Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4880a085-59f6-3594-851d-75eced770578.roa
File: 4880a085-59f6-3594-851d-75eced770578.roa (raw, json)
Hash identifier: plEONJx0AHZJ2pqmjBZUiL8MdasaZgYg9U+m85lTGNk=
Subject key identifier: 52:17:27:A4:9B:EC:CD:68:26:AA:CE:79:7E:B5:57:6F:9E:CF:8E:1B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCB8E3FA4A887AC090C1A1B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4880a085-59f6-3594-851d-75eced770578.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:8e:3f:a4:a8:87:ac:09:0c:1a:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=9943dc63-25db-4126-b6d7-7c05169f1bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3c:0e:a9:44:e0:6c:88:09:c6:03:52:eb:d6:
c3:11:b8:8a:28:4e:80:54:33:91:c2:b8:ae:ae:8a:
67:1c:92:8c:af:d5:7b:69:6c:10:72:46:89:73:08:
41:6e:61:3f:6e:57:37:09:dd:2d:b3:a1:64:d5:42:
da:7b:f9:cd:ea:bd:b0:b0:88:40:d2:2d:c6:8e:0d:
20:44:4c:78:46:82:69:92:80:38:96:fa:e6:eb:91:
7a:40:a3:a9:7d:3f:fa:eb:3d:85:6f:c8:c5:bf:8f:
19:28:9d:da:66:f2:09:7b:40:3e:8d:cd:1c:37:87:
75:18:2e:be:6b:db:fd:63:32:24:4d:dc:f7:5e:ad:
b9:c9:8e:82:9f:cd:92:20:32:60:cb:f9:4d:99:0b:
f1:e1:b5:f1:bc:f3:65:a5:08:54:47:73:8f:12:2d:
6b:34:eb:de:8e:01:96:96:ce:6a:2c:7b:23:27:0f:
d6:97:77:01:32:38:ae:89:93:24:6a:70:ab:a6:b4:
41:bb:5d:11:8d:46:45:76:ea:25:4c:8e:69:3a:0b:
44:92:bf:61:f7:59:66:a0:83:64:97:17:7d:6c:9f:
e2:99:6d:f9:21:65:fa:18:23:da:c0:02:38:dd:f6:
83:15:6c:b2:89:e8:5f:e6:56:3d:f4:de:4a:b1:96:
ae:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:17:27:A4:9B:EC:CD:68:26:AA:CE:79:7E:B5:57:6F:9E:CF:8E:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4880a085-59f6-3594-851d-75eced770578.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c0:3c:17:ad:d3:30:e3:7c:51:84:9d:c3:12:75:06:87:a5:
ca:e8:fe:47:35:e5:ad:5f:3d:68:61:ba:33:67:f7:cb:04:f9:
08:9a:e8:94:71:a9:e1:f9:77:4f:0c:7a:2c:ad:c0:36:26:55:
ab:05:2d:79:b6:16:69:a7:20:88:55:88:2b:d8:4c:21:53:4b:
7b:28:2b:c8:8f:c3:f3:c6:95:c3:0d:20:07:14:bb:01:77:fc:
8f:2d:ad:6d:42:bc:a3:a7:ba:1d:f9:07:de:00:c6:2d:a3:2f:
10:be:3e:44:dc:05:4c:76:c4:6a:03:59:49:64:09:74:bb:e3:
a9:47:25:9e:e3:02:69:0b:cd:f0:7b:50:bc:61:2d:36:69:84:
00:d6:e3:e9:37:2c:5f:03:b5:fb:d2:1c:79:d7:dc:87:f7:67:
e3:6e:1a:b4:d0:af:d8:01:2c:58:63:ad:88:9f:d2:53:f6:37:
68:55:c5:0b:2b:9b:52:26:fd:69:bb:59:9f:00:b9:66:fc:c6:
34:26:26:86:56:3d:d5:39:c1:19:d7:ea:d6:a5:1c:2f:01:95:
73:b6:4b:c2:c6:87:30:80:ba:79:5d:73:30:06:79:a8:63:2f:
a0:23:0c:26:b5:05:d5:d5:c6:aa:98:ed:c8:3e:1e:51:8e:b0:
bf:ff:80:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 08:45:24 2025 by rpki-client