Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34d6f773-2427-3cfd-9fc3-6db929097644.roa
File: 34d6f773-2427-3cfd-9fc3-6db929097644.roa (raw, json)
Hash identifier: d2X3rRFsc9j7PRuq3eLCIlABDucG7CqdGVLuO7/hc0I=
Subject key identifier: 62:29:B1:71:F8:3F:BD:6B:29:EC:84:3E:C4:B1:A9:57:56:26:3B:55
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6B9F44F7EA4F1582569EBF90
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34d6f773-2427-3cfd-9fc3-6db929097644.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:9f:44:f7:ea:4f:15:82:56:9e:bf:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=97ba8d68-ba84-47e1-96de-56840652efe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:68:b5:2c:f6:60:39:4c:df:16:68:7f:c6:6e:
cb:5c:aa:cf:c5:72:b6:65:17:ea:a7:2b:a3:88:1e:
b0:3b:27:7f:bc:e0:75:53:aa:75:f2:ca:76:d5:6a:
e4:e4:ee:5c:12:2d:61:af:47:66:50:e0:81:2d:e4:
f2:57:b1:55:8e:e9:31:47:0c:b7:3e:99:b7:08:c0:
9c:68:5b:1b:17:ba:45:dc:2e:f9:b4:fd:29:73:e9:
7b:93:df:6f:8b:18:1c:42:5e:a5:d5:0a:c9:b9:ce:
19:9b:b5:85:a0:4b:d5:30:7b:41:16:c2:a4:7a:3d:
68:a2:c9:3c:d5:68:0b:ea:b8:cb:da:b3:fd:a0:51:
c7:bb:bd:c3:ef:34:ac:5b:44:7b:71:1e:ae:d2:0c:
20:7a:ff:7e:21:09:68:61:f7:9f:1a:5f:de:07:e0:
7e:d8:40:f7:ef:f8:38:fa:8e:7d:42:46:d0:f9:a5:
2a:a2:54:32:c6:3a:47:e5:55:eb:56:0f:6d:f1:83:
2b:76:59:43:c1:c8:35:93:f6:c3:e2:5a:6c:12:48:
4d:fa:bb:4a:98:d4:de:60:64:17:44:e6:9b:61:a3:
21:8e:17:59:63:e8:d1:2a:0b:3a:32:43:15:58:e5:
c7:1d:20:97:20:32:4e:7e:7b:c4:91:3e:a6:34:0a:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:29:B1:71:F8:3F:BD:6B:29:EC:84:3E:C4:B1:A9:57:56:26:3B:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/34d6f773-2427-3cfd-9fc3-6db929097644.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:19:37:65:80:95:49:2c:c2:cf:24:42:d6:dd:d6:c5:ca:a5:
15:1b:0c:70:e6:f4:cf:45:de:2f:7a:58:aa:1c:71:3a:c6:2d:
70:ca:b0:22:8c:42:13:23:d2:4b:a2:43:d8:c6:3d:ca:af:48:
88:90:d6:bb:ed:49:d0:14:2c:ca:73:c0:ec:b2:77:61:fb:5d:
e8:b9:b4:74:a5:e7:10:8e:c7:e8:e9:77:73:61:c7:ae:08:b8:
50:14:2c:e0:58:2e:72:4d:a0:c3:8c:04:79:37:d9:47:f5:15:
9c:c2:f2:68:84:1d:7b:96:74:b3:62:9c:c3:1c:55:26:58:71:
38:3a:eb:26:36:a2:da:c9:f6:fa:0b:c8:02:1d:bf:08:ea:2d:
c8:78:42:81:08:76:76:11:a1:68:c1:af:5d:83:4c:ab:21:a5:
07:93:8d:aa:bc:2f:58:9c:d1:5e:bd:1f:67:e4:eb:97:bf:19:
55:b2:7c:1c:3c:9f:7c:15:b6:08:1c:bb:93:ea:d9:19:e3:9e:
7d:58:36:d8:4f:7b:13:e0:5b:6f:13:99:7a:c4:9f:ea:5b:21:
64:68:79:66:34:b2:4b:d7:09:cc:b0:c5:35:eb:dc:50:1c:98:
cd:85:3b:35:db:84:7b:f6:84:40:01:f8:6b:00:09:9a:07:7f:
9e:b6:86:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:42:29 2025 by rpki-client