Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/611cc5fa-6f66-376f-b6c1-825e4d97ed5c.roa
File: 611cc5fa-6f66-376f-b6c1-825e4d97ed5c.roa (raw, json)
Hash identifier: qj8q27a+wK0dvgW2tcn6/QnZNUpmHTOtpJnBVlaodco=
Subject key identifier: EA:1B:7C:50:65:93:FA:61:F9:94:5E:0D:8C:F1:28:63:4E:5F:65:97
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32B723A8EC8A1C76A8CB9200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/611cc5fa-6f66-376f-b6c1-825e4d97ed5c.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:b7:23:a8:ec:8a:1c:76:a8:cb:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=0bef6ad4-e8a5-4f88-9ae1-b03bf4e89295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:10:33:23:97:2a:ad:6f:44:2a:ee:c5:83:
6a:ec:55:07:c9:0c:8f:61:3e:7f:cd:bd:5a:c5:b7:
01:87:bf:2a:f3:6a:04:f6:2d:9e:06:8b:10:85:38:
2a:b0:6b:82:66:ca:7e:45:d9:8f:a8:2a:15:27:88:
33:66:10:28:69:3a:97:06:b5:d3:50:ad:8a:2e:8b:
0f:6c:23:c6:1b:1e:d6:af:b6:86:e4:ba:34:f6:3b:
5e:91:7a:b7:ac:09:2f:4b:08:d1:79:e7:7c:6a:87:
d2:7e:7b:84:e3:04:e1:9a:a9:90:ec:b0:c2:22:18:
a3:ea:d2:82:9f:45:6d:af:66:15:a3:16:6d:f0:35:
9a:7e:57:f7:51:81:76:df:1e:11:3c:2d:f3:7b:ba:
50:67:71:2b:33:ea:a1:04:d8:c9:5a:96:f6:91:40:
eb:11:ae:80:ab:8c:5f:d7:78:52:26:61:7f:25:16:
b4:c2:02:47:5f:96:8f:9b:4c:a0:e7:5c:9a:01:92:
a0:d3:ef:bd:33:65:a9:b4:c8:3e:59:85:eb:1a:aa:
3c:16:a2:dd:f0:53:81:e1:82:b7:5d:3e:0f:be:7f:
95:c3:9f:c1:aa:9d:d8:1f:15:c7:72:96:be:89:5a:
d2:1c:95:10:87:2a:18:ae:b2:13:1d:32:88:a1:ce:
45:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1B:7C:50:65:93:FA:61:F9:94:5E:0D:8C:F1:28:63:4E:5F:65:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/611cc5fa-6f66-376f-b6c1-825e4d97ed5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:fb:41:4c:be:d7:3d:73:50:ae:60:7a:2f:0d:c2:45:09:0c:
b4:49:87:53:f6:89:45:a8:2e:d9:8e:42:b4:d6:00:7d:dc:f6:
80:bd:eb:6d:b4:b2:fa:e6:cd:11:23:b6:f3:82:14:a1:80:ed:
14:14:1f:ae:5f:a3:39:a1:57:ed:50:bc:1c:31:7e:28:a5:33:
9b:de:d9:e8:a7:51:39:45:20:45:80:10:28:8a:87:af:c0:ad:
9d:8f:25:5a:d5:c1:ea:f7:b3:03:f2:c6:7d:07:6e:d1:ea:8a:
20:9e:46:38:ef:c7:33:9a:6f:ce:80:c0:0c:96:02:90:68:da:
c3:12:0d:1b:de:35:73:03:0f:81:d5:8f:39:81:02:80:50:8f:
7e:78:54:85:a2:63:4f:36:70:f2:97:b3:87:c0:58:6d:12:48:
7a:01:2a:1c:98:84:99:02:36:f5:b2:d6:a9:b2:63:23:b0:a7:
08:10:72:30:2f:a4:65:a4:14:a0:ae:54:c0:d6:c0:83:ad:e8:
5e:56:8b:77:3a:77:76:81:f2:d3:ce:f6:e4:a0:99:a3:00:84:
80:3c:44:b6:95:9e:6e:fc:6c:45:01:95:85:fb:87:e1:4e:ab:
dd:e0:fc:05:c9:4c:be:74:d8:6f:1b:ed:4c:f8:35:a7:17:48:
fe:f7:78:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:32 2025 by rpki-client