Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c3eac0-f8fd-3ae6-9299-868823617260.roa
File: 65c3eac0-f8fd-3ae6-9299-868823617260.roa (raw, json)
Hash identifier: 0fksmSYb05vF/AG2GkRDkqm+7svH8qVcPqclf0yfEhU=
Subject key identifier: 10:58:7D:74:7A:C7:29:0B:F4:5B:59:0D:55:98:2D:3C:94:66:DD:CA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F0BBD3915582A66F538B84280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c3eac0-f8fd-3ae6-9299-868823617260.roa
Signing time: Fri 26 Aug 2022 12:00:00 +0000
ROA not before: Fri 26 Aug 2022 12:00:00 +0000
ROA not after: Sat 01 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 35.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:0b:bd:39:15:58:2a:66:f5:38:b8:42:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 26 12:00:00 2022 GMT
Not After : Oct 1 04:00:00 2022 GMT
Subject: CN=db7cccff-7f14-4860-a5f0-a56800e2edcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bb:f8:93:5e:7d:fe:9f:04:17:00:51:b6:23:
c0:bb:e9:b3:99:23:5b:b6:07:93:d8:9a:ec:9d:0e:
e9:79:05:12:eb:22:de:4c:e7:b3:94:45:68:55:61:
f0:2e:c3:c9:dd:2e:04:09:c1:2c:0b:67:b2:c8:69:
63:13:b9:b0:17:08:ce:01:ba:b8:db:0c:b5:6a:db:
54:e8:4a:ef:ed:db:63:e8:49:c5:17:4c:dd:ba:7c:
f4:ea:3c:59:bb:a0:a5:0d:27:42:ea:94:84:52:44:
3d:0d:c9:22:d1:3d:33:99:07:ce:6d:9a:33:1e:aa:
e5:e5:c6:d8:fa:94:bc:51:65:02:3c:a5:4d:09:cf:
30:6b:5c:6d:90:29:7a:06:88:8c:c5:8c:1a:aa:3a:
b1:b7:c7:3e:7f:c0:2c:6b:e6:18:f7:bf:22:5e:62:
68:26:93:cc:e7:ee:fa:ed:f3:14:33:da:29:a8:0e:
d2:98:0c:cf:5a:5d:38:9f:25:66:d1:b3:f6:9d:79:
22:a2:28:34:da:78:96:15:4e:13:cb:be:e0:2b:94:
bc:81:12:c8:fe:12:ee:bb:73:98:be:07:eb:bc:e0:
40:fe:89:78:d4:56:a8:0f:70:38:3a:93:4e:40:34:
5d:dc:4d:89:ad:98:74:b5:ff:34:47:c0:9e:d8:ea:
f3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:58:7D:74:7A:C7:29:0B:F4:5B:59:0D:55:98:2D:3C:94:66:DD:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/65c3eac0-f8fd-3ae6-9299-868823617260.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:c7:ce:59:d1:11:0e:bc:fc:d6:24:44:b8:da:2e:10:d7:7c:
96:32:71:74:6a:f5:e6:99:33:cc:2c:3d:f1:d1:4a:88:90:14:
63:1a:0f:60:8e:72:08:c7:2e:7c:0e:aa:e7:17:04:d9:69:48:
44:c3:b2:c8:02:b3:16:8b:81:8a:c4:9c:35:69:2d:c6:2d:46:
2f:71:7c:38:f9:17:17:12:85:45:20:53:66:c3:c0:9b:af:0d:
0b:f1:84:d3:51:db:00:22:a4:7d:43:98:8a:2f:14:6b:9f:e2:
a0:ae:b5:08:21:46:e0:26:54:59:5f:84:22:bf:7e:dd:b5:cb:
2f:3d:a2:a2:9e:9c:f7:41:ec:22:20:84:8d:11:69:fe:35:7a:
85:47:bb:5b:7d:e8:a9:c7:b5:30:a2:f5:63:e2:1f:41:be:66:
40:90:27:26:ee:bd:1b:f6:59:e0:a8:86:eb:10:be:2a:d2:34:
87:03:4c:60:be:11:52:06:25:bf:21:65:9f:ef:fd:9f:cc:99:
ea:44:8d:02:02:62:21:71:f2:23:60:9e:56:74:db:41:19:8c:
08:0c:e7:f5:93:3c:28:e7:bb:84:68:13:f3:7d:f9:91:c0:b3:
8d:d4:be:07:cc:33:90:46:8e:e3:fd:17:eb:23:03:e9:07:05:
ec:a8:37:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:48:14 2025 by rpki-client