Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/559c63d2-d3f6-3baa-8267-728ea8cb3318.roa
File: 559c63d2-d3f6-3baa-8267-728ea8cb3318.roa (raw, json)
Hash identifier: kXGBE+ddA0G4Do2813d9EX5gDoqi2QqYMgBPKQjyR00=
Subject key identifier: A4:91:38:03:B9:83:23:0B:A9:8B:B7:06:82:5F:BB:DB:99:56:F8:9D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA80E36826CB5DE1A42D3DD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/559c63d2-d3f6-3baa-8267-728ea8cb3318.roa
Signing time: Thu 21 Apr 2022 12:00:00 +0000
ROA not before: Thu 21 Apr 2022 12:00:00 +0000
ROA not after: Fri 27 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a8:0e:36:82:6c:b5:de:1a:42:d3:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 21 12:00:00 2022 GMT
Not After : May 27 04:00:00 2022 GMT
Subject: CN=3897e024-d6da-4686-831d-bd59fe536700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6c:8c:8c:b4:89:f3:3d:06:1a:d4:a1:61:f4:
5b:43:0d:0d:58:f5:83:07:ab:fa:35:38:13:e7:6c:
a1:4d:79:1f:61:4d:95:b6:81:f3:c0:f9:b7:b5:8f:
19:46:ef:14:fa:8d:6a:25:02:ff:bb:31:70:d8:e4:
70:41:17:be:3f:3e:55:05:70:b5:87:73:b5:9e:76:
ab:66:62:28:c9:cf:7e:b5:d7:e2:fe:b7:99:f2:69:
c1:36:c3:f5:9c:47:5c:0d:d4:6f:de:da:81:1a:15:
ab:99:61:e5:3d:5c:2b:08:59:6a:fa:ed:1e:1d:eb:
39:b7:a5:58:6d:37:61:6c:85:7d:df:d5:7c:f3:32:
ca:98:e7:f6:8c:9a:82:c3:f7:ee:5f:88:09:43:19:
7e:e2:3c:53:5b:20:65:8a:b0:20:9c:6f:61:5e:bc:
8c:0a:3e:64:12:4c:60:1f:f4:b6:b5:52:1c:95:12:
6f:92:42:91:06:9e:15:7a:99:0b:92:ac:a8:e4:b3:
9e:c5:48:d7:53:a7:07:14:75:7c:99:f3:23:83:eb:
68:cc:7b:2c:01:48:e8:69:a4:ac:d4:46:03:4e:56:
02:06:70:0a:ac:ad:00:f6:e2:ad:fe:0e:97:86:20:
6d:db:65:49:08:b7:57:5d:83:b2:d5:ea:15:6a:25:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:91:38:03:B9:83:23:0B:A9:8B:B7:06:82:5F:BB:DB:99:56:F8:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/559c63d2-d3f6-3baa-8267-728ea8cb3318.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:13:8c:76:99:c3:16:0d:55:d5:99:30:35:e5:6b:3e:f1:78:
e8:71:e1:a7:59:80:24:8c:2d:b0:26:22:33:2e:cb:c2:67:d9:
fc:e4:d3:7d:18:4a:7f:71:10:c9:87:54:05:92:ad:c8:76:22:
58:ac:d4:54:23:da:b5:e8:10:72:11:83:d1:ef:27:68:0f:66:
bc:04:b9:a7:03:25:ef:44:96:e4:5c:22:c6:37:3c:98:64:0e:
04:0e:86:07:5a:64:34:64:ef:8b:a7:6c:83:37:7c:aa:d0:c1:
88:56:7b:30:06:11:47:b2:ca:af:76:23:91:1e:7e:90:07:01:
56:5d:af:7d:d0:14:3a:d9:a4:ac:54:ff:25:6b:10:07:13:c0:
65:37:e9:98:ec:f9:7e:d4:db:d1:02:bd:53:b0:ae:a1:66:8c:
b0:cf:55:a6:39:c0:3e:fd:aa:af:1c:bb:7d:86:07:56:dd:41:
5e:c5:58:6f:a8:a9:be:55:fe:c3:3c:b4:b0:a3:46:11:bb:7a:
56:dc:9e:29:06:88:0d:90:28:29:1a:ce:3a:2f:32:4e:ef:4b:
01:31:7a:22:0d:f3:df:de:01:13:96:97:8e:f1:69:5c:9e:bf:
3c:b4:18:a1:e5:69:73:d4:4e:f4:7e:13:e7:dd:04:83:a5:01:
88:8b:c4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:19 2025 by rpki-client