Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ce7d871-cc54-3fcc-b872-1063c74ed48d.roa
File: 0ce7d871-cc54-3fcc-b872-1063c74ed48d.roa (raw, json)
Hash identifier: MthTrGYapQxnvIoqQytMhIP0IBdcRwMfgKCnTJAHINo=
Subject key identifier: 01:A2:8B:0F:09:73:9E:69:74:4A:56:33:EB:56:82:E7:15:2D:54:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C96432C9B25A8803733D5CF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ce7d871-cc54-3fcc-b872-1063c74ed48d.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:43:2c:9b:25:a8:80:37:33:d5:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=bea93300-7f53-4b5a-905a-1feff4bdb848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:29:5a:06:48:f0:c0:4f:5c:46:71:48:f2:ef:
99:32:0f:75:ce:b0:0c:aa:87:49:b4:3c:fb:63:84:
e7:49:3d:cd:b3:06:5d:5d:4f:4c:67:65:54:e3:88:
45:33:95:b6:dc:f5:c0:4e:f6:80:f8:c5:33:10:88:
67:5a:f1:a2:93:18:75:e2:f2:1f:e0:80:a3:8f:4c:
56:56:35:1d:de:33:f6:a3:5a:67:4f:53:ee:cc:b8:
9c:a8:58:f4:ca:9a:fc:29:8a:8d:9b:66:10:b3:de:
5e:15:8a:29:3f:f7:fb:c9:35:fc:71:16:d4:c8:95:
35:0f:72:12:32:97:4d:44:f7:f2:f4:19:4c:67:79:
b6:63:e2:ab:11:4c:a4:bf:bb:1b:45:c5:44:b7:c3:
83:de:88:e3:17:4c:48:5f:16:c3:aa:1b:25:88:e6:
cc:05:38:02:18:c5:c1:7c:15:38:bf:cc:92:28:3c:
14:94:5c:d4:b6:8c:c9:2d:24:64:ad:48:8c:eb:d3:
7a:df:61:28:4e:6c:ca:02:6b:d1:b8:ce:ce:9f:61:
14:65:a3:cf:c3:be:bc:b9:56:c8:13:eb:cf:9a:bf:
8c:86:86:d6:14:ee:a8:db:c3:39:aa:cd:52:5f:3f:
30:0e:db:c7:62:3f:04:6a:80:0a:b8:fb:69:ae:76:
58:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A2:8B:0F:09:73:9E:69:74:4A:56:33:EB:56:82:E7:15:2D:54:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0ce7d871-cc54-3fcc-b872-1063c74ed48d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:21:a3:22:70:82:19:ae:ae:5d:b7:cd:7d:03:10:9c:ac:32:
1f:82:ca:e3:e1:4a:96:57:d0:1a:fb:f7:8a:f1:03:db:90:4e:
3d:1d:ad:b3:64:a0:1d:07:4d:0f:2b:0b:6f:37:0e:11:10:61:
69:00:bf:0b:94:e4:88:f6:36:50:40:3c:57:1a:10:00:54:03:
d7:b3:7b:d9:52:09:06:8c:b4:b0:1d:85:bc:b8:dc:43:0a:13:
9a:13:24:9d:9a:e5:f6:98:45:e6:7a:b4:c4:06:9b:fc:79:cb:
bd:eb:44:d8:a9:69:0f:fc:4f:75:ae:4e:b3:90:f4:3b:5a:75:
ba:2e:29:24:b7:76:4a:43:6d:70:c1:0a:cd:1e:ae:33:1b:85:
06:f3:b8:ea:c8:40:d5:e4:eb:58:56:7d:ee:89:ae:46:0c:ea:
bf:e5:c7:47:3e:a5:08:d9:a4:dc:df:a4:59:a8:95:27:0c:b9:
ed:b5:13:c9:49:c5:28:86:7c:4a:7c:c9:45:77:bd:b5:3b:15:
64:74:cd:a1:d0:b6:97:1a:c6:ea:2e:a9:79:62:9a:b6:fa:44:
45:97:b8:41:a1:d0:3c:1b:05:80:a6:b1:a8:91:ed:ef:84:31:
eb:62:ed:f7:54:17:8d:58:b9:96:75:4f:c1:63:e4:0c:94:3f:
f3:48:79:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:59:17 2025 by rpki-client