Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f59a1619-44ed-388a-a7a5-fac0a7d21e7d.roa
File: f59a1619-44ed-388a-a7a5-fac0a7d21e7d.roa (raw, json)
Hash identifier: QukXlFp9KjXlL8/GKZlc0FfkHV4/zou7tSJvP+oq53M=
Subject key identifier: 7C:C2:6E:06:E3:C8:FC:29:3A:F9:CA:4E:61:67:63:1C:51:1F:F2:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840142400A0444AE05C18181D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f59a1619-44ed-388a-a7a5-fac0a7d21e7d.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 161.188.128.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:14:24:00:a0:44:4a:e0:5c:18:18:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=25faeb3b-b785-46bf-8b6c-6067cd1fe956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ba:2b:2c:c0:75:87:b0:1c:0e:8d:2c:43:a8:
f0:7a:9b:5b:ca:e9:2f:cd:e8:f5:35:3b:07:3f:1c:
26:2b:09:bb:0f:21:7d:82:3b:a7:ad:af:2a:d0:d7:
36:a0:ea:5e:34:82:03:22:1d:1c:53:bc:50:f6:76:
43:e8:0a:e5:11:0e:76:6d:5d:95:b9:a9:5a:7d:77:
4d:84:b8:27:26:44:e2:27:2b:a9:37:51:88:9d:e7:
5a:34:14:8a:f1:7f:e0:bd:84:90:70:81:69:e5:2a:
64:14:c3:9a:06:92:8a:55:f2:08:1b:bd:cc:d5:a8:
40:59:66:03:46:d3:68:2b:0c:fb:4d:30:f8:ca:69:
38:7f:02:f3:53:fa:8c:e0:f4:cf:9f:c2:3f:11:46:
1d:1e:5b:d7:8e:50:df:71:5b:69:83:ad:a8:35:74:
c0:0c:b2:f7:ab:79:d1:a6:93:57:71:67:6f:5d:2f:
91:0c:23:c3:98:a6:68:3b:f4:c8:ba:6e:70:70:83:
e1:79:2e:cf:09:0c:de:0e:92:c0:43:8f:ea:b4:b1:
9a:b1:7e:ce:ab:83:c4:32:ed:8b:9f:56:e0:6c:d5:
12:6e:06:6f:f0:77:6d:fc:c6:23:ff:1f:5f:01:0e:
ca:c7:a2:eb:48:58:50:fa:d9:01:a6:31:42:26:31:
ad:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C2:6E:06:E3:C8:FC:29:3A:F9:CA:4E:61:67:63:1C:51:1F:F2:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f59a1619-44ed-388a-a7a5-fac0a7d21e7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.128.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:68:bd:23:fd:99:87:bf:62:37:c7:16:3a:aa:63:41:e1:0b:
14:1c:90:1a:ce:ac:ca:f3:c9:73:09:25:f9:1d:a1:ae:d4:aa:
cd:49:e9:d4:bc:33:c4:9a:0a:00:1c:a6:98:26:3b:a9:38:65:
77:6f:53:33:09:07:db:9b:d7:b6:ce:0b:8d:92:85:15:db:1d:
1f:7d:f2:55:19:2d:10:c5:03:53:f5:06:7c:cb:c1:82:b8:2f:
c1:eb:40:ef:54:3d:66:0d:75:bb:30:f8:94:9f:ac:3e:fe:e6:
a6:bc:6b:de:d4:be:3c:58:71:5f:00:98:d0:d4:f5:b2:ab:db:
32:c2:72:7e:2b:6c:69:c1:14:9b:8a:b6:d0:11:57:7e:4d:d4:
2f:6d:3b:c2:97:7b:36:10:23:24:d8:d0:2a:60:de:7d:c9:8a:
d2:8a:b5:0d:6b:7a:d6:df:3e:a5:1e:7f:50:e0:ce:25:27:38:
6e:c5:b1:e9:d7:97:73:a7:c0:b5:07:c3:d6:cd:ca:0f:96:0e:
0b:c8:da:66:97:c1:c1:a9:f2:80:68:61:1e:2d:14:60:d8:d7:
2a:a2:e3:4a:a5:11:fa:73:19:95:5c:84:80:6a:1a:ed:47:e2:
73:4c:d6:c0:6f:bf:ec:c9:df:b3:8c:fb:a1:d7:02:bc:55:d0:
a7:83:43:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:05:51 2025 by rpki-client