Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a170216-8b8a-3d59-8a70-c73054aa30b8.roa
File: 2a170216-8b8a-3d59-8a70-c73054aa30b8.roa (raw, json)
Hash identifier: AcTGBDY3Ww4GzZ/aTxfCL5Upq5zenxhmzfydgdFZFZ4=
Subject key identifier: D1:81:E9:50:93:AC:1A:7C:01:DD:89:EC:45:01:31:12:C0:AD:BF:A6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B906D9D6806D01A08EB5CE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a170216-8b8a-3d59-8a70-c73054aa30b8.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 35.112.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:06:d9:d6:80:6d:01:a0:8e:b5:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=4622bbf1-6d96-4d54-bd56-da4fd0b4840a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b7:95:4a:33:8b:27:c8:4a:62:e6:8a:a0:20:
fb:23:b3:33:e4:39:1c:eb:33:61:ba:7b:f1:d1:b2:
e3:b2:27:29:8c:e4:47:ce:d6:88:2b:ef:d5:88:bb:
8e:99:78:3c:9d:fd:6d:0e:de:0a:dd:92:70:bf:7f:
7e:df:2a:dd:91:4d:90:5f:c7:c1:7d:d1:80:56:ef:
e6:f3:a6:49:67:dc:41:35:97:3f:af:37:a5:06:f9:
a4:39:ac:e1:ef:7a:f9:cf:9d:3d:e5:b9:5a:95:de:
f2:45:c2:1f:0a:51:ba:1b:eb:d9:b5:0a:3e:f7:73:
8e:8b:86:a9:32:97:04:bf:90:d2:75:fd:6a:65:4a:
1a:15:6c:dd:2e:8f:1c:41:38:94:b1:93:1b:db:2d:
cf:a3:6b:07:3f:2b:95:91:b0:ff:72:32:ca:51:94:
6d:4c:83:f1:70:64:dc:99:54:8e:e7:a7:00:52:b5:
9d:f2:4a:b1:23:f7:28:f5:fd:df:47:5c:b5:63:5b:
39:cc:8f:2e:55:92:05:cb:96:9a:9c:ad:09:ec:44:
a3:13:cc:13:8f:0e:85:14:da:74:a0:dc:24:4d:02:
0c:00:b2:8d:6c:c9:50:5e:59:08:4b:e7:7d:25:36:
51:40:43:88:b9:51:5b:c1:ec:e3:33:f3:1a:59:39:
10:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:81:E9:50:93:AC:1A:7C:01:DD:89:EC:45:01:31:12:C0:AD:BF:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a170216-8b8a-3d59-8a70-c73054aa30b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.112.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:1a:aa:a1:9d:a0:bd:55:8c:c3:29:8b:84:b2:f3:fb:1c:12:
aa:52:ed:77:51:a2:17:23:14:25:df:24:a9:33:07:f8:ca:6d:
ea:1e:e0:e4:63:30:87:c8:ac:b4:0e:eb:27:14:49:1e:63:3b:
3f:e9:6c:77:f1:6b:76:e8:98:bf:c6:63:99:4e:14:4a:8c:dc:
5d:f1:3d:dd:3a:8b:b3:9c:26:d7:0f:0e:c9:c7:d2:0f:f1:c1:
6d:23:f2:28:6f:d4:18:4a:d4:3a:a7:8c:9e:94:d9:c8:01:3d:
33:9f:f7:d9:e8:22:16:59:2e:cd:e1:d7:36:f4:86:56:29:81:
49:29:0b:5c:67:01:b1:f7:0c:7c:84:dd:c4:dd:0e:6d:e8:cf:
e8:f2:89:cd:31:c5:d9:3e:10:70:22:ed:31:a3:a5:49:35:2b:
66:23:eb:20:02:be:8e:74:e6:d9:40:a2:b1:ad:f8:47:d2:6e:
1b:4a:76:f3:53:13:4f:83:58:70:c3:10:d2:d3:ef:a7:a1:3f:
dc:d9:9b:c2:85:1e:c7:e7:9d:22:91:f9:27:79:af:5f:e1:66:
3f:6b:14:bf:e2:43:8e:ab:4b:ee:02:42:97:1b:0c:60:92:ef:
fe:4b:23:e6:2d:a0:3c:ff:c4:da:85:86:b2:a8:80:e1:7b:57:
4b:6a:f2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:31 2025 by rpki-client