Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f3b4a2e-8772-3d57-acf8-db2684a3c66b.roa
File: 4f3b4a2e-8772-3d57-acf8-db2684a3c66b.roa (raw, json)
Hash identifier: hgyYwrMzp/3O5PYTeNqQKmhCvX2EsoNEL1NZUHvXSB0=
Subject key identifier: CA:10:A8:D6:C9:B9:17:0A:D3:73:91:38:99:A8:4E:94:56:A8:3F:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9EAAF5ABF8D707B5A266100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f3b4a2e-8772-3d57-acf8-db2684a3c66b.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 35.71.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:ea:af:5a:bf:8d:70:7b:5a:26:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=b499581d-66e8-4ecf-93f2-fa9382a6be0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:fe:95:60:5d:ff:3c:f6:62:1c:11:c6:b9:
9c:b0:12:df:f9:b8:cb:e2:e8:b4:9c:7e:81:eb:76:
20:01:f5:4e:4c:54:30:89:c7:4f:2a:84:79:0f:4f:
0b:d1:22:70:77:10:ce:1d:7f:9f:37:db:cc:6b:65:
a0:0b:ff:8f:18:08:2b:e7:a2:25:42:8f:55:f1:d2:
35:4e:f1:e2:67:4e:e8:ae:a9:f3:45:f0:14:88:9c:
5c:ea:02:49:9f:82:64:7a:09:e8:a6:77:2d:9d:bc:
70:68:0b:27:39:be:8c:bb:5e:9a:76:86:2d:e0:d2:
a3:f3:ae:6c:c8:f5:ab:ec:78:4b:60:a2:da:b1:e1:
77:09:9d:55:5f:dc:33:cd:30:23:f6:a2:76:f5:8a:
85:33:9e:e2:ba:6f:31:a0:6a:ad:29:25:cd:a7:3f:
34:ba:b0:c0:0e:95:d5:d3:6d:af:56:f0:21:ca:d9:
47:ba:a1:ef:30:91:6f:63:a9:b9:04:74:c4:8f:fe:
bd:44:50:e8:b7:ea:8f:02:1c:7f:1c:73:48:5c:21:
a8:5f:a4:d2:1b:49:f5:89:1d:3b:13:b1:b4:aa:1d:
06:da:fa:77:b1:7d:19:3d:ef:1e:ad:47:96:67:3f:
88:dc:ae:57:db:7b:20:b2:07:5a:fc:00:a5:8f:9c:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:10:A8:D6:C9:B9:17:0A:D3:73:91:38:99:A8:4E:94:56:A8:3F:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4f3b4a2e-8772-3d57-acf8-db2684a3c66b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:0b:c8:9c:48:3b:aa:39:16:5d:69:fa:0e:23:7f:a4:58:e8:
68:91:81:17:50:6e:ce:66:e8:f4:ca:ec:25:dd:bf:f6:38:3a:
3f:05:18:e0:48:dc:6e:8e:88:b6:c7:75:77:4d:4f:b7:60:d2:
68:8b:c8:c7:7b:94:5d:79:fa:04:b4:3e:ca:34:43:04:ab:f2:
63:dd:d5:9e:ef:5d:40:e0:06:27:48:ed:1d:fa:b1:f7:a9:97:
ca:f7:00:bd:89:a1:ec:b3:94:b7:81:cf:c0:0d:6e:49:66:da:
83:17:25:fc:c5:8c:fb:18:2a:c8:a2:72:56:35:a2:c9:e0:24:
c4:95:0c:e0:b8:77:38:9c:56:3d:ca:18:4b:fe:1f:22:ec:1a:
d1:a0:f2:c6:62:96:8c:08:b5:25:80:de:d2:be:a9:d1:30:57:
c7:ca:56:50:e8:bb:68:de:5a:2f:cb:cd:b4:c6:94:23:da:8d:
ee:24:b5:aa:06:10:37:78:3f:15:7c:15:60:1d:df:23:4b:0b:
9f:13:a4:c0:51:1e:09:a2:df:39:02:ae:bd:c0:d3:f1:72:8f:
f9:73:27:67:4b:3a:40:c2:fd:59:7e:80:5c:88:bb:5c:09:43:
a7:27:38:f6:ab:b7:d5:eb:a7:b0:7d:91:aa:ce:28:5e:3d:84:
1e:d1:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:12 2025 by rpki-client