Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c5a5491-9d7d-348d-8f91-ab1fc0069241.roa
File: 6c5a5491-9d7d-348d-8f91-ab1fc0069241.roa (raw, json)
Hash identifier: 3Y8y/Ul8N69JGPWb99az6f/1rBsIsUzCsl7xCRIhAe8=
Subject key identifier: DA:27:9B:CB:E5:96:A3:BE:57:85:89:06:1F:CE:E6:A5:D7:5B:90:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404401D200139380C1F1A24140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c5a5491-9d7d-348d-8f91-ab1fc0069241.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:44:01:d2:00:13:93:80:c1:f1:a2:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=d3310355-e631-49b7-902d-a2c60dbdf7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:6c:49:cc:74:b8:24:a8:e5:e9:55:2d:e1:
d5:0f:96:65:c7:df:80:fe:18:81:ba:f3:a0:2e:1a:
e4:ac:08:af:f9:35:88:e0:e1:30:49:ed:44:37:89:
db:0f:0c:35:b4:18:6e:15:45:91:17:64:cd:fe:5f:
6b:27:21:54:a0:86:00:10:22:4d:b9:8c:b4:45:1d:
2b:4b:9b:9f:e6:3a:c4:de:90:9e:24:af:b1:da:28:
31:f4:9f:e2:32:f4:76:08:6f:70:96:59:4d:8b:62:
9f:61:8f:d3:bb:b5:bf:4e:79:63:9d:ab:0a:28:2d:
11:18:92:3b:01:b3:b3:12:ee:a5:2f:22:31:50:7c:
34:2c:76:da:e8:57:ad:37:5f:73:36:ac:91:d9:81:
81:23:f1:8f:e1:e9:03:61:04:bf:43:ac:65:69:b1:
cb:4c:24:93:88:e1:49:13:8e:b6:95:76:e4:1a:21:
0c:b5:01:a7:3e:a5:2e:b9:c2:f7:01:72:17:1f:1a:
08:99:ea:2f:35:be:19:fe:c4:b5:85:cc:c4:f6:74:
fc:8e:d0:59:70:ad:57:c0:da:33:58:37:88:d2:1f:
b3:31:f6:73:54:48:c6:11:b5:c3:ed:5c:41:8b:83:
a8:02:2b:42:2e:5f:76:2f:cc:cf:02:64:a2:b2:85:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:27:9B:CB:E5:96:A3:BE:57:85:89:06:1F:CE:E6:A5:D7:5B:90:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6c5a5491-9d7d-348d-8f91-ab1fc0069241.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:34:5e:3b:85:2b:f5:72:f1:38:b3:13:4c:c5:d6:a4:31:f5:
bb:3e:af:9d:31:0d:c3:04:6c:59:f4:34:d8:c0:c7:0e:a0:3c:
4d:84:f6:84:cd:6e:17:63:88:95:2c:45:81:69:95:d7:32:8c:
73:b6:f5:0b:8c:88:3b:05:22:a6:0d:86:98:ae:a5:cc:90:42:
06:1a:8a:31:d0:05:61:62:d9:70:96:54:fd:c7:ed:76:10:53:
24:eb:36:47:7b:9a:85:e9:c3:0d:97:62:24:95:fb:78:0c:a0:
57:81:32:ad:bc:95:17:07:8d:d0:31:57:0c:52:f4:46:85:e5:
b6:5d:22:21:94:98:77:82:3a:a1:b2:43:ff:2d:e0:97:13:45:
72:a3:75:7f:6a:68:17:b8:63:f1:0b:0a:4f:a1:f0:fa:d3:b4:
8f:8c:0e:7e:b9:7f:ca:34:b5:ff:38:84:92:01:bf:43:4b:88:
d6:d6:c1:93:b1:c6:50:e3:36:04:4d:1f:0c:b9:63:76:57:43:
d4:f9:3d:36:1f:16:b0:f6:82:27:12:bd:7a:a5:9c:11:8a:4e:
a0:36:63:58:b9:d2:63:92:47:f9:dd:ca:77:02:2d:72:c7:2a:
c2:d8:1a:40:ac:b3:2c:fa:f6:4f:72:cd:e9:4f:f0:13:3a:a9:
5b:2d:3c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:25 2025 by rpki-client