Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5b97303-8a52-3914-8ed6-7770a7b9851e.roa
File: f5b97303-8a52-3914-8ed6-7770a7b9851e.roa (raw, json)
Hash identifier: Z2iOezznIxRHQTsJ9Dk8ldPL05n/1eZq8FX4Up0T/ic=
Subject key identifier: BB:5C:72:C8:16:3B:C4:29:8C:6E:B5:74:84:86:73:70:E1:7F:25:D5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EC73270340F038327B0665F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5b97303-8a52-3914-8ed6-7770a7b9851e.roa
Signing time: Tue 02 Aug 2022 12:00:00 +0000
ROA not before: Tue 02 Aug 2022 12:00:00 +0000
ROA not after: Wed 07 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.191.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:c7:32:70:34:0f:03:83:27:b0:66:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 2 12:00:00 2022 GMT
Not After : Sep 7 04:00:00 2022 GMT
Subject: CN=b1fcf043-a907-42f3-91fd-4f5bf793d0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:7d:20:ba:8e:88:e8:40:69:46:5c:85:a0:
69:40:bd:26:30:c8:ac:73:12:28:88:2a:8a:d4:3d:
15:56:2f:80:42:66:00:d8:9d:c1:0f:58:61:ad:20:
dc:fd:20:b5:a4:26:2f:cd:a0:dc:a1:97:0a:52:29:
f8:73:5f:75:b0:fe:f7:34:2a:6e:c9:48:80:71:3d:
9b:60:4c:c6:75:1f:d8:25:58:0e:0b:d4:90:36:1a:
8a:5e:4e:2a:6a:cb:46:dc:50:eb:5c:56:e6:9c:db:
58:fa:28:0d:f0:ca:2f:ba:70:c1:9c:b1:a2:32:d1:
80:37:70:bd:8e:db:fe:a7:bf:8b:81:a8:0c:7f:2f:
48:7f:33:92:3c:03:f1:0e:1b:fc:6f:ae:e4:2c:06:
cb:69:d1:78:7d:e8:f2:31:c8:0b:7d:dd:a3:8d:4c:
0d:32:47:c6:b2:c5:91:81:38:7e:5a:54:06:f1:63:
1d:2a:0d:91:a3:11:1a:03:1b:59:4a:b8:78:82:1a:
de:02:94:d7:7c:d4:14:4e:6e:e6:d9:e8:b2:ce:11:
1a:0d:b4:b0:6b:eb:a2:d9:d3:bf:33:46:f4:87:65:
24:2d:62:7e:2d:0f:25:03:89:e1:89:e0:c5:6a:6f:
6f:fa:c2:a2:8a:65:7e:8b:94:ec:d6:65:cf:ee:b0:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:5C:72:C8:16:3B:C4:29:8C:6E:B5:74:84:86:73:70:E1:7F:25:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f5b97303-8a52-3914-8ed6-7770a7b9851e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.191.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:21:24:49:4c:b4:81:df:b8:08:84:7f:5b:db:e6:27:d4:56:
80:eb:ae:64:1f:42:59:35:04:04:e1:32:23:58:30:b6:0f:db:
3a:c2:eb:26:ef:b9:e1:4f:6b:b3:68:d8:5c:cf:c7:51:ff:56:
46:2d:f4:b5:50:a7:2f:60:7c:05:9c:b8:ee:8e:ae:41:88:99:
7c:36:6c:aa:60:a0:28:66:db:43:1b:57:0b:cc:99:87:5f:4e:
a1:6b:98:49:fb:0b:b6:bb:c9:f5:1d:9a:26:ef:04:c0:7e:17:
07:7a:6c:8a:2c:55:59:50:a1:82:6d:c6:98:dd:a9:21:2c:bc:
71:15:a4:c9:c1:8b:c8:f9:b2:7e:73:2c:86:53:9d:44:60:7a:
94:76:5d:b5:6f:62:52:2c:c0:39:cc:87:c4:6f:1c:53:fb:02:
68:23:ed:3d:5c:18:d4:21:09:fb:e0:a8:47:d5:6b:43:46:d9:
6b:be:4e:c3:f9:49:50:0e:65:5b:28:16:aa:b0:04:9c:e7:c5:
eb:73:24:04:01:c1:f4:c1:2c:ec:3d:fe:c1:17:ee:c9:24:ba:
04:03:07:0e:5a:16:a5:dd:af:9e:a5:ec:14:70:98:99:65:8f:
cb:f0:ac:13:12:95:0a:3e:3a:8a:d4:6c:ce:21:ce:d2:de:fe:
65:0a:e8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:28 2025 by rpki-client