Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ca3760a-4fb3-3ba6-8210-450d55dd3719.roa
File: 2ca3760a-4fb3-3ba6-8210-450d55dd3719.roa (raw, json)
Hash identifier: 4cXPWt61dmbwFrv2sEvmSPstND3iILI4r+mO+ps4hZs=
Subject key identifier: 4A:C7:10:86:40:54:EE:C5:53:C4:4C:63:31:B3:93:4D:13:E9:E1:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32E1BDF46E24F59BC94EB400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ca3760a-4fb3-3ba6-8210-450d55dd3719.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.112.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:e1:bd:f4:6e:24:f5:9b:c9:4e:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=50224482-c259-4db2-854c-12671aacd1a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:1b:41:22:e9:e2:e2:a6:02:98:f5:4a:d3:
7a:64:dc:c8:98:ac:31:ac:a5:37:0a:9d:0d:ec:fe:
a4:ba:f2:ff:96:c5:2a:3b:d4:67:2a:ab:fc:30:51:
ba:49:20:13:d5:78:86:86:9a:ae:4b:3d:a0:cd:1a:
62:cc:0a:b8:ce:5c:d5:b3:d2:6d:a1:d6:c2:00:ae:
45:aa:03:2c:a7:69:37:62:96:24:78:f5:a9:91:43:
a8:fc:78:ac:49:7d:13:46:e1:27:4a:af:6c:e7:ed:
11:c5:cd:bf:a5:a3:cf:cf:a2:ca:21:86:02:28:96:
a0:c8:45:03:d1:3a:13:f0:2c:99:d0:36:cc:ff:21:
28:bd:4d:9f:90:06:02:fa:ea:c5:8f:be:22:bc:46:
45:e9:5b:92:e8:2e:f9:ee:cc:ca:05:de:b6:4f:4d:
44:37:69:78:81:a4:1e:c3:f8:94:86:0b:c1:a5:54:
ff:90:04:a6:d1:ab:b1:95:ed:00:ed:3c:46:a5:71:
5f:f7:b2:2e:b5:46:07:9a:0e:db:dc:64:e7:5f:04:
bc:cc:b1:92:1b:27:c1:d7:fc:9d:69:2d:ab:db:0f:
66:b6:1a:ca:87:b8:ef:07:e7:1c:48:77:e9:e5:6c:
48:b4:57:4d:47:5e:60:e1:09:04:98:51:36:77:73:
c2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C7:10:86:40:54:EE:C5:53:C4:4C:63:31:B3:93:4D:13:E9:E1:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2ca3760a-4fb3-3ba6-8210-450d55dd3719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.112.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:94:41:c5:70:51:f0:69:29:1a:1a:7b:d5:29:82:b3:dc:60:
d6:f6:33:43:de:86:59:c7:11:f2:d9:96:c8:fd:93:e1:97:17:
8a:96:e9:8c:7d:02:56:ea:58:45:f1:ec:87:ae:61:6e:97:41:
b5:5f:e4:db:d1:c5:6e:4d:a9:6b:e6:62:ea:70:de:09:fe:0a:
08:88:e5:18:cc:40:f3:fd:d7:a8:15:71:69:d3:24:88:ad:1a:
0a:17:d0:19:bb:f7:0a:64:2e:43:96:45:cd:b7:0b:c3:2d:e3:
56:7d:0f:9b:25:0e:96:33:bc:e2:c5:c4:fd:c2:11:a3:8c:d1:
73:98:93:c4:c3:34:43:ca:0d:e5:bc:13:ee:fb:4e:09:d0:e2:
51:f7:00:ad:23:41:18:5c:28:5a:00:7f:b4:9b:14:6a:4a:cb:
a6:9f:46:0c:08:7b:23:15:8c:e8:37:a0:1e:60:97:c5:9b:9f:
b4:cd:da:5c:61:b3:93:eb:c2:9f:8b:43:f0:2a:e7:89:50:9a:
35:b6:73:2e:34:0b:aa:c4:51:94:5b:33:39:bf:6f:47:5e:09:
cf:b2:93:bc:45:b3:eb:a0:3e:45:06:9e:19:df:71:2d:c0:5e:
23:46:d4:21:66:59:a0:db:0b:9a:a9:20:3e:60:e7:f6:d0:6c:
12:b2:c5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:16:58 2025 by rpki-client