Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1c84edf-b606-3679-bddd-3186f2d3f3ad.roa
File: f1c84edf-b606-3679-bddd-3186f2d3f3ad.roa (raw, json)
Hash identifier: kTzIarFNdQEstEDtSt+LkeKur2GkZ8N5n5Of9RsiuuM=
Subject key identifier: 2A:4C:FC:06:87:D0:AD:33:6F:69:BD:F9:C0:9C:C9:E6:A3:70:BD:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584092431E8D5EE1CC39D01A7580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1c84edf-b606-3679-bddd-3186f2d3f3ad.roa
Signing time: Fri 13 Jan 2023 12:00:00 +0000
ROA not before: Fri 13 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 161.180.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:92:43:1e:8d:5e:e1:cc:39:d0:1a:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 13 12:00:00 2023 GMT
Not After : Feb 18 05:00:00 2023 GMT
Subject: CN=2f0a0deb-9984-4b83-8fd6-f43272d7df18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d2:bf:8c:3b:fa:43:3e:5f:70:4a:46:ef:aa:
57:14:8d:0b:2c:ca:e6:0d:60:1d:72:c4:ef:fc:3b:
07:fd:a8:77:41:e5:e7:b0:94:33:db:9c:ca:c2:07:
7c:2b:6e:78:d3:02:dd:11:f7:c0:9e:3a:05:b6:ef:
05:f1:4c:03:c1:28:ee:21:ce:85:e6:77:5d:35:d9:
92:ec:a2:69:87:ff:14:49:65:b5:50:54:b8:99:fa:
a6:9d:95:84:ad:10:5d:1b:17:ed:58:e2:6c:20:10:
15:9e:fd:9e:f0:a5:9c:c0:ef:c9:6e:82:23:b0:63:
4d:bc:07:37:8e:f3:b8:92:d7:87:be:b8:17:88:b7:
05:5d:80:b2:6c:ea:1e:8e:0b:33:19:a4:15:56:91:
be:6e:cf:28:2b:fa:a8:e9:a0:f8:11:4e:94:69:dd:
10:6e:99:6a:9c:7f:e9:92:a0:77:35:ab:d2:4c:1a:
3b:a0:1a:c1:cc:cb:2b:20:55:13:6d:08:40:7a:88:
e4:be:e9:82:3d:e3:68:ae:13:fd:89:82:21:af:e7:
43:8d:2b:e2:c5:9f:24:26:02:19:4f:d9:10:bb:59:
c6:e3:7f:84:2a:63:81:28:0a:74:64:2c:f0:a3:ca:
ae:f7:75:df:a2:82:cf:7a:6e:6a:1f:48:c4:90:44:
ff:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4C:FC:06:87:D0:AD:33:6F:69:BD:F9:C0:9C:C9:E6:A3:70:BD:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1c84edf-b606-3679-bddd-3186f2d3f3ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.180.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
00:4b:20:28:33:cd:4c:c5:24:2b:0c:0c:4c:68:91:76:a9:d3:
e1:13:bb:34:ca:b1:ce:42:45:c1:cd:b7:2b:30:dd:87:10:1f:
72:5d:a4:f8:94:39:e1:2a:27:86:4d:cc:74:07:48:95:ce:f0:
30:bc:3a:59:89:5f:6b:f7:b8:b6:98:e0:17:60:bd:c0:d3:db:
37:7a:d7:bb:43:87:65:d7:4b:8d:ee:36:14:91:bc:bb:b0:33:
c8:9e:0c:bb:e3:97:1c:bd:be:1b:dc:1d:e3:2f:f3:18:3c:cd:
f4:f2:f8:bc:d1:39:cc:dc:58:d0:86:06:57:90:c4:6b:f5:49:
5f:d4:9b:dd:95:41:82:88:2d:72:6f:71:21:41:8f:32:54:d3:
a6:72:e9:7d:f7:02:d7:4e:0d:5d:52:a9:8f:d8:70:d8:47:3e:
6e:84:22:69:f7:d6:46:8a:6c:cf:60:82:78:c6:fd:17:6e:c4:
65:bd:b1:0d:68:12:6b:1d:90:f5:e2:df:62:9e:21:d2:d5:9d:
0d:7d:7e:7f:83:57:66:b4:44:e2:5e:c4:cf:6e:68:90:84:e0:
5c:b6:b7:70:0b:cf:b5:3d:0a:01:33:74:ff:3e:61:74:89:71:
ba:40:b6:88:06:5a:0d:0b:5e:b8:37:4a:2a:48:68:80:68:7c:
51:f6:86:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:25:46 2025 by rpki-client