Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7071c0f8-50d6-3f6a-af05-cbe54ff620e8.roa
File: 7071c0f8-50d6-3f6a-af05-cbe54ff620e8.roa (raw, json)
Hash identifier: C5heVLZrHI4HyJjkbzpGTCOxThJKxiPtm2e4qLmmlY0=
Subject key identifier: 41:E2:F5:2D:E6:2F:B0:43:97:7A:B3:59:7B:E2:A9:5E:C2:BF:DD:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584043389CC434FC375A2CC3EF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7071c0f8-50d6-3f6a-af05-cbe54ff620e8.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 35.71.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:38:9c:c4:34:fc:37:5a:2c:c3:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=d13a4936-c05f-41fa-9733-72ba77598f9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:76:df:54:71:28:b3:93:ea:02:c4:64:52:
b5:47:04:ae:38:2b:de:20:de:9c:c8:78:77:78:bc:
3c:cc:2e:34:cd:08:08:32:b8:24:53:db:7e:48:34:
52:24:e2:0b:ea:dc:fa:b5:75:da:d1:ec:64:13:23:
f7:ee:31:dd:62:a2:84:b1:39:51:ff:7e:33:73:96:
c1:13:c2:af:e5:65:02:26:28:bb:93:b9:b2:3e:59:
26:ab:b0:91:4e:b7:84:70:34:18:39:f4:d0:7d:cd:
56:5e:81:c4:77:20:3f:90:30:54:ff:ab:01:f5:d9:
e0:07:03:4b:4d:a6:46:1d:e0:7e:cc:ab:b5:1e:dc:
4d:b5:8a:f9:c5:c9:62:94:00:3a:d7:06:3b:34:04:
df:ab:33:e5:3a:e2:59:b8:1b:05:72:11:de:4b:5e:
65:97:c2:5d:f3:0c:15:1e:f7:86:1f:ed:d8:e8:a8:
35:12:cf:a5:98:52:6e:81:01:95:d5:f1:ea:5e:47:
a8:62:ae:55:a7:9c:99:60:7e:00:c6:86:63:8d:87:
9e:24:8a:70:48:f2:db:e2:9a:62:49:94:78:f9:38:
e5:75:d0:75:ee:3c:34:6f:bf:2f:a1:47:d2:69:41:
fb:c4:c2:ab:a0:f7:f4:6f:3f:56:a1:a3:5a:2e:d0:
32:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E2:F5:2D:E6:2F:B0:43:97:7A:B3:59:7B:E2:A9:5E:C2:BF:DD:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7071c0f8-50d6-3f6a-af05-cbe54ff620e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:d5:95:24:aa:4e:05:50:f8:11:05:67:93:4f:5c:57:77:17:
21:fb:8f:38:63:79:98:4f:3d:5c:df:aa:75:90:41:6c:9b:5a:
dd:81:d5:ab:22:eb:80:5c:f0:9b:f2:24:b5:c0:a9:a0:ce:c0:
22:ce:34:5d:69:2e:9a:fb:ce:14:9b:6b:f8:76:ac:b0:29:c0:
60:7e:53:78:bf:de:77:e8:29:5c:30:de:d9:f0:6e:27:28:f3:
29:20:f1:65:b7:0e:40:0b:ac:72:97:31:10:c0:15:83:51:d4:
a4:21:c3:d7:ba:24:63:82:1b:46:76:2a:6b:65:1a:e7:03:b9:
1f:34:4a:3a:c0:0f:cc:d0:25:72:91:12:20:2e:93:66:52:e3:
a9:22:1b:8a:fd:7e:be:e8:d6:42:26:75:70:f1:0c:f2:5e:74:
10:9a:ba:6b:48:56:47:6f:4e:bc:90:f9:3c:26:b9:fd:aa:11:
a1:a6:b6:ef:99:e0:b3:44:18:0a:a4:58:56:5d:d2:a3:cd:9a:
0b:7e:67:5a:e7:5d:15:43:0b:c0:87:f8:fd:a8:2e:ef:cd:b0:
e2:c8:f3:60:93:b7:9b:91:61:fd:b7:ed:e6:bb:38:81:13:8e:
d7:41:40:7f:63:d1:be:53:c1:40:d4:bd:2c:fe:c1:8c:78:e1:
5c:71:85:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:32 2025 by rpki-client