Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a679fb2-d528-36b0-8ff1-f354e7f19f77.roa
File: 4a679fb2-d528-36b0-8ff1-f354e7f19f77.roa (raw, json)
Hash identifier: POdCUwmy0iIkTLnQ/CXyTLVh7Dmy4NNsu7obj8utb6Q=
Subject key identifier: 05:4C:EC:EA:B7:8B:F3:FC:0B:1C:0C:13:A2:92:6F:C1:56:32:AA:06
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F08137B49803F9477B42D9060
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a679fb2-d528-36b0-8ff1-f354e7f19f77.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:08:13:7b:49:80:3f:94:77:b4:2d:90:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=8cca0876-d9df-480e-9531-40010202ab07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:dd:67:43:f9:58:c0:17:9d:24:be:2c:d2:0a:
5a:b6:52:c8:9a:ac:d1:ec:cb:8b:7a:cd:07:a9:81:
e1:d7:c7:f3:8b:55:a9:e1:13:da:15:d6:f6:33:8f:
81:2b:5c:6c:e1:31:d2:de:6b:0f:04:8a:bd:2a:49:
ee:90:02:48:b4:d3:98:46:7f:25:dc:3d:c0:4c:af:
93:dd:a8:2d:d7:1c:51:3d:e6:22:13:18:1b:3a:41:
a3:fb:e4:c9:0a:a1:55:4d:cb:e9:25:5d:da:fa:ee:
c9:5f:19:7b:b6:8f:65:12:ea:a6:29:eb:f7:00:b2:
a8:77:69:45:e4:d8:8f:3f:8e:a4:c6:bd:85:52:ff:
4f:b3:9c:a6:54:72:3b:c1:47:1c:5a:93:f3:cd:1c:
2a:59:2a:b8:6c:80:4e:c2:6e:0a:4c:8c:f2:2b:d1:
b2:7e:e1:c3:68:71:87:86:a8:9d:99:4b:05:de:0c:
84:cc:90:96:11:b2:7d:9c:56:63:37:d3:62:ac:b4:
de:8f:1e:06:45:f6:a6:e9:a4:4f:35:24:1e:64:47:
25:fd:a4:99:0c:54:e4:c6:3e:ce:65:bb:ed:04:4c:
01:fc:ac:06:37:ae:88:08:86:24:b6:58:25:ef:2c:
3f:0a:5f:12:04:a0:eb:46:a5:0a:ea:27:fe:51:2d:
6d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4C:EC:EA:B7:8B:F3:FC:0B:1C:0C:13:A2:92:6F:C1:56:32:AA:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a679fb2-d528-36b0-8ff1-f354e7f19f77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:fd:9c:b9:9d:57:78:9d:01:b2:6f:20:d8:ba:0e:ba:f2:fc:
0c:2e:7f:cb:54:65:17:2b:30:c0:be:2f:47:02:72:86:7b:37:
6f:57:29:ea:fc:3a:70:db:ae:06:80:f0:11:74:1d:dc:5b:b6:
6f:8e:27:18:ce:26:d5:66:f0:20:61:93:65:c0:72:09:ab:34:
28:bf:0c:4e:28:16:ca:6e:ef:05:65:51:67:40:43:01:64:72:
fe:5d:7e:f2:2e:b8:de:8e:38:92:70:9f:d9:6a:fb:40:90:11:
34:9c:6f:dc:f0:ac:e6:2f:39:c1:72:15:31:1b:a3:ed:9d:e8:
c8:4f:38:c8:28:a7:c4:8f:26:d7:9c:7c:df:7b:a4:d1:a6:fd:
06:68:87:d0:fc:ae:22:39:f8:56:99:bb:fb:62:12:53:92:b1:
4e:33:1b:13:5d:8c:4d:1a:d7:2a:25:0a:64:a7:10:64:40:fa:
18:34:27:32:b3:a1:9e:32:7c:59:86:0d:4b:bf:aa:87:59:91:
eb:7a:c8:99:d7:48:de:ea:ca:c3:a5:92:7a:fb:e0:d4:31:ba:
ac:5f:31:cc:ee:25:97:8e:8e:32:e5:41:28:5c:77:48:69:ea:
f7:e9:06:c2:bb:0a:0e:a7:34:f7:88:c7:64:a4:c8:e2:e6:af:
59:38:de:a8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8IE3tJgD+Ud7QtkGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyNTEyMDAwMFoXDTIyMDkzMDA0MDAwMFowLzEtMCsGA1UEAxMk
OGNjYTA4NzYtZDlkZi00ODBlLTk1MzEtNDAwMTAyMDJhYjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN1nQ/lYwBedJL4s0gpatlLImqzR7MuLes0H
qYHh18fzi1Wp4RPaFdb2M4+BK1xs4THS3msPBIq9KknukAJItNOYRn8l3D3ATK+T
3agt1xxRPeYiExgbOkGj++TJCqFVTcvpJV3a+u7JXxl7to9lEuqmKev3ALKod2lF
5NiPP46kxr2FUv9Ps5ymVHI7wUccWpPzzRwqWSq4bIBOwm4KTIzyK9GyfuHDaHGH
hqidmUsF3gyEzJCWEbJ9nFZjN9NirLTejx4GRfam6aRPNSQeZEcl/aSZDFTkxj7O
ZbvtBEwB/KwGN66ICIYktlgl7yw/Cl8SBKDrRqUK6if+US1tbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAVM7Oq3i/P8CxwME6KSb8FWMqoGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGE2NzlmYjItZDUyOC0z
NmIwLThmZjEtZjM1NGU3ZjE5Zjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEI2AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAv2cuZ1XeJ0Bsm8g2LoOuvL8DC5/y1RlFyswwL4vRwJyhns3b1cp6vw6
cNuuBoDwEXQd3Fu2b44nGM4m1WbwIGGTZcByCas0KL8MTigWym7vBWVRZ0BDAWRy
/l1+8i643o44knCf2Wr7QJARNJxv3PCs5i85wXIVMRuj7Z3oyE84yCinxI8m15x8
33uk0ab9BmiH0PyuIjn4Vpm7+2ISU5KxTjMbE12MTRrXKiUKZKcQZED6GDQnMrOh
njJ8WYYNS7+qh1mR63rImddI3urKw6WSevvg1DG6rF8xzO4ll46OMuVBKFx3SGnq
9+kGwrsKDqc094jHZKTI4uavWTjeqA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:08:25 2025 by rpki-client