Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c869b29-cbe4-324c-808c-c9e32c7cc7d5.roa
File: 2c869b29-cbe4-324c-808c-c9e32c7cc7d5.roa (raw, json)
Hash identifier: nCTLDSmFl19Lto7hmqQ//kWDcgx1ME5pfiqi6jhV68Y=
Subject key identifier: 4B:4E:90:45:B4:07:11:F5:66:FD:17:0C:01:14:5D:65:F9:C1:6A:8C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F83B280752A137C97027DB180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c869b29-cbe4-324c-808c-c9e32c7cc7d5.roa
Signing time: Sat 08 Oct 2022 12:00:00 +0000
ROA not before: Sat 08 Oct 2022 12:00:00 +0000
ROA not after: Sun 13 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 35.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:83:b2:80:75:2a:13:7c:97:02:7d:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 8 12:00:00 2022 GMT
Not After : Nov 13 05:00:00 2022 GMT
Subject: CN=dee6c074-6795-4ac1-8bcb-8b321666a3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2f:73:b9:65:73:47:89:44:dc:09:97:d3:86:
85:7f:38:e6:f7:ed:03:5e:d0:71:8c:7d:58:fa:73:
8d:81:37:ae:e4:f0:34:0d:c8:ae:e3:3d:1b:bb:a5:
db:a5:11:39:84:0f:8d:ca:17:99:3e:8f:1a:6b:a0:
4d:33:ab:c7:94:46:3b:58:c9:c6:c7:19:04:48:51:
e5:39:95:45:7f:c8:2d:c7:ff:55:18:f3:5e:05:68:
11:c7:df:7b:32:37:39:b1:c4:32:7b:d2:71:df:42:
16:d9:64:ed:5f:f9:43:07:d7:5a:38:45:80:c1:33:
97:39:a0:fa:ab:d5:b2:88:65:14:f8:9c:a9:e2:47:
09:9e:e1:e8:62:dd:5c:bd:16:b8:17:28:ec:d2:2a:
14:e9:a0:58:e0:e3:d4:16:db:87:d8:83:1d:ef:be:
91:fb:0f:39:a1:a1:3c:1b:3d:54:86:e6:51:54:fd:
a1:f4:2f:b7:6f:b3:2b:47:f1:10:51:e1:fd:21:f0:
e9:70:a9:1c:b8:35:27:f1:cc:ea:5f:d8:7c:be:5a:
42:f5:84:73:5c:03:68:4a:c7:95:68:4e:38:68:a4:
48:62:58:55:95:aa:ea:08:33:30:a7:5b:a9:dc:f8:
5b:fe:f6:14:f7:e7:f8:c5:a1:5f:b8:fa:c6:8a:3a:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4E:90:45:B4:07:11:F5:66:FD:17:0C:01:14:5D:65:F9:C1:6A:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c869b29-cbe4-324c-808c-c9e32c7cc7d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:80:be:d7:d8:04:00:be:37:39:c0:43:5f:70:0a:44:c1:a4:
71:60:e2:fe:9e:9b:0c:d4:d1:dd:f0:1e:e7:c3:47:96:7d:38:
e1:10:2e:06:44:9c:d5:3e:26:5f:15:f9:b7:18:f0:c8:98:a8:
09:99:4e:96:a4:3a:f3:4d:4f:ac:4d:e3:85:2e:44:48:00:f0:
5a:28:42:d5:f4:31:4f:18:83:91:bc:f9:7a:e8:69:5f:5b:4d:
3e:65:9a:55:91:85:b9:e6:02:b6:30:5b:84:6b:be:ba:21:9b:
f6:2c:e0:73:55:4e:e4:0e:dd:20:79:cf:5a:6b:e8:95:71:73:
a9:d1:2b:5f:4b:3f:40:1d:a7:52:54:84:6e:19:74:2d:c5:10:
15:d9:5d:d3:46:b6:dc:7f:f9:e1:4a:05:1e:c1:69:99:16:de:
e2:84:76:a8:03:8f:4a:8b:7a:73:26:7c:e3:88:65:07:35:c9:
ab:f8:80:fe:6c:a3:aa:2e:68:09:a0:3c:62:e1:ae:e6:cd:9a:
76:eb:98:d5:ab:b5:7b:7c:72:fc:b6:09:1e:e1:44:12:58:df:
00:91:93:52:69:4d:ba:f8:92:23:db:c3:d6:a7:7b:8a:44:21:
a7:cc:52:a1:77:d0:81:28:1f:43:5c:81:88:89:b4:a7:22:35:
4b:b3:79:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:28:34 2025 by rpki-client