Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20b81b58-be44-3499-a398-9c8f4995f914.roa
File: 20b81b58-be44-3499-a398-9c8f4995f914.roa (raw, json)
Hash identifier: dMng8mFln2SmLhJqO85WmkqMmFN+ED+dqPBlsbifDZ0=
Subject key identifier: 53:BC:67:7D:55:14:51:2B:32:AE:04:A2:1F:BF:FE:BB:D0:AE:DF:D8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FAA762E30D8FE46769E0B2580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20b81b58-be44-3499-a398-9c8f4995f914.roa
Signing time: Sat 22 Oct 2022 12:00:00 +0000
ROA not before: Sat 22 Oct 2022 12:00:00 +0000
ROA not after: Sun 27 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 35.176.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:aa:76:2e:30:d8:fe:46:76:9e:0b:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 22 12:00:00 2022 GMT
Not After : Nov 27 05:00:00 2022 GMT
Subject: CN=20810caa-9c66-408f-98fd-b132411cb0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:96:aa:88:96:78:c4:ef:4b:f8:58:2a:09:0a:
57:a3:16:6a:0a:56:5b:81:f6:39:b8:d9:75:18:a8:
17:ff:31:32:6c:80:6c:dc:d4:51:d0:7d:f8:06:d3:
bb:61:f9:d8:8d:52:02:0f:68:c4:8b:b3:0d:50:31:
7c:e4:20:5f:44:bb:da:84:92:a1:31:0d:b3:ed:57:
fb:4e:32:4e:38:d5:64:3b:36:2c:8c:92:6f:95:08:
3a:e5:ff:e6:aa:de:2b:31:79:7b:ed:7a:60:d1:bd:
af:5b:87:e9:cc:3b:13:b1:1a:2f:4e:be:20:41:db:
cd:4e:74:77:6f:e3:33:1d:8a:95:d8:be:8f:66:52:
dd:cd:fd:24:a0:5d:be:d9:bc:fb:f8:5f:bf:6c:9b:
7d:df:37:27:bf:bf:91:75:da:41:26:95:c6:38:1a:
70:50:ce:74:05:18:a4:58:b0:7c:6b:13:6f:e4:ab:
b9:32:a0:cc:01:85:80:97:d5:90:e6:7a:7e:89:06:
ca:0f:b4:56:90:43:72:13:d8:54:d3:03:2e:a9:9f:
86:e9:f3:3e:1a:bf:8e:0d:7e:53:d1:f1:48:01:87:
78:22:40:04:3c:5d:e9:85:48:53:0e:c4:52:5e:c0:
6f:e3:9e:ff:92:e2:c3:6a:5b:99:53:2e:72:85:49:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:BC:67:7D:55:14:51:2B:32:AE:04:A2:1F:BF:FE:BB:D0:AE:DF:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/20b81b58-be44-3499-a398-9c8f4995f914.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.176.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:ba:f7:4c:80:f2:16:b3:cd:c8:47:69:13:1b:c3:9f:33:d3:
bb:ee:02:fc:0c:f9:08:50:d0:03:ec:b3:81:9a:04:a5:00:1d:
8b:55:12:03:59:c8:44:e6:46:4e:50:94:83:39:a4:44:0b:8c:
4a:85:79:47:43:a0:74:82:d6:c6:5e:e4:75:3f:b5:46:ff:56:
a7:8a:13:20:bb:6b:8e:16:e1:42:c5:4d:c5:27:fe:c5:5f:03:
87:40:1c:1a:eb:86:ed:cd:0e:93:05:8f:b9:71:d5:b1:a3:d2:
de:16:25:45:48:85:16:c7:03:39:3f:7e:da:1b:eb:2d:70:6b:
f5:aa:c0:10:64:de:3a:3e:53:34:98:c0:3b:ab:d1:51:22:40:
13:1f:78:83:3e:cd:f7:f5:0f:37:bc:0b:b8:84:49:36:c2:83:
84:31:ef:cb:71:a0:38:9a:6e:1c:4a:4e:4d:b6:40:be:03:52:
1a:88:08:5f:c1:5d:80:76:59:f2:f2:1f:c0:1c:12:c6:e8:06:
c0:20:aa:b6:c1:3d:07:7c:1e:86:8a:ab:60:1d:5b:0e:6c:08:
f4:15:6c:34:14:d6:d6:4f:15:b6:52:de:14:62:2d:88:e3:ea:
3c:c8:3b:55:44:4b:13:08:9e:d1:f6:3d:87:97:27:7a:6c:2d:
31:81:3c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:10 2025 by rpki-client