Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4af3cb59-a7c6-3986-9c21-00712e0df5b9.roa
File: 4af3cb59-a7c6-3986-9c21-00712e0df5b9.roa (raw, json)
Hash identifier: Aq/+7aLRflK73J4uinNfztmQwJg3zwUldkURNmUVT68=
Subject key identifier: E7:42:05:D3:6D:3C:1A:6E:CB:EE:0A:9A:1D:E1:B6:82:05:B8:76:60
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F26B95A036C3D3A0DF5AA00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4af3cb59-a7c6-3986-9c21-00712e0df5b9.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:26:b9:5a:03:6c:3d:3a:0d:f5:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=d9cadc8a-b867-4bf1-af73-1a2dbc067052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:f9:10:0a:dc:11:c4:ea:d5:e9:66:6c:e4:
65:af:95:25:03:f2:4b:4c:ea:1d:44:f7:92:98:1e:
f4:31:ea:7b:29:ce:d8:59:8a:26:43:f0:8d:07:f8:
78:98:b1:bf:52:b6:89:33:4d:97:90:e5:b1:0f:a2:
a2:e2:e8:32:40:d6:14:3c:c4:e2:29:c8:1f:a7:31:
74:a5:c2:71:6e:0f:d5:67:74:26:d5:3f:8a:d2:c2:
2a:87:ae:ff:2d:7b:fa:d9:e7:c9:bc:f3:24:09:d6:
bd:58:f9:9c:a1:fc:d2:15:6c:22:89:7b:31:6c:96:
f7:b0:59:4a:93:f5:a5:ab:00:53:3f:da:a0:36:6d:
cf:fb:35:d5:4b:d6:4d:d4:c8:e8:be:3a:c4:f7:a2:
80:58:36:4a:88:9e:5b:78:e0:69:0b:19:41:8a:2f:
e1:a7:f0:5f:e0:4c:59:81:e7:3c:5e:f3:d8:1a:9a:
e1:79:16:e3:ff:85:e7:88:ea:96:86:73:7f:27:51:
c9:a7:26:40:48:df:01:3d:e9:e7:be:c2:bd:05:8b:
70:a3:39:e6:e0:55:16:30:77:80:df:32:d1:72:2a:
40:b5:32:49:ed:e9:fd:93:a3:85:d2:60:b1:71:24:
d0:e8:7e:f3:f3:01:e4:7d:a0:b4:8f:cd:84:37:b3:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:42:05:D3:6D:3C:1A:6E:CB:EE:0A:9A:1D:E1:B6:82:05:B8:76:60
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4af3cb59-a7c6-3986-9c21-00712e0df5b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:c8:9b:81:60:e3:e9:14:11:96:91:f0:08:16:d7:f5:b8:6c:
49:70:d7:09:a4:63:35:7f:df:b5:1c:e5:ff:ae:8e:fa:11:ac:
3b:33:c7:82:63:99:20:b3:0b:fa:d0:83:40:ef:f8:14:32:8a:
d1:ba:4a:7a:c0:aa:ce:0a:60:0b:d2:b3:c4:45:5e:43:4e:88:
58:f7:3b:ef:ab:de:b6:65:a1:4e:04:41:5d:01:c4:22:60:ef:
1f:e8:bf:71:f8:25:00:3d:2c:8d:b5:cd:a0:9d:63:70:55:77:
06:e1:a4:e6:08:34:f1:f7:f3:71:dd:a1:6c:5a:e1:e5:0a:ff:
5f:8a:3f:69:28:ea:bb:81:26:d5:80:49:f8:05:fb:97:9e:8d:
88:1d:b0:b0:b9:87:c7:5e:a3:00:ca:fa:3b:a9:d0:f9:04:40:
6d:12:77:cf:61:2d:cb:18:87:cc:f3:16:8d:a3:af:1f:83:9c:
73:bd:a0:f9:40:48:46:0b:0d:e3:50:c8:22:5b:cd:90:f5:cc:
9e:7f:b8:e6:75:18:63:a3:7a:0b:b5:8b:0e:e0:99:bd:33:51:
d6:4c:5b:89:5e:07:21:ae:21:79:18:41:36:27:f3:ba:1b:50:
13:8d:47:8f:f2:7d:db:dd:55:c6:3f:29:d1:50:aa:e5:c2:26:
85:6b:69:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:45 2025 by rpki-client