Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b030433-1dda-3c98-a76b-ccef48ee4db7.roa
File: 3b030433-1dda-3c98-a76b-ccef48ee4db7.roa (raw, json)
Hash identifier: wbothee/0f3yh7brlHbUlBO5OAAIuNSHdkihrQzaBHM=
Subject key identifier: 14:FF:8D:4D:07:7F:FA:BC:47:7B:6A:16:4C:25:0E:56:56:88:D7:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C964359204756BC3E8830A3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b030433-1dda-3c98-a76b-ccef48ee4db7.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 35.71.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:43:59:20:47:56:bc:3e:88:30:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=76833fb0-4c56-4333-bd60-d05108f076a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2e:d1:44:11:77:b5:fa:f8:75:5a:ff:f3:1a:
af:b3:57:b7:03:93:64:92:d6:2a:17:66:77:9a:76:
9f:cd:a2:39:80:cd:8b:bc:39:69:cf:17:ea:41:f8:
c5:56:a4:c3:06:fd:95:9d:ec:28:00:15:29:2a:9b:
63:23:65:bd:d8:36:0d:74:5f:2a:af:9e:ec:2b:6c:
f7:30:dd:ea:6c:b6:4d:00:4e:e0:0e:9a:2e:87:9c:
27:33:e4:dd:b1:53:d8:a3:4e:cf:3c:32:7a:8c:b1:
fc:41:71:a9:b4:df:5e:ea:55:ed:04:92:3f:93:13:
7a:cf:c0:dc:5a:be:2f:fc:df:60:96:40:3c:a2:30:
2e:64:b7:b8:4a:3d:10:19:a4:86:2e:43:7f:a6:65:
6a:4e:c2:b6:cd:22:36:1c:17:cb:af:09:37:88:81:
4a:84:98:00:21:62:cf:12:30:e4:f8:e0:92:4e:79:
22:c4:6c:17:c5:ac:53:70:e6:9a:a1:2d:57:99:17:
53:98:03:3c:65:26:2d:3a:8d:6d:bd:04:49:36:6e:
be:cb:0c:d0:02:db:b2:32:aa:f5:f8:92:85:d8:87:
f6:c0:c9:26:eb:ca:7f:f0:eb:d3:0b:c8:12:da:d3:
21:0d:af:00:36:6c:d6:de:a4:2e:04:bf:d9:c5:07:
56:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FF:8D:4D:07:7F:FA:BC:47:7B:6A:16:4C:25:0E:56:56:88:D7:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3b030433-1dda-3c98-a76b-ccef48ee4db7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:42:85:34:38:e5:06:1f:16:7f:63:bd:f8:30:70:b0:6f:08:
eb:4c:b4:ac:7b:e8:21:11:d1:eb:6f:30:ab:60:f3:09:17:4c:
a5:79:47:63:f7:92:f9:2a:56:98:6f:b1:df:ee:91:ad:08:5d:
66:24:14:fc:39:3e:60:b8:00:24:eb:a7:a5:d1:57:98:2f:90:
25:61:4c:b1:29:6d:88:92:cb:c5:9b:51:46:d4:87:99:10:6b:
97:f7:8d:34:7d:53:ed:6d:ae:e4:17:43:21:35:5c:35:1a:20:
90:28:80:81:bb:93:21:3e:61:25:a8:f4:4e:aa:80:c4:04:b4:
70:96:d9:05:64:30:73:72:4c:56:b9:b9:67:a4:d3:29:8e:c8:
24:2f:32:37:e5:f0:d1:bd:66:6d:47:0b:d0:0c:61:bb:25:a5:
28:93:8a:8f:ca:d1:9a:26:30:b1:c8:8b:a6:e0:7e:80:5a:cd:
06:87:c5:54:75:a2:cc:ba:c0:7b:06:b4:ca:04:13:53:fe:29:
e5:e2:98:b1:4b:4c:81:19:13:df:44:1b:13:a7:1f:4b:85:05:
44:da:2d:28:5e:6a:31:62:d5:83:02:60:e0:b4:f0:28:48:b7:
65:d2:3f:41:35:63:da:bb:0a:07:08:b5:2a:39:81:55:12:17:
01:3c:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:51:20 2025 by rpki-client