Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33d5dd6a-13b3-33bb-8a71-9b489e3133c4.roa
File: 33d5dd6a-13b3-33bb-8a71-9b489e3133c4.roa (raw, json)
Hash identifier: P5pD55JorNbpwC74bNwdDNklBIwPjig2Q5qZIL6Dq8o=
Subject key identifier: 07:77:D8:53:2F:6D:37:91:D3:2A:E3:4E:E5:EF:17:B9:BA:D7:D2:93
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FD1DD78F5BEC3054E19DCA780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33d5dd6a-13b3-33bb-8a71-9b489e3133c4.roa
Signing time: Sat 05 Nov 2022 12:00:00 +0000
ROA not before: Sat 05 Nov 2022 12:00:00 +0000
ROA not after: Sun 11 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 35.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:d1:dd:78:f5:be:c3:05:4e:19:dc:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 5 12:00:00 2022 GMT
Not After : Dec 11 05:00:00 2022 GMT
Subject: CN=8e6042a1-153d-4b00-be90-3ae3b784c411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:4f:07:9f:82:a8:42:ef:52:98:23:94:3b:
46:4a:1b:8d:b7:a0:97:76:7b:72:a3:38:2b:2f:f5:
31:57:88:e1:7f:8a:c8:2d:7d:e5:be:f6:da:8e:43:
06:6f:9d:fb:8e:d1:61:61:f5:5c:28:73:d0:87:3b:
c1:0c:0e:1d:27:92:83:d8:e4:fb:bf:51:50:b9:af:
b1:27:67:e5:7c:43:06:d2:35:43:d1:2d:c4:2c:34:
3f:cb:de:2f:c4:fb:b2:0d:fe:0c:dd:5e:c1:5e:5c:
b1:80:1d:26:d4:d2:33:a5:98:a2:0d:dd:aa:2b:38:
4e:9c:c1:b6:c7:74:01:4a:8b:a0:9e:3b:b1:2c:08:
e7:df:8e:23:88:05:38:30:f0:1d:7c:a8:aa:b6:fc:
0a:d3:05:a9:9e:ee:03:7a:79:74:a2:b9:22:80:40:
54:57:48:9d:9d:c7:12:82:7d:c6:15:b2:71:fa:a1:
c9:ae:63:f0:e4:22:8a:bf:ee:21:9a:99:fa:2f:9d:
61:f3:68:60:bf:4d:f6:42:b1:9a:1d:8e:7b:68:24:
44:47:8d:f1:20:9a:4d:27:e1:35:8d:39:76:c2:f7:
7e:c4:e0:59:89:81:81:96:14:9f:90:c8:e0:6a:0f:
3f:16:0f:53:93:1f:65:3d:56:98:ae:24:bb:d5:36:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:77:D8:53:2F:6D:37:91:D3:2A:E3:4E:E5:EF:17:B9:BA:D7:D2:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/33d5dd6a-13b3-33bb-8a71-9b489e3133c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:11:bb:91:a4:9e:a0:05:d3:50:58:7d:46:ec:b9:a2:57:7c:
4c:58:95:b4:54:53:90:85:68:96:1f:f5:89:ed:3e:bf:00:2e:
fd:17:c0:6b:0b:ae:89:26:e2:57:9b:76:28:2c:43:7c:86:b5:
c8:f7:b0:b8:09:0c:c9:37:8c:b7:4f:24:36:22:66:15:2b:9c:
ed:11:b1:2e:c9:78:65:27:b5:c9:da:05:d6:e5:f0:e0:37:07:
6a:75:2e:35:5c:ec:08:47:54:9c:5a:34:25:25:64:cb:63:88:
c6:c2:6d:c9:b1:d7:18:b8:f3:3f:99:4e:72:b1:1a:8a:8b:3f:
05:e5:25:8c:ae:5a:7f:33:f4:d6:38:87:a2:99:79:b7:82:a6:
7d:c8:a3:41:34:34:da:be:89:16:d2:0e:b6:ce:5a:ea:17:e4:
b4:63:30:77:06:fc:45:3f:f8:2c:c7:d2:41:0e:1f:9f:7d:b3:
6f:a3:0a:ab:1e:83:b3:58:22:f3:ee:5c:95:15:e5:78:88:55:
0d:2a:bd:55:f7:b7:05:d9:51:33:db:19:71:f2:79:43:a2:8d:
5e:85:84:08:e9:e2:ef:60:22:28:93:39:89:6f:4c:a1:29:c6:
b3:c7:ef:b4:14:7c:4e:d8:8e:35:71:40:11:40:fa:3c:f9:bc:
cd:ce:82:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:30:18 2025 by rpki-client