Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c9dfe1e-5337-3e50-9c3b-f9757cd4573d.roa
File: 4c9dfe1e-5337-3e50-9c3b-f9757cd4573d.roa (raw, json)
Hash identifier: wbB1z1XGiwNK/BWAnzBo+LhenKje4B9eobksnPsyxLY=
Subject key identifier: E6:4D:65:A1:C5:8E:35:88:77:BD:37:6A:50:7D:50:9B:8C:90:D7:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6B9F2B48C5E03A5FFFD99DE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c9dfe1e-5337-3e50-9c3b-f9757cd4573d.roa
Signing time: Thu 30 Jun 2022 12:00:00 +0000
ROA not before: Thu 30 Jun 2022 12:00:00 +0000
ROA not after: Fri 05 Aug 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6b:9f:2b:48:c5:e0:3a:5f:ff:d9:9d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 30 12:00:00 2022 GMT
Not After : Aug 5 04:00:00 2022 GMT
Subject: CN=82c70bd7-274b-4258-97c6-51f402a284de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6d:ee:e9:9a:5f:50:8e:8e:59:9b:a0:df:47:
f9:06:43:4a:0a:31:77:47:ce:fe:8e:cf:7a:01:91:
3a:bc:d2:e4:4a:1e:b2:ac:21:dc:e6:8b:1c:26:b2:
b7:50:9d:ff:5c:61:05:16:be:32:e7:06:2d:35:15:
f3:92:7e:10:7c:71:6b:5c:c4:69:c3:46:23:30:fd:
43:03:ff:ad:98:61:d4:c3:75:41:65:0b:9f:08:20:
1b:69:d6:fc:c9:ff:a1:c6:74:aa:96:6f:96:da:24:
7d:08:99:ad:31:65:51:15:3f:70:c9:b0:3f:d0:c4:
f1:f2:b1:0d:d2:57:6f:8d:8c:23:08:23:5d:81:fe:
f7:38:81:7e:e9:d7:e4:97:05:bc:74:b9:cd:95:83:
0f:ef:05:d4:59:c5:3a:12:12:b2:29:1a:64:31:ac:
e9:c6:de:38:f2:46:cd:7c:9d:19:6f:fc:04:b6:e1:
87:d8:4c:ce:24:37:92:97:0c:90:d6:67:a5:bf:1a:
9c:df:f3:3c:b2:6f:89:28:ca:5b:44:09:73:2e:62:
18:2b:be:19:65:df:5a:4c:42:4a:1f:09:a7:57:dd:
77:c5:6c:6e:68:03:93:e6:f4:bb:20:4b:e2:15:ef:
c8:c9:3b:79:9f:d4:34:aa:3d:55:a1:ba:e9:44:52:
69:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:65:A1:C5:8E:35:88:77:BD:37:6A:50:7D:50:9B:8C:90:D7:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c9dfe1e-5337-3e50-9c3b-f9757cd4573d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:12:18:8e:84:87:5f:7a:fb:4d:7d:f5:45:a5:0c:93:ab:2b:
30:00:b0:86:2a:79:dc:18:44:97:74:bc:22:2a:ab:7b:98:c9:
89:04:81:04:82:cd:9b:5b:ee:e5:58:4f:72:69:38:3e:9e:25:
96:94:cb:ae:8b:bf:09:ef:e2:fc:2e:ef:ce:a4:7b:25:69:3b:
dc:e7:fc:69:e3:3a:ab:3b:cb:34:68:ae:d3:35:06:67:42:97:
93:9e:c9:dc:f6:c6:b1:0d:f7:7f:af:36:75:77:7a:d4:ae:a3:
d7:eb:dc:0d:3e:1f:90:99:35:cd:e3:96:dd:64:d5:eb:b1:ee:
d6:1b:c8:72:15:35:bc:d9:77:d0:08:06:a9:ae:bc:a2:8f:ca:
df:d8:81:0f:36:06:0b:7f:48:8b:41:55:0f:6a:d3:45:e7:71:
66:b3:2e:4b:c9:99:7c:43:4d:74:48:f1:1d:41:e4:17:55:c6:
9a:ef:f9:68:3f:b8:2d:99:f3:3a:7a:d8:33:47:ee:35:74:9b:
00:f9:30:ef:34:63:55:ae:a7:e8:86:b6:e2:dc:4f:d5:58:31:
01:64:41:e2:d4:7b:15:4a:bb:8c:13:2d:86:ea:e9:43:ca:21:
f1:f9:09:7b:fa:45:44:6b:48:cb:b5:56:26:f5:ac:0e:29:b7:
79:23:19:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:11 2025 by rpki-client