Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/facf13d2-449d-3325-aea5-09741ed4879d.roa
File: facf13d2-449d-3325-aea5-09741ed4879d.roa (raw, json)
Hash identifier: ELsRIaOTuhrbD9WBCLUMmnxfyghDG47fWBnCvNmX/oE=
Subject key identifier: F7:53:E0:9D:C2:C6:C6:2B:AE:5F:E7:66:59:81:5A:C8:2C:6D:3C:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E94C5438D11893F287F8B1600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/facf13d2-449d-3325-aea5-09741ed4879d.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 161.188.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:94:c5:43:8d:11:89:3f:28:7f:8b:16:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=fd536035-611b-419a-803f-9396b44b4038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b4:56:1e:c4:dc:69:5b:c9:1f:f0:a1:8f:94:
8d:f9:0a:ba:0e:21:bf:3a:1c:39:a3:22:0d:1b:dd:
75:55:0b:d4:c5:68:45:3d:b3:9d:d6:56:73:05:5f:
19:80:00:39:52:55:5c:4e:4b:de:14:be:ff:e6:51:
24:f2:e9:52:2f:c3:93:f1:7e:28:c0:b6:7d:9a:c4:
71:20:5c:35:b9:0e:89:0b:e3:36:3d:a2:d2:69:ae:
9a:7c:ba:5a:e9:e3:9b:51:fb:42:fe:92:4c:c5:99:
95:4a:34:c8:5a:c4:b3:79:c8:c9:d6:e9:a0:1b:65:
7c:3b:7f:6d:23:f8:bc:ad:3d:44:f6:57:d3:17:9c:
c2:86:fe:9f:1d:d0:12:c6:ac:a5:38:91:3f:4b:10:
b9:67:9f:04:ad:43:68:11:f6:ad:b3:c3:18:1b:37:
c5:5d:63:d6:61:03:5c:5d:94:c2:93:fd:ac:ab:0d:
19:fe:58:3e:b6:ed:f2:7c:58:b6:40:7d:1a:6f:5a:
9e:5d:30:53:76:bd:d9:65:55:2c:31:7d:96:4b:df:
ce:6a:bd:76:d9:f5:fd:c6:8f:cf:e3:d9:a0:9a:95:
77:71:a5:44:ac:23:aa:60:77:13:eb:d2:8c:c1:41:
fd:fb:bc:22:73:2a:1d:3d:0f:13:35:f4:d5:14:1f:
f8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:53:E0:9D:C2:C6:C6:2B:AE:5F:E7:66:59:81:5A:C8:2C:6D:3C:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/facf13d2-449d-3325-aea5-09741ed4879d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
161.188.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:fd:39:c0:b8:63:2a:82:4d:fe:61:8e:ca:88:0d:34:59:56:
fe:5e:1d:38:47:1e:6c:d9:4c:0a:28:90:f1:b2:ad:63:81:19:
4f:01:33:f2:48:2b:ea:cf:31:54:8a:04:3d:e5:dc:0a:60:d4:
28:0e:d5:07:dd:52:2c:f5:36:17:5e:e5:eb:26:90:f9:4d:1d:
5a:74:73:f7:fc:ba:3c:5c:a7:54:1a:ca:b0:4b:73:c4:a3:fa:
6a:42:10:bc:b6:5a:f4:de:3c:eb:f8:d6:0f:b2:67:60:2c:f9:
5c:09:19:77:28:af:ac:6a:5b:42:91:1d:f3:24:f4:a1:5c:f9:
7e:95:cd:50:d5:75:75:0e:dc:45:87:a8:88:65:ba:97:8c:34:
bb:7f:b5:08:9e:3f:b5:61:d2:ac:23:58:7a:8d:71:99:90:68:
f7:83:5d:7e:18:10:fa:ad:ed:56:07:cf:03:d7:d7:a9:f6:28:
6a:3b:db:25:ad:8f:e4:4d:f8:f3:52:a4:3c:e3:17:8d:22:c4:
df:f4:5e:91:91:35:1e:88:ce:6f:c9:f4:44:91:12:54:cb:e1:
57:aa:47:d1:cf:ea:b8:04:83:3e:75:62:7c:8c:ab:a3:e2:57:
cd:34:10:c7:41:23:7c:69:a0:29:a3:bf:9e:2a:32:d5:4e:d6:
f9:51:ea:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:39 2025 by rpki-client