Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02d1e0ae-a89f-30d9-8eef-a36ca1a7b136.roa
File: 02d1e0ae-a89f-30d9-8eef-a36ca1a7b136.roa (raw, json)
Hash identifier: t/4TjDfe3XG3PYiM5aDPNFB6bjwckiPDojZSd4cneCY=
Subject key identifier: 3B:68:B5:84:CA:29:F1:00:0C:E7:2A:7F:0E:4E:A6:B0:7F:83:2A:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBD8AC407F9F057677CCBE3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02d1e0ae-a89f-30d9-8eef-a36ca1a7b136.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:8a:c4:07:f9:f0:57:67:7c:cb:e3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=ffad20c9-132a-4638-b1a8-47d75ab86fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9b:70:9e:94:de:09:50:0f:c7:b3:86:a6:69:
4a:18:e0:05:31:5a:0a:95:79:20:d0:e7:2e:8d:73:
c1:c9:8b:44:f1:b2:5f:bc:e9:eb:a8:df:9a:7e:95:
b3:73:5e:c9:0a:ba:2f:cf:4e:1b:13:d0:83:5a:79:
d6:15:e9:ef:1d:1c:7b:e4:3e:f9:ed:48:4f:5c:85:
02:6d:97:46:8a:59:20:01:98:3c:d3:30:31:b2:e6:
ed:b3:65:4e:27:9b:7c:af:ad:73:a7:39:a7:4f:02:
be:89:ff:cc:c7:11:b0:7a:ed:5d:c8:d0:e3:88:ec:
1d:31:4c:3f:18:2d:82:53:d2:59:e0:9c:55:d7:9b:
ff:83:a9:56:ae:c0:11:95:e8:72:48:a1:77:19:95:
4d:fe:7a:75:83:64:87:48:02:c6:c7:c0:33:ae:c2:
5d:8f:67:c7:9d:95:d5:2f:4d:36:a1:47:3b:2a:5e:
ba:1f:c5:aa:9d:8a:b8:36:1d:8e:8e:15:39:40:ef:
b8:23:a6:b8:17:80:e6:fd:2b:21:e4:11:70:79:f1:
61:76:9c:b1:60:0b:b1:48:ac:5a:40:f1:ff:fc:90:
49:19:a1:ab:e7:ea:01:1d:6e:70:6d:b0:48:7b:f8:
46:6f:a7:eb:f2:bf:da:f7:86:8d:16:ea:a5:45:a5:
4c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:68:B5:84:CA:29:F1:00:0C:E7:2A:7F:0E:4E:A6:B0:7F:83:2A:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02d1e0ae-a89f-30d9-8eef-a36ca1a7b136.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:9a:cf:cb:f8:a6:9b:ae:f8:8b:bc:2b:4a:44:4f:ad:5a:08:
02:4a:78:5f:d3:a5:2c:3f:18:e0:02:39:50:34:ea:29:1d:25:
69:5e:3d:07:dc:0d:e3:29:85:b5:47:f0:55:f2:1d:4a:db:88:
e0:27:ea:06:cd:09:b7:1a:68:a1:cc:35:5b:40:63:fe:8c:a5:
55:ce:7d:fa:c4:84:8e:b4:6f:04:fe:56:78:c1:54:57:a0:cc:
39:8d:e7:0d:3f:5a:eb:40:a6:f5:d2:4c:b7:db:b0:ff:12:0c:
53:55:68:8e:e7:76:0f:a5:1e:74:12:a0:4a:8f:db:fa:2e:cb:
57:67:0e:1a:6d:92:ac:43:1e:c3:8a:92:82:43:46:40:0c:ea:
50:d1:19:14:de:c2:a3:de:e0:a6:af:87:cf:dc:4f:dc:91:c4:
d5:27:4f:93:8d:f6:1a:97:d6:b0:13:6b:d6:56:5d:fe:f2:28:
6d:a6:36:4c:f4:2a:69:2f:78:19:01:4e:8e:99:a2:77:0a:42:
d2:38:a2:6d:69:0c:3e:a1:12:13:51:16:fb:58:ff:2f:79:92:
7a:8a:e4:bc:10:c9:3c:1b:27:af:c4:28:09:9f:74:e4:4a:a1:
d8:d7:21:6b:a4:bf:a1:9d:27:2c:cc:3e:44:77:01:4a:a9:0b:
46:c4:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:24 2025 by rpki-client