Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef53d323-24b7-3ba4-ba6e-ef32d7e7b5d1.roa
File: ef53d323-24b7-3ba4-ba6e-ef32d7e7b5d1.roa (raw, json)
Hash identifier: 2tlDVzDS1cbap1kYyOvhs5Vz6JGhNAKsP95iqpPHIT8=
Subject key identifier: 0A:39:D8:07:01:A9:BF:D6:19:BC:AC:2D:3D:BC:B5:D0:BC:EF:97:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409C9D95A72800C09867BF7660
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef53d323-24b7-3ba4-ba6e-ef32d7e7b5d1.roa
Signing time: Tue 17 Jan 2023 12:00:00 +0000
ROA not before: Tue 17 Jan 2023 12:00:00 +0000
ROA not after: Wed 22 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9c:9d:95:a7:28:00:c0:98:67:bf:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 12:00:00 2023 GMT
Not After : Feb 22 05:00:00 2023 GMT
Subject: CN=8a111d92-61b4-4e3e-bfcb-fedaf0569159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d7:74:98:8b:db:79:0b:2d:c3:5c:53:e0:cf:
2e:43:43:d7:2a:1f:02:30:2c:22:27:2b:2d:6a:b0:
7c:8b:cd:76:f3:3d:70:8a:46:07:cf:77:a9:ff:01:
7e:27:49:23:21:40:63:c9:7f:83:1f:12:03:45:a8:
52:1f:74:18:0d:d4:d2:95:e9:7b:b9:3e:1f:b2:8c:
77:24:3c:f2:96:2d:af:e7:11:58:f2:da:20:31:f1:
ce:7d:b4:99:2d:94:cf:81:4a:2b:e2:20:85:0d:d3:
1d:aa:1f:d9:50:70:73:63:f7:6d:64:c6:61:1a:73:
24:fe:6d:7f:0a:5c:2a:23:4c:aa:ae:57:d7:cd:e0:
d8:c4:bd:6d:b9:16:a2:9f:66:97:6b:ca:55:e9:87:
b8:d8:e8:71:99:92:d2:b6:05:c1:99:ec:7e:4e:33:
a8:26:ac:93:81:13:dd:50:94:f9:e4:53:64:31:21:
9a:5c:e8:2e:9f:d4:ff:9f:93:83:22:33:03:13:26:
45:c5:69:27:c7:3d:3f:cd:c7:fd:72:4c:95:3b:b1:
93:06:9b:b9:60:b4:33:c3:3c:56:08:07:a1:22:ec:
0d:62:14:47:7d:a7:af:86:18:61:11:16:19:95:65:
bf:34:6c:ad:58:99:d8:a6:61:a0:a6:17:92:47:55:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:D8:07:01:A9:BF:D6:19:BC:AC:2D:3D:BC:B5:D0:BC:EF:97:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ef53d323-24b7-3ba4-ba6e-ef32d7e7b5d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:3d:0e:47:73:e2:d6:81:41:6c:32:3b:e2:cb:f9:f8:c7:9b:
b6:fb:fe:8e:aa:e4:20:76:68:e4:8b:8a:46:c4:2f:c5:23:94:
c6:02:22:a6:b8:d4:02:36:8a:82:1d:79:21:22:04:5c:38:66:
73:cf:f1:0a:62:4b:88:dd:97:9c:69:10:a0:69:0e:c0:0d:08:
30:5f:80:99:93:36:3d:e8:55:0c:7f:83:6c:de:84:ac:ac:7f:
06:3b:be:ac:bd:97:3d:ec:3a:9b:43:6f:f4:9a:68:32:80:db:
c8:f0:e1:fa:1f:ef:90:d9:53:10:d8:1c:85:a4:96:db:17:32:
33:55:df:0d:b3:ec:8e:64:91:7e:87:b3:20:24:88:0e:db:1a:
73:c2:af:78:c2:29:d3:b0:29:a0:d5:b5:fc:07:16:5c:a1:53:
8e:4a:f5:2a:07:8e:75:03:d5:af:e0:cc:fc:45:ff:6c:7b:36:
44:da:e5:98:fe:1c:e6:6d:7d:c1:55:41:6a:ef:94:97:34:47:
86:f4:28:40:d5:98:bf:ba:e6:28:28:4d:0e:ab:96:da:3c:44:
63:e2:f2:70:86:f9:2b:12:55:36:d8:a5:ab:b5:08:f0:31:99:
1e:a2:7f:a1:d4:1a:06:a3:72:7a:e7:d6:e6:33:a0:73:43:d5:
ce:e6:04:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:56 2025 by rpki-client