Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21fdb7f8-5c61-3837-bb10-b59e28c855a6.roa
File: 21fdb7f8-5c61-3837-bb10-b59e28c855a6.roa (raw, json)
Hash identifier: CnHK1FLUMncf/kINKtiqUaaxQO8blNTziCvpNYNQHnI=
Subject key identifier: A4:6A:F3:F5:86:26:E7:B0:A4:EB:C6:79:82:44:83:5D:25:60:8E:61
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD60ED990A0850CB67CC5A20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21fdb7f8-5c61-3837-bb10-b59e28c855a6.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:60:ed:99:0a:08:50:cb:67:cc:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=17072aa8-8359-4a99-8b4f-a6ab30f9dcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:a6:51:28:5c:35:34:a0:27:d1:c3:56:16:
4a:35:73:d5:fd:ab:c2:33:f5:f4:34:e9:20:f7:42:
2c:99:dc:a9:78:63:d7:2e:94:58:86:a7:a0:85:35:
a6:57:bc:bd:7c:2d:cc:5f:0c:85:50:d7:49:8c:56:
fa:44:7d:7e:a5:6a:83:db:6e:33:70:3b:4d:ea:9f:
e9:34:fa:3c:c0:bb:31:47:92:4a:e0:b2:da:a6:29:
5f:38:97:61:0b:f6:1d:54:61:5e:1a:b5:2a:f3:61:
48:e8:cd:67:bf:48:0a:dd:31:27:7b:a4:3d:b0:cb:
65:38:0e:a3:07:e4:13:81:4f:4a:58:0b:6a:4f:eb:
87:ae:99:82:eb:c2:a5:79:96:45:7e:32:de:13:72:
7d:33:15:f0:4a:3a:0f:dd:69:25:3c:5c:fd:9e:1b:
59:cc:99:ac:24:36:07:d7:e5:4f:30:14:38:9f:28:
97:e9:77:49:d7:f2:0b:e8:44:46:b9:bc:07:22:d4:
e5:3b:70:1a:96:91:a3:a4:20:58:b7:50:b7:eb:b4:
fc:b0:9e:a9:1c:97:10:6f:83:64:15:d9:cf:11:d2:
21:7d:ef:12:74:02:0f:31:c6:94:17:d0:5c:dc:2f:
92:cb:4d:f4:a5:25:a5:0e:0f:9b:ed:7b:04:78:3c:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:6A:F3:F5:86:26:E7:B0:A4:EB:C6:79:82:44:83:5D:25:60:8E:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21fdb7f8-5c61-3837-bb10-b59e28c855a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:02:a9:3a:04:1e:4a:ed:cd:9d:f4:61:22:1b:05:a9:e5:59:
b5:ec:56:3a:a3:25:ea:0e:14:9a:81:9c:2b:77:b5:b1:bc:86:
72:66:66:f2:82:c5:39:76:53:9a:d5:e7:75:3a:4c:d5:22:be:
48:a4:3c:d1:34:2c:7d:9b:33:6a:1d:7e:85:20:0d:91:f3:5b:
41:61:03:47:9a:44:34:ce:a9:ea:03:d1:26:ed:77:6a:67:ab:
8a:fc:2b:3a:a9:ee:6f:a0:e7:fb:c1:1e:00:20:cb:e5:80:53:
46:2a:87:c6:da:e9:bc:08:ea:5b:8e:eb:c9:f8:05:d5:27:56:
da:67:cb:93:ef:3e:ce:99:18:78:6e:ef:18:55:71:37:4a:29:
55:38:8f:9c:06:c9:fc:b0:d8:b6:6c:33:10:3d:5b:be:eb:c4:
ae:ac:4d:f4:79:48:60:5b:e7:1e:b1:3e:b7:39:28:b8:85:19:
23:18:9b:20:35:22:df:da:34:f1:25:ad:e8:91:8c:66:03:63:
47:51:f7:6b:c7:6e:8e:22:d2:43:e8:45:22:1e:79:da:5e:ea:
29:37:26:12:18:02:b2:a5:79:d0:d8:77:2d:70:52:c1:ad:a7:
44:e6:b0:93:c5:e0:5a:24:8b:d5:12:a4:ba:fc:20:53:67:81:
ae:56:94:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:46:17 2025 by rpki-client