Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ed30d04-b6c2-34b7-be46-dfe007edfee3.roa
File: 6ed30d04-b6c2-34b7-be46-dfe007edfee3.roa (raw, json)
Hash identifier: JS87C75ep/y6QAEljZGHE8DVX7lDrmLqR06iR4AlOhA=
Subject key identifier: 26:8A:8C:0D:EC:A3:29:F8:AF:3C:E7:35:7C:D4:E7:BF:27:94:45:A4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F80CA20AF000B942BE45F9B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ed30d04-b6c2-34b7-be46-dfe007edfee3.roa
Signing time: Fri 07 Oct 2022 12:00:00 +0000
ROA not before: Fri 07 Oct 2022 12:00:00 +0000
ROA not after: Sat 12 Nov 2022 05:00:00 +0000
asID: 8987
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:80:ca:20:af:00:0b:94:2b:e4:5f:9b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 7 12:00:00 2022 GMT
Not After : Nov 12 05:00:00 2022 GMT
Subject: CN=ce0d5753-d7b2-45ac-8da5-60eb8ae9e613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d6:5f:7e:ff:ea:44:a4:5c:c3:9d:d1:7f:15:
f8:4b:0c:ac:16:b9:41:b2:dd:15:ff:af:bc:38:3b:
87:7d:7d:bb:8d:82:bc:fa:58:35:cb:6b:82:1f:ce:
01:5b:1f:ba:04:af:d4:9b:90:2d:cc:76:18:88:54:
b8:f1:61:ae:85:43:2a:da:48:7d:e5:83:30:43:af:
5b:e5:d5:d2:7f:ef:76:12:dd:26:b5:79:9a:97:ca:
34:53:58:f0:2f:5d:e1:cb:bd:63:b9:c7:dc:3b:13:
fb:76:53:72:d4:ee:b2:25:39:f1:51:5c:0f:bc:de:
3d:32:98:8b:90:06:28:3f:c0:71:72:f8:b5:9a:96:
84:c1:d6:50:c3:97:1d:9c:c7:4c:5a:b9:59:0c:c4:
3c:0e:3d:b9:30:f1:16:cd:d4:13:3b:95:42:d9:a4:
93:f8:ac:e6:33:df:c0:eb:08:f3:5f:2e:01:ba:3f:
14:9a:5c:44:5f:48:98:07:88:43:ba:4e:0c:d8:81:
6b:c7:43:ab:2f:fc:8c:07:53:dd:0d:a5:e4:9b:11:
39:6b:7b:91:e4:83:36:3c:b3:71:68:d8:0a:ff:84:
a4:a0:d3:dd:ac:dd:28:8c:2b:56:f5:7a:2e:85:7e:
d2:02:f9:71:84:57:27:f7:47:f6:81:6d:ef:c6:37:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8A:8C:0D:EC:A3:29:F8:AF:3C:E7:35:7C:D4:E7:BF:27:94:45:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6ed30d04-b6c2-34b7-be46-dfe007edfee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:6c:3b:72:6d:43:4f:91:1e:3f:64:19:47:9d:9b:42:72:a3:
20:1a:1b:ef:17:0e:bc:09:b3:b5:c3:38:22:78:89:24:82:66:
2e:fc:1f:56:31:4a:fe:45:07:9b:b4:43:d8:c2:dc:d1:93:cb:
47:d9:38:ed:09:76:b7:47:05:38:69:2b:65:08:c4:07:80:cf:
0d:3a:7c:66:c4:b4:0b:5c:3d:24:fe:e0:e1:53:49:6c:bc:3a:
69:eb:a0:4b:c5:5b:bb:0a:d3:39:be:ce:a9:f4:c6:4a:90:b8:
9d:2b:20:9b:90:1e:97:d9:5e:c2:f7:28:6d:7f:7b:8a:61:b7:
6c:61:22:07:ea:a5:27:79:32:91:a6:11:e5:51:9f:fc:84:2b:
c5:e3:b7:d3:33:7e:4b:dc:ca:76:76:07:c7:1b:f8:7b:b5:90:
04:f0:44:f3:2b:a3:df:cc:89:7e:eb:38:fb:4a:05:bd:d1:25:
cf:af:e9:de:7d:9d:0f:d2:de:5a:57:ba:7c:39:63:43:e1:23:
60:a3:d4:91:57:bc:f6:9e:ad:bc:c8:e0:21:a6:9d:7b:bc:77:
e7:fe:1a:0c:68:00:80:ef:a8:5f:a3:58:b1:0f:0c:41:a0:85:
7b:0a:08:84:f3:18:80:dc:0d:8a:7d:04:9f:15:70:c7:5d:6b:
9f:9d:1e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:36 2025 by rpki-client