Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/580cc50f-a8cc-3ac3-94f5-8c394083035e.roa
File: 580cc50f-a8cc-3ac3-94f5-8c394083035e.roa (raw, json)
Hash identifier: X5yIpzB1R0oSuYKgYYtb0rTwFGS9t2WCvTyTwCh9XaA=
Subject key identifier: D3:28:41:C7:87:5A:5C:98:4C:F9:24:33:4C:41:B4:A2:9B:A4:CE:F5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C2AAEA115B4B50F46EF7400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/580cc50f-a8cc-3ac3-94f5-8c394083035e.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 35.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:2a:ae:a1:15:b4:b5:0f:46:ef:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=38e641fa-7abd-468f-8716-f3da611bf81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5d:e6:dc:85:a0:8b:49:b5:c2:2b:ef:c5:53:
5a:3e:2a:6e:a0:f4:81:85:09:bd:8d:b7:1a:0d:77:
d4:59:f3:5d:a5:1f:6b:0d:3d:e9:2f:e6:93:ac:44:
45:df:e2:68:8f:46:87:24:a8:58:a9:0d:29:b3:ca:
1a:7f:97:7b:e0:92:8e:4c:16:6e:2b:05:e8:c5:38:
0d:de:b7:fe:5a:ab:0c:dc:71:2d:23:4c:dd:33:b2:
f8:5d:72:bf:37:62:9b:5c:7a:ac:d9:f3:97:8d:c0:
ed:d6:f2:6f:dc:99:82:17:f5:70:50:28:e7:ff:43:
a2:73:76:6e:9a:35:d2:47:7d:b6:33:cb:b5:7c:d4:
21:96:c1:47:70:63:88:d0:4f:cd:8a:4f:17:24:fc:
50:7c:5d:ba:95:84:ff:07:52:a6:fc:36:b1:bd:0b:
db:ef:a2:5d:83:65:e1:9a:4c:8f:71:6c:fb:b8:b3:
f8:11:e4:84:a7:ec:d5:56:1a:41:74:bb:94:5e:53:
96:c6:b7:29:d8:7f:b1:df:dc:c7:24:f2:1a:71:e6:
3c:c7:24:c0:78:ca:98:8c:1e:6d:d1:7f:07:56:16:
23:d7:aa:22:73:6b:06:26:a3:c4:d8:a1:64:5f:77:
3f:8c:cf:06:9f:0d:ee:6c:87:10:bc:04:96:e3:dc:
cb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:28:41:C7:87:5A:5C:98:4C:F9:24:33:4C:41:B4:A2:9B:A4:CE:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/580cc50f-a8cc-3ac3-94f5-8c394083035e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:d3:92:b3:f8:92:8c:45:f4:85:e6:96:03:c0:aa:dc:f5:db:
02:5d:07:3f:4b:6c:e8:62:56:4f:7d:ba:81:af:f8:69:09:d0:
dd:ea:bc:55:5c:82:a5:f4:17:e5:98:b4:e7:1d:d4:54:a6:7b:
48:82:f6:1b:4e:a7:2f:44:fa:14:a5:90:48:3a:b3:52:53:d5:
cb:e5:f3:68:39:99:eb:4e:3d:d3:7c:63:22:d3:e5:8d:38:8c:
dd:bb:bb:b6:ff:71:d3:2f:f2:f4:74:83:bb:16:25:59:d5:3c:
b6:7d:c5:0e:34:c9:6e:e3:c4:37:12:e2:5b:4a:05:97:78:a9:
ff:ed:68:7b:b4:84:a7:ce:5c:4e:87:52:03:36:29:3f:f9:48:
d6:6f:88:47:0b:5a:11:f8:5c:fb:52:60:f3:c2:c2:4d:02:24:
bd:e4:17:78:59:5f:59:18:d2:f4:a4:3b:5c:26:f9:91:a7:93:
fb:17:7b:92:e2:97:05:0a:24:48:48:32:20:cd:ac:5b:08:e6:
eb:bf:d4:53:f2:2c:9f:70:d3:bd:dd:ea:99:5e:6b:4c:73:38:
27:e6:bc:08:0f:2c:5c:a0:ee:8b:1c:40:48:41:86:a3:d9:ab:
81:0d:62:91:ac:1b:7a:82:92:51:1c:be:0a:51:8f:e6:4c:b2:
54:66:63:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:16:52 2025 by rpki-client