Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1046e4f4-7006-3232-bb7d-766a9a1b5bec.roa
File: 1046e4f4-7006-3232-bb7d-766a9a1b5bec.roa (raw, json)
Hash identifier: soo2a9Xscasc17qS0vWBW0jRaWpQGFa4xlqWbNY73Gc=
Subject key identifier: 21:46:87:E5:1C:5A:E2:82:23:C5:8C:17:D6:F0:8A:0C:B5:1B:A9:99
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD6081680271B1D9FEE1E0F0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1046e4f4-7006-3232-bb7d-766a9a1b5bec.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 35.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:60:81:68:02:71:b1:d9:fe:e1:e0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=7b328a02-9985-4316-8007-dbd329b06975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:7b:2b:0b:8c:2b:83:37:07:d9:f2:6f:9a:
15:4b:cb:b8:20:ba:26:48:74:59:16:6d:10:a1:12:
55:d2:50:cf:ce:b2:19:7f:c3:35:e9:6d:38:d2:55:
c4:69:25:5a:61:9c:8b:f4:24:fe:9b:08:b7:38:43:
78:02:98:fa:9a:79:a4:58:ab:81:ad:2a:39:4d:dd:
d1:f5:0c:21:ea:09:81:d1:b9:d4:51:04:43:f4:93:
63:ae:d8:28:6e:28:7f:19:1f:5d:34:23:6e:9e:b4:
2d:c9:06:47:5f:e1:44:7c:fe:14:89:59:3a:64:19:
ac:ae:50:37:d4:8a:77:8c:44:39:34:27:d3:24:36:
ec:31:52:85:f4:45:23:fe:f8:f2:60:89:22:d9:20:
51:9b:a9:be:26:eb:ab:8c:1b:7f:82:fd:93:28:7e:
29:1b:ce:22:de:53:ec:31:10:ad:b3:c4:04:63:87:
88:e0:68:89:32:b7:3f:1d:9c:e1:7a:e6:63:d2:c2:
c8:5c:2b:96:23:db:d6:5d:ff:04:c4:90:19:b0:a8:
99:cf:a9:ad:ff:32:bd:e3:e3:db:56:02:04:45:ee:
ae:7b:21:85:c4:c8:b8:3d:b2:0b:61:99:46:41:44:
4e:17:73:5b:df:c3:c3:b1:1c:8f:b9:42:76:d8:3f:
8b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:46:87:E5:1C:5A:E2:82:23:C5:8C:17:D6:F0:8A:0C:B5:1B:A9:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1046e4f4-7006-3232-bb7d-766a9a1b5bec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:a3:36:e3:62:92:44:a6:ee:be:fe:90:1c:cb:da:0c:ea:79:
ee:ec:03:48:64:b9:34:a9:e9:d6:e2:c7:34:87:d4:c3:df:61:
39:13:3b:f8:3e:22:45:25:62:9b:3f:89:76:62:3f:41:fe:34:
33:53:35:5a:dd:ae:ab:e3:e0:46:e6:78:e9:ea:00:b0:ed:4e:
53:af:35:c6:2c:10:30:c2:cb:ca:23:d9:0b:ef:88:50:31:8e:
5a:f6:74:0c:32:27:9f:87:65:f7:ae:ff:b8:82:ea:6a:d9:24:
b5:47:f8:36:e6:35:b4:2d:31:e7:a4:c5:35:c8:6c:cf:50:b3:
f5:69:0a:f0:26:9f:2b:dc:ac:60:1c:79:90:20:89:23:84:94:
74:b3:46:8a:8b:6b:1c:ec:7c:f3:02:7d:b7:aa:1b:9b:c3:db:
21:94:8b:87:8f:a0:ce:f8:31:5b:cc:9b:cf:11:6d:35:e3:92:
6b:53:5d:bc:bf:41:cc:b4:a5:f2:47:c4:c2:41:0d:28:8a:b2:
ba:88:e2:82:1a:9e:e4:18:2e:ce:6a:63:12:18:fa:17:e4:2e:
63:f9:c1:2c:a4:74:5e:1c:8a:46:bd:c1:76:eb:ae:50:0a:a6:
d3:d9:90:cf:81:68:68:40:0c:6b:dc:6a:1b:30:a2:a4:8e:ef:
cd:cd:12:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:41 2025 by rpki-client