Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f7aff0a-12a9-32cd-8a9e-43c41a763327.roa
File: 6f7aff0a-12a9-32cd-8a9e-43c41a763327.roa (raw, json)
Hash identifier: taHzoUAkRENggVkPN1xlz6rtQGVpkmE3yQzww/Bi63U=
Subject key identifier: A5:DE:C6:DD:EF:08:CA:68:15:46:EE:9E:11:FB:AB:2E:8E:CB:B8:0D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F08133AE0FCE80CD4725D2C00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f7aff0a-12a9-32cd-8a9e-43c41a763327.roa
Signing time: Thu 25 Aug 2022 12:00:00 +0000
ROA not before: Thu 25 Aug 2022 12:00:00 +0000
ROA not after: Fri 30 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:08:13:3a:e0:fc:e8:0c:d4:72:5d:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 25 12:00:00 2022 GMT
Not After : Sep 30 04:00:00 2022 GMT
Subject: CN=37632a37-bc79-4c5c-9af7-28c621a19b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:bb:1c:ee:dd:42:f9:dc:17:35:f2:50:14:
a3:b3:15:57:e3:7c:94:ff:61:e9:db:33:6b:1e:ba:
30:91:3f:96:05:4f:b5:56:c1:fd:da:e0:1e:ac:11:
36:25:0e:24:8e:6d:2f:4f:31:4f:94:6f:8d:b9:0a:
88:fc:9e:e1:f6:fd:01:dc:cb:50:e2:a4:16:44:9f:
11:dc:c2:d0:41:4e:b0:76:2b:d8:15:88:0f:4c:29:
b6:45:d9:d3:13:61:18:48:a9:23:6c:59:b1:f6:5a:
f8:75:86:39:4b:7b:ff:35:94:9f:e2:83:4e:8b:9f:
66:30:a8:d3:1a:cf:9b:0b:dc:3d:c7:98:ef:b7:15:
0a:f7:c4:d9:7c:9e:8e:7a:f3:e4:09:70:d1:db:73:
4a:75:18:49:bb:6e:02:36:f5:c1:a3:cc:75:b2:26:
28:45:67:49:b3:1d:b2:0f:af:ed:85:a2:bc:c5:19:
30:ca:74:a3:92:15:9b:cd:56:9f:ee:e7:79:97:36:
f0:ef:f7:80:d1:05:76:2e:70:69:f5:48:9f:a5:cb:
47:1b:bf:54:df:cb:c7:e2:47:7a:1e:9d:ba:45:66:
fc:e9:f2:28:37:09:ad:ef:14:1b:83:fa:3d:59:a9:
bc:d8:84:ad:ef:79:d1:4c:ba:a5:93:3f:60:87:ae:
7d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:C6:DD:EF:08:CA:68:15:46:EE:9E:11:FB:AB:2E:8E:CB:B8:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f7aff0a-12a9-32cd-8a9e-43c41a763327.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:9a:6d:76:03:ea:ed:13:ca:a9:28:fd:19:e3:55:48:a0:c0:
bb:0b:f1:2d:9e:c5:e6:ee:57:8a:b9:40:df:60:72:96:fc:6e:
e8:e6:76:56:df:0b:d2:4c:0b:13:8f:7c:96:f4:67:76:01:ee:
af:0a:26:7a:c6:6f:f9:7b:af:b8:5d:f7:3e:5f:47:d9:81:2d:
8d:e7:99:10:a1:6a:7c:de:8f:25:35:7b:ae:3f:cd:7b:ba:5e:
f2:60:e5:2e:b8:97:07:d4:c6:7f:27:10:a0:de:70:2b:be:1c:
8e:9d:e2:33:c7:8a:bf:bd:20:a4:c9:75:03:73:5a:89:35:25:
5d:8a:6e:cd:90:e5:8e:bc:66:97:dc:4c:63:9c:db:e6:1e:6b:
33:15:4c:ad:e5:52:3d:dc:e7:5c:26:8a:29:07:d3:b6:20:ec:
03:82:dd:9f:e2:fe:a5:7c:85:5a:2a:8b:2e:f2:b2:c7:9c:c7:
d5:a9:10:18:99:c1:45:b5:c7:15:f6:df:37:41:06:8e:51:2d:
2f:32:59:d4:9c:80:57:ce:5a:b6:7d:cd:4d:b1:d7:ea:21:a9:
8e:48:3d:e8:5a:e1:0e:3d:21:22:3c:c3:b1:2e:e0:71:40:37:
be:cf:c5:68:55:be:7d:24:4b:15:d2:41:84:05:99:21:19:2d:
c6:4a:33:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:52 2025 by rpki-client