Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecfaafb3-e5dc-311e-ad2c-64353445cf1e.roa
File: ecfaafb3-e5dc-311e-ad2c-64353445cf1e.roa (raw, json)
Hash identifier: WIJR194TbKFo23xzDObOz/qOE1zd6/VhLp0s1RHTqgE=
Subject key identifier: B3:D6:AD:D7:D7:99:52:60:E8:0B:CD:EE:91:EA:63:88:E1:F7:25:57
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F77A845C860CB08C68B900570
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecfaafb3-e5dc-311e-ad2c-64353445cf1e.roa
Signing time: Tue 04 Oct 2022 12:00:00 +0000
ROA not before: Tue 04 Oct 2022 12:00:00 +0000
ROA not after: Wed 09 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 161.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:77:a8:45:c8:60:cb:08:c6:8b:90:05:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 4 12:00:00 2022 GMT
Not After : Nov 9 05:00:00 2022 GMT
Subject: CN=82a037dd-e07f-4f44-82f0-bd6bf3896eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:98:a3:ee:27:2a:cd:b3:6e:86:8d:ec:4e:69:
2b:86:78:11:21:88:8f:3c:51:9f:6c:bb:b9:e0:5b:
07:2f:eb:32:fe:6c:5b:17:a5:7d:c3:6d:c0:77:2a:
bb:23:e0:60:93:77:d2:44:cd:0c:d5:a8:18:88:e4:
44:42:43:16:0f:98:3c:8a:3a:10:d8:8f:1f:f6:17:
71:af:ab:dc:eb:80:ac:71:f2:c5:cb:de:bb:cc:89:
3e:e1:ac:8f:85:e2:80:14:a4:70:1b:7f:20:b1:b3:
e8:51:81:3a:05:a5:f3:2c:7b:8d:f3:a4:65:a7:72:
0d:7a:9f:4b:85:66:b4:a2:5c:19:ef:e1:e0:99:8f:
6a:a1:2b:e6:37:b8:fd:fc:d4:56:cb:c0:95:8e:74:
45:61:ed:c4:17:0f:eb:08:39:59:01:0a:ae:8f:8c:
10:08:80:90:7e:53:9b:d7:66:28:01:5d:d8:f3:a9:
67:21:72:28:bd:77:bb:36:b8:06:66:16:32:bb:c3:
49:15:6e:94:5c:64:86:88:e8:21:ae:cf:1c:e9:39:
ed:a3:18:fb:8d:cf:03:37:bf:88:3b:c5:c4:cf:aa:
bc:cd:6d:9a:94:7b:12:3b:49:5f:ae:36:66:c7:5f:
2e:3d:2a:b7:22:e2:ba:d6:49:3d:9a:64:ca:47:8f:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D6:AD:D7:D7:99:52:60:E8:0B:CD:EE:91:EA:63:88:E1:F7:25:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ecfaafb3-e5dc-311e-ad2c-64353445cf1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:a9:21:a3:f0:3f:49:18:ec:b2:92:22:6a:dc:10:97:b3:18:
33:d9:54:25:8a:dd:67:c6:61:6d:f0:f8:51:e0:58:75:41:cd:
91:30:4a:da:40:da:db:70:63:a6:0f:a5:74:ee:c7:f3:14:60:
2e:2c:d9:1e:43:97:fd:b2:38:26:8c:ba:eb:e1:48:3f:98:90:
d5:80:87:5b:44:6f:2a:60:dd:79:95:90:fd:a9:17:fd:5c:51:
2c:9f:49:08:70:29:61:60:1b:ac:e4:ce:bd:8b:02:ad:f5:29:
d2:42:b4:4a:14:3e:5d:25:12:10:fa:75:5a:03:fd:00:26:02:
d3:2b:5f:fb:e5:df:da:8a:93:d2:c7:94:16:81:b3:70:12:25:
74:ba:f7:ee:93:ba:bb:80:cf:52:98:4b:42:5b:9d:fe:e2:ec:
0f:07:90:f7:a2:f2:50:97:b9:02:3b:7b:ca:a6:e0:e0:e8:59:
cd:39:08:b0:78:67:ea:6c:b4:f5:fa:a7:4f:f9:50:6d:f0:f4:
9a:b0:64:2c:5e:96:89:13:41:cb:09:93:24:17:ec:c3:05:bb:
48:0f:94:ef:d6:7a:07:ce:69:1a:93:36:07:c0:84:dc:d0:a8:
c5:2b:b4:8a:7d:33:13:40:7d:12:7d:49:c9:51:78:fd:04:f8:
37:32:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:06:51 2025 by rpki-client