Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ece6f04-028b-39da-bad8-af35043230a9.roa
File: 5ece6f04-028b-39da-bad8-af35043230a9.roa (raw, json)
Hash identifier: u7QGuXU6OUdtJAcdTi99einK/tSwoHiQFW7hWcpACpE=
Subject key identifier: 66:95:A2:DF:D3:52:A7:AD:95:BD:3A:6F:0A:AD:B6:E5:67:83:C0:2B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9F21D4361025B6CD3C9D880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ece6f04-028b-39da-bad8-af35043230a9.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:f2:1d:43:61:02:5b:6c:d3:c9:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=414ee55e-e8fc-479c-8be8-c310127bf5da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:d6:d8:96:bf:c8:3a:0e:b4:e3:25:61:88:
13:b4:1c:38:83:58:19:e8:a8:88:d3:41:f9:30:85:
c9:a7:08:bf:d5:5c:27:a3:ea:b5:23:f5:d0:d8:68:
91:f0:b2:d6:88:12:69:a5:8a:a1:dd:8b:40:63:99:
2c:ab:34:55:78:be:f9:ea:01:7e:ed:5e:34:98:1f:
d5:3c:dc:a5:82:84:2d:8e:47:5d:f9:a2:1f:40:32:
65:62:42:93:c5:55:19:4d:8e:e8:3f:89:03:2e:77:
a5:b1:c0:df:71:2e:49:57:47:f8:29:fb:b8:89:c0:
38:cd:3d:ec:e0:2f:ca:dd:b3:cb:8a:60:39:40:05:
f8:3c:0f:92:12:cf:14:86:84:b3:43:5f:6f:7a:a8:
0e:56:76:7b:42:5a:d1:55:13:6d:71:56:36:78:34:
33:ed:23:d8:7e:fe:70:80:04:9e:f0:02:a1:7d:eb:
0a:ae:9b:b7:ae:ee:20:be:2b:14:69:23:c2:37:1f:
4c:b1:4b:ba:00:7f:c8:63:53:8f:ee:71:3f:92:57:
69:da:1b:d9:a5:d4:f7:7f:75:93:e3:10:de:9a:00:
cd:14:23:72:75:07:26:b5:b3:d5:7e:bd:18:07:c4:
d2:c1:19:e9:73:01:1e:d0:4a:f0:30:62:29:a2:bc:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:95:A2:DF:D3:52:A7:AD:95:BD:3A:6F:0A:AD:B6:E5:67:83:C0:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5ece6f04-028b-39da-bad8-af35043230a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:77:51:b0:77:c0:78:2a:03:18:ce:05:1e:92:90:a2:c3:0e:
e0:43:ff:7e:85:e1:d5:bf:fc:d3:d0:00:d9:9c:b9:c6:d9:76:
f1:50:90:04:a5:67:c5:85:17:86:c6:37:8e:69:89:e9:30:8b:
58:5b:e2:51:c0:1f:45:10:6e:1f:ba:b2:cc:7b:c3:00:54:af:
02:0c:13:57:c5:e0:c6:41:6b:d1:92:1b:f2:e3:cc:cf:76:b5:
4c:db:03:1b:65:e8:26:4b:20:c4:3f:9d:aa:f7:81:40:bf:68:
7d:f9:22:26:63:a5:81:55:68:2d:68:b9:69:73:47:02:2c:45:
14:5f:e6:dc:49:db:fe:81:fb:1f:01:34:5e:ef:7c:c9:2f:8b:
11:6b:09:27:32:fd:8f:86:b3:71:5b:e7:94:20:52:20:86:79:
d5:29:6d:bf:62:3c:ed:05:5d:c8:f3:1f:44:4a:c4:81:9b:0e:
57:25:b8:66:38:8b:43:60:f1:9f:cb:f7:0f:ff:32:77:e6:9d:
c9:07:e8:dc:37:eb:81:92:ae:b2:47:6e:3e:35:31:f9:73:a0:
38:7e:0f:91:c3:a2:67:59:1d:93:4f:54:7d:c6:cd:bd:ac:ee:
64:76:08:69:dd:f6:61:db:9b:38:2b:a3:69:5c:01:26:da:33:
74:02:59:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:54 2025 by rpki-client