Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33b674b1-a23f-3873-8ebd-7b8a214cb95f.roa
File: 33b674b1-a23f-3873-8ebd-7b8a214cb95f.roa (raw, json)
Hash identifier: la1PO+lVHECPYpcUxvaGDuLjwSkbctoW7ooBd+JBB44=
Subject key identifier: B1:12:89:61:0F:39:18:52:C3:EF:29:C9:8F:55:99:B7:3D:1C:60:5C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32DA971D3BB34DFD66838040
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33b674b1-a23f-3873-8ebd-7b8a214cb95f.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 34.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:da:97:1d:3b:b3:4d:fd:66:83:80:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=06d19e65-a88a-4863-be52-563129b20b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ff:4f:af:e0:22:e0:17:7a:23:f1:c1:56:c9:
77:d2:d7:ae:fc:ed:3a:02:87:30:22:8a:49:27:b7:
60:51:0b:77:4a:75:4f:49:5d:f4:f7:bd:41:58:45:
94:5e:d8:90:66:c0:23:a2:23:ed:cf:09:5c:0a:14:
f0:3b:b2:0d:7c:40:fe:c3:4e:26:4e:e2:1e:60:06:
a2:0c:f6:d7:c0:a0:e9:08:08:6c:2c:0f:08:d4:37:
bb:1a:72:e9:6a:9c:08:90:3b:0a:05:09:8f:8f:7a:
20:e5:ee:56:83:e1:3d:bb:9a:b1:21:6f:db:3a:46:
83:18:bf:5e:c8:f3:bf:53:52:d6:1c:66:49:b6:58:
b3:a9:ad:06:9a:6f:ca:2b:fc:05:cd:d8:c4:0b:1f:
37:98:9b:e7:75:99:cf:43:e3:f7:7e:d4:7d:21:60:
e2:53:45:e4:69:8b:ee:a1:6a:6e:a4:0b:3c:c9:aa:
11:bb:15:6a:d4:d3:42:08:c3:06:a3:e1:8e:41:0d:
a7:34:06:8f:f8:4e:8f:00:e9:c4:a0:3d:48:33:9a:
b2:60:9b:c1:0f:e7:ce:6b:71:78:57:c5:c4:82:3a:
46:58:3e:32:a2:f3:b4:c7:c6:ef:0b:05:37:74:61:
df:b5:a9:d7:ae:f1:b7:cc:2d:9c:31:e7:eb:88:da:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:12:89:61:0F:39:18:52:C3:EF:29:C9:8F:55:99:B7:3D:1C:60:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33b674b1-a23f-3873-8ebd-7b8a214cb95f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
34.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:88:1d:09:a6:d1:b3:49:ac:b4:95:57:e8:75:0a:03:c0:88:
6e:38:d6:a2:50:ff:5b:6c:b6:aa:9a:a4:31:48:b8:f6:de:a4:
8c:81:9a:41:b4:25:b7:9f:c7:9c:36:a3:cc:48:cc:06:4b:a0:
d4:8c:cb:ac:ba:5c:a4:b7:8d:49:d2:a9:2b:af:17:0f:99:fe:
f1:c4:ad:64:84:e9:ab:47:25:48:e9:67:e3:58:f3:70:0e:8b:
57:a9:da:b6:85:46:c6:77:b4:5a:86:54:1a:81:f1:ca:e0:55:
85:ea:5a:6a:e1:bd:29:dd:c9:ee:f5:cd:28:bd:61:b6:a5:0d:
a1:ba:e9:a5:65:ca:96:be:97:b1:bd:43:ce:0c:87:e0:89:a4:
a8:80:35:60:b3:5b:0b:2d:0f:1d:b9:d2:4f:86:97:b2:7c:08:
6f:d4:59:83:1f:40:5f:6c:01:fb:df:27:37:73:4b:08:8f:1d:
42:7e:b9:9b:de:c8:e6:ac:c9:2a:02:d2:ea:04:04:61:c9:b3:
57:b8:7d:4b:ec:80:3b:7a:3a:f4:44:0d:29:08:f0:7d:d3:a3:
83:3a:7d:a0:6c:fe:0d:cd:6d:9e:c6:f5:aa:53:8a:80:d8:78:
a0:36:f4:0c:97:67:1d:03:80:e5:da:ad:07:04:f1:c4:ba:9c:
a3:95:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:30 2025 by rpki-client