:81:2a:ef:63:c7:4c:d2:cd:f9:7a:
c7:31:6f:2f:10:74:c5:c9:7e:b0:ab:01:b2:44:b6:
e1:f9:a5:d5:40:e1:80:4b:8c:b4:a3:29:b2:09:84:
d1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:97:2D:F0:9E:E5:45:BC:AC:87:EC:F6:3C:A1:CF:04:1B:D9:56:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e821ab97-359a-37f9-ba54-9a224a56ca49.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.206.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:48:68:a0:a1:5f:27:44:11:60:13:a5:b4:39:04:23:8e:37:
9f:e4:a4:3b:e5:9c:44:2e:38:e6:27:a2:74:37:cf:f0:ba:1d:
ef:9b:5c:0b:55:1e:9e:65:47:6b:a2:ad:50:61:3d:66:15:01:
e6:34:16:c0:ea:15:e6:ab:9b:6a:90:e0:fe:28:d2:84:97:e5:
54:db:06:29:60:09:d2:15:8f:72:e7:08:7c:40:75:8a:81:1d:
8d:ba:62:80:94:78:c9:af:4c:3f:97:7e:13:6a:2c:ee:4b:05:
01:9a:0f:03:60:56:8f:d8:a7:a5:b7:de:cf:77:15:da:a3:50:
32:62:f3:fa:e1:04:fc:2d:73:fd:f3:61:cb:e2:a0:85:a7:88:
3c:bf:cf:af:04:a1:69:12:60:f0:64:92:cf:9e:56:86:de:a6:
ca:9e:73:9d:8d:a8:22:1f:38:97:cb:db:0a:e8:eb:33:b7:ce:
71:47:3d:d6:1f:35:35:fe:7e:59:85:be:1f:64:8b:49:dd:f4:
fb:79:50:fa:22:32:ad:08:6b:b0:6d:ce:32:6a:e8:34:5b:5b:
6a:81:17:91:e3:14:86:97:a5:4c:c7:77:d8:88:f9:63:55:c3:
a8:30:82:ee:5a:db:63:14:f2:65:90:70:7f:47:19:ee:de:b5:
2b:5f:13:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 09:58:31 2025 by rpki-client