Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2bb3e61e-7690-3e13-b70f-79ebb2a5e78e.roa
File: 2bb3e61e-7690-3e13-b70f-79ebb2a5e78e.roa (raw, json)
Hash identifier: ZzEt2btLrptr/wMtIH71DaIhGuD8wmXxot4wjI1fDO0=
Subject key identifier: 9B:0A:2B:61:74:84:BA:A4:D1:5C:BE:92:C1:A4:B0:0D:AE:EF:00:FE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA47FFAF29D505512C0EFCE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2bb3e61e-7690-3e13-b70f-79ebb2a5e78e.roa
Signing time: Thu 20 Oct 2022 12:00:00 +0000
ROA not before: Thu 20 Oct 2022 12:00:00 +0000
ROA not after: Fri 25 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a4:7f:fa:f2:9d:50:55:12:c0:ef:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 20 12:00:00 2022 GMT
Not After : Nov 25 05:00:00 2022 GMT
Subject: CN=6d743568-53fb-42af-bbdf-7cf5c033e945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:48:be:f8:d8:d4:db:14:19:9c:77:93:ac:0f:
1b:c8:2a:04:ce:e8:c4:ff:60:dd:0c:04:e8:4b:e5:
98:54:b8:0d:57:72:41:61:31:b6:e5:a5:98:a7:66:
a0:68:e3:64:c1:58:92:a2:e3:6d:ba:c5:32:ec:a6:
8a:4b:c3:df:f8:17:d2:0c:cb:7e:4c:f3:fc:18:4a:
a0:a1:4f:6c:94:5a:b6:17:ee:69:a0:89:4c:b8:bd:
19:6e:e1:c3:94:d6:84:79:8b:bf:b5:5d:49:22:50:
a2:9e:6a:76:b9:9c:ad:98:30:3c:bf:25:33:01:06:
e8:3d:90:6d:71:f8:4f:8b:f3:af:ac:56:8f:85:c8:
f7:10:a3:cb:2c:b8:ba:42:04:da:3c:da:c2:20:aa:
62:e5:e7:41:11:fb:b3:47:75:8c:80:4f:07:b5:18:
11:ea:39:85:40:86:0c:a5:3b:77:d2:9a:1f:4a:6f:
fc:b4:a5:02:30:3c:8c:12:c0:03:e6:12:51:04:d7:
43:bf:0b:5f:ee:da:d1:bb:00:07:4c:fd:e4:a5:69:
93:96:8b:fc:fa:4b:79:88:a0:35:01:83:a6:2d:b6:
6a:cb:c8:5c:19:65:cc:35:d6:64:17:88:04:3a:7a:
d7:cd:a3:c7:8e:5a:48:c4:f2:eb:a1:1a:74:aa:1c:
68:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0A:2B:61:74:84:BA:A4:D1:5C:BE:92:C1:A4:B0:0D:AE:EF:00:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2bb3e61e-7690-3e13-b70f-79ebb2a5e78e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:ad:f7:73:bc:f5:dd:91:51:f9:2e:1e:60:e2:b5:bd:39:55:
18:36:10:7e:88:e4:45:67:83:ed:08:da:09:2a:20:93:d1:92:
21:95:49:7d:54:9c:82:c9:53:66:8a:cb:43:c4:19:c9:b2:87:
4a:11:fb:26:4c:c0:a6:e4:73:bb:2d:df:c8:a3:bb:b2:d6:02:
03:fa:d9:d9:61:d5:0e:05:54:6a:ff:e3:00:ea:48:77:38:77:
e0:02:c7:0e:11:12:a7:ae:d9:2b:eb:cf:df:44:df:28:d9:b5:
10:c0:01:17:40:1b:2c:59:b4:a3:b7:40:85:75:7f:4e:e5:36:
6d:29:2b:30:f0:54:5c:3b:82:01:bb:6c:07:87:30:ba:83:27:
ce:c0:1c:bf:57:fb:e8:ee:f1:2f:12:35:fc:b4:a4:f1:c0:98:
1b:0c:48:22:68:41:08:c8:96:0d:aa:af:5d:63:c1:09:a7:90:
90:37:26:d3:02:4a:aa:17:16:c6:9b:66:15:84:1d:98:40:83:
49:f1:c4:87:0d:24:2f:b1:5c:91:b0:75:38:45:fd:e9:dd:ef:
71:9b:bd:b4:45:84:3a:5c:2d:51:35:d7:7c:8e:d2:29:ee:4c:
47:95:14:f1:90:56:63:6f:8f:6f:c8:06:7c:f3:3f:fc:6a:08:
77:db:92:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:15:03 2025 by rpki-client