Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f7f9b13-6904-3353-b125-4632d3fc15d5.roa
File: 3f7f9b13-6904-3353-b125-4632d3fc15d5.roa (raw, json)
Hash identifier: cmbDrjl13GRH1+ryz98biGhYCfJmUwXN6rOLZkc/FQw=
Subject key identifier: B0:CF:D1:17:FF:0C:70:26:0F:13:ED:31:F0:5D:5C:1A:A1:D7:54:F5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DABC6FC39D650894474092D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f7f9b13-6904-3353-b125-4632d3fc15d5.roa
Signing time: Fri 22 Apr 2022 12:00:00 +0000
ROA not before: Fri 22 Apr 2022 12:00:00 +0000
ROA not after: Sat 28 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:ab:c6:fc:39:d6:50:89:44:74:09:2d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 22 12:00:00 2022 GMT
Not After : May 28 04:00:00 2022 GMT
Subject: CN=4af50a07-efa2-4bce-b2b7-10340ba77eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9a:d8:38:16:cf:ae:ec:37:db:b4:c7:de:88:
46:3d:52:7f:62:ce:24:fd:d3:a0:15:ce:8d:41:d4:
d2:fb:4b:d4:74:86:f4:bc:c2:67:d9:51:ce:18:19:
7c:15:ae:8d:07:e8:0b:39:6c:0f:76:a8:e2:f4:35:
4a:a3:78:95:c4:8a:09:17:12:66:9d:87:55:fe:f2:
47:2e:73:ff:7c:c5:8c:25:fc:78:03:64:57:0b:68:
8b:6c:fe:b9:3a:04:aa:21:aa:80:d8:33:07:8c:fa:
10:95:5c:b9:87:29:75:0b:b8:d6:c2:6d:98:69:ce:
37:9c:30:34:fa:72:54:a8:5e:17:b3:fe:12:59:5d:
14:52:77:91:82:d0:72:4a:35:b5:f6:60:07:4f:cb:
24:9a:3c:f3:8c:5a:48:48:e7:32:de:ed:1c:ab:07:
78:2e:54:7f:a2:1b:7b:9a:b4:78:2f:24:fa:a4:9d:
16:02:92:0f:39:b3:69:fc:48:e8:7d:13:af:2b:c6:
40:02:33:3a:f9:41:25:7b:ef:71:b0:dc:10:b7:14:
43:4b:d7:19:f1:af:b1:2a:c8:d9:f6:09:3c:2a:85:
14:ee:38:64:56:2c:6e:63:cd:e4:8f:ce:6b:84:17:
22:9b:dc:e0:1b:58:cb:2e:b3:5f:0a:8b:b6:23:5f:
22:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CF:D1:17:FF:0C:70:26:0F:13:ED:31:F0:5D:5C:1A:A1:D7:54:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f7f9b13-6904-3353-b125-4632d3fc15d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:58:c7:fd:54:87:03:1e:11:01:39:de:23:c3:d8:bd:47:90:
fc:4d:a0:17:a4:3e:23:b5:4e:3c:ea:4f:ac:0b:37:5d:9b:6b:
0a:a5:d7:c0:ab:d4:8d:cb:24:8c:fc:91:fa:80:a8:7b:2c:f2:
d8:4d:05:02:26:3d:24:8a:71:a0:f3:38:3d:72:67:a2:d7:3e:
73:6d:c4:de:b8:10:c3:69:c5:8f:91:99:f6:1c:00:4d:a4:50:
12:e2:5a:82:f7:d8:94:d6:ee:c9:4f:c4:62:35:46:8a:06:0b:
58:78:ed:29:08:02:12:90:c1:9a:c2:2a:45:db:80:95:c7:2c:
6d:14:9e:c6:03:5f:73:f3:fe:a6:dd:29:5f:8d:9d:e3:80:87:
4c:15:4f:20:ba:90:37:fa:10:03:f8:2a:22:9d:af:23:e6:f4:
ef:a5:0e:08:d4:72:25:98:3c:55:34:1b:b6:96:ca:19:07:ae:
76:b7:5d:df:97:53:8e:d5:d3:7e:7e:3b:d8:1b:f4:62:21:b5:
c4:45:df:fa:87:3b:c3:8d:c5:be:7d:6c:79:bc:37:d0:a5:81:
10:8a:dc:70:25:ab:0d:a6:c0:2f:91:d3:99:d0:9e:17:75:18:
33:00:c0:c5:bc:77:37:01:2b:a2:b3:0e:51:4e:d6:a8:17:70:
7b:05:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:01:02 2025 by rpki-client