Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/681f7cd3-0fd7-3ce6-8746-26dc66250009.roa
File: 681f7cd3-0fd7-3ce6-8746-26dc66250009.roa (raw, json)
Hash identifier: +lxVT7s7WEU4eKZH/PXihJlBwhOgdrsah9MNJL9mZBQ=
Subject key identifier: 1A:4D:39:68:63:C2:45:46:D1:5F:83:BF:DA:F1:94:B7:6D:01:D6:87
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E6F50D19B0C2106E2FD99D260
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/681f7cd3-0fd7-3ce6-8746-26dc66250009.roa
Signing time: Fri 01 Jul 2022 12:00:00 +0000
ROA not before: Fri 01 Jul 2022 12:00:00 +0000
ROA not after: Sat 06 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:6f:50:d1:9b:0c:21:06:e2:fd:99:d2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 1 12:00:00 2022 GMT
Not After : Aug 6 04:00:00 2022 GMT
Subject: CN=8819c7c8-6e23-4338-b5b6-4c937228f8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7d:90:87:88:d4:f8:1d:cf:6e:22:0b:9b:f1:
9d:d9:c7:7c:b9:6c:25:2d:8f:9d:af:ce:e2:4c:1e:
a0:e2:2e:e0:fa:e7:d1:42:74:fb:f4:0d:f9:c2:a5:
84:cb:b0:78:0e:e0:5b:2f:23:f7:70:19:7c:04:5c:
05:4a:5b:db:5c:6e:1e:1c:8d:46:d2:dc:8b:8f:f6:
f7:56:60:3e:48:af:97:58:12:44:1c:3c:cc:60:94:
1b:76:8d:b8:1b:d9:9c:c9:0f:c5:79:8b:99:96:d0:
cb:d9:2c:c7:09:01:2f:50:d4:af:16:73:94:ed:c9:
fe:9b:b3:d2:b4:f8:ce:21:01:cb:20:38:b9:81:75:
8e:99:d9:ac:5f:a6:35:93:ff:3e:94:26:96:e4:1a:
18:54:98:9c:24:ae:a5:73:5f:96:92:bf:5e:0e:17:
fd:58:82:eb:84:73:97:f2:89:e7:e9:0a:b3:c1:30:
16:56:87:91:1f:04:04:2b:35:7e:03:28:a1:53:32:
9b:80:24:a8:9c:96:80:3e:9b:ca:ae:85:01:f8:21:
1f:11:5b:a2:14:9c:23:19:9d:5d:a3:5b:5b:3d:3c:
2d:af:96:3f:b0:3f:d9:bc:a1:66:08:e3:88:2c:10:
97:b4:c0:7e:00:84:a2:46:b8:bc:1a:f5:ef:a2:49:
0f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4D:39:68:63:C2:45:46:D1:5F:83:BF:DA:F1:94:B7:6D:01:D6:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/681f7cd3-0fd7-3ce6-8746-26dc66250009.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:25:db:89:d3:6c:a8:16:e2:53:40:a9:99:10:17:c3:ec:a3:
ed:4f:cf:bc:3d:2d:7d:99:d9:29:c6:e2:67:fb:2b:c0:8a:08:
fc:61:d0:46:a6:ce:6c:eb:56:4c:5d:b0:eb:c5:1d:ea:7b:ff:
e5:01:e7:0a:39:5b:ad:60:e4:4d:a2:ce:6e:b8:61:90:f5:6f:
40:b6:d6:e9:0d:f1:f8:d3:99:7c:cb:b1:d1:db:a1:39:17:7f:
8a:e6:a4:11:53:48:22:56:75:69:54:78:92:f2:ff:4b:ce:f9:
99:f8:ed:7c:86:cc:40:d2:1a:0d:97:86:a4:86:5e:35:d4:75:
c0:ba:75:f3:d8:6f:46:a2:d7:13:5a:67:79:11:3c:6f:d7:a2:
85:17:c6:0e:29:5d:fc:b0:1e:81:eb:0a:5c:95:4a:34:90:a3:
94:49:9a:11:a5:e9:4f:24:07:e1:e0:0d:16:d2:51:f1:ac:f2:
6e:87:00:25:6a:cd:93:c9:1d:7e:fc:17:1d:ea:5f:ac:0d:81:
29:ef:45:b8:27:c9:7b:bc:96:e9:1a:4f:53:cc:08:0f:44:22:
72:5f:fa:ed:2b:06:d5:35:5f:48:19:c8:57:1d:87:a6:47:ff:
1a:65:c1:14:a7:37:ea:35:6a:65:bd:ce:2c:63:a2:64:af:0e:
7c:79:54:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 22:10:50 2025 by rpki-client