Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76b17dd4-8359-39c8-a692-992be8b93236.roa
File: 76b17dd4-8359-39c8-a692-992be8b93236.roa (raw, json)
Hash identifier: cPOQGCYdDo78NA44VCwDmInD/gD3PmsH/AQXk0SFCG8=
Subject key identifier: E1:DF:2A:E6:3B:20:56:46:9C:6B:37:82:6E:D8:85:18:BB:9B:98:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D59D4372B319F4B3AE2E55B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76b17dd4-8359-39c8-a692-992be8b93236.roa
Signing time: Fri 25 Mar 2022 04:00:00 +0000
ROA not before: Fri 25 Mar 2022 04:00:00 +0000
ROA not after: Fri 29 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:59:d4:37:2b:31:9f:4b:3a:e2:e5:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 25 04:00:00 2022 GMT
Not After : Apr 29 04:00:00 2022 GMT
Subject: CN=4ce9808c-1e2c-4909-8082-d0e3599cb8b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0d:ff:f9:b2:9e:e2:ae:f5:5c:b2:dc:88:66:
65:a1:92:ff:d9:da:42:ca:26:50:6b:f9:29:04:b5:
6d:cc:c0:d0:30:7f:44:eb:63:b2:39:a2:bb:7f:71:
17:4f:e1:7f:e3:b3:b4:5a:9f:3e:83:f0:8d:1c:08:
3c:3e:0a:a8:bf:cc:9c:15:57:cd:76:e1:7b:c3:30:
1e:5d:6e:0b:cf:b3:60:df:cc:f6:8b:96:b0:0e:2b:
69:5f:8e:61:b6:d6:87:1c:10:2d:4c:e0:14:16:99:
47:b9:66:99:fd:b9:f1:88:c6:16:58:12:fd:64:ae:
b3:9c:71:47:35:30:ff:e9:3e:9b:8d:52:34:db:c5:
06:60:9f:a8:5d:ea:5c:40:13:85:0e:fb:e8:07:d1:
19:59:1e:f8:d0:b7:8c:e8:e5:f5:9c:76:3a:e8:f3:
2d:80:0f:4f:a8:78:52:9f:a4:6e:ce:a9:c3:6d:67:
10:70:0c:47:9f:f9:0b:ca:7e:44:21:28:06:2d:ed:
35:a5:73:36:6d:d4:1a:7f:a0:a8:3a:9f:26:03:7b:
48:f4:63:f8:e2:ef:64:01:9a:48:d6:35:6f:e0:3f:
b2:c5:7e:bf:60:99:60:b9:71:a2:de:d6:94:32:0f:
fc:27:10:61:76:d4:89:23:f7:ab:14:48:3c:15:c4:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DF:2A:E6:3B:20:56:46:9C:6B:37:82:6E:D8:85:18:BB:9B:98:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/76b17dd4-8359-39c8-a692-992be8b93236.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:ea:3c:50:f4:78:38:8f:71:0b:c1:a1:d4:09:bd:48:43:c6:
88:4e:07:5d:0f:70:97:00:ea:6c:76:d1:da:90:31:c5:95:29:
0e:6d:53:67:27:c7:14:aa:af:a6:88:7e:e1:de:b4:43:95:09:
8a:f9:b9:de:9d:a0:63:92:6f:63:cf:09:1b:e2:77:f0:60:28:
69:d4:ec:a6:f5:8b:cf:af:f7:36:30:fb:39:09:ae:f7:7f:bc:
d9:07:72:2a:fe:8c:26:df:9e:59:b6:a2:7f:42:4a:f8:d3:d8:
82:89:09:27:27:91:75:2c:33:19:74:ca:50:d6:00:dc:cd:2c:
2a:1d:59:17:e1:b0:18:d9:5b:03:88:50:54:0e:58:2c:4e:43:
0d:56:c5:45:17:4f:14:9b:6e:8f:c0:a2:02:4a:ba:d7:cf:bc:
c4:fb:2d:c1:2d:b8:6f:f3:e2:83:4f:44:8c:27:08:50:16:df:
6b:22:87:e0:33:4b:22:64:7b:17:4f:d5:d3:ae:07:71:f8:25:
76:d1:dd:cc:19:86:c3:ca:1a:41:95:a4:c5:2f:89:ac:8a:ec:
05:8d:3d:4a:6e:f9:89:54:be:db:67:a3:a2:b0:be:d1:9b:dc:
3d:fa:c4:8b:ed:f3:0e:21:0a:d3:0a:cd:09:92:0e:d6:19:e6:
f8:03:20:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:12 2025 by rpki-client