Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78293a37-8a0d-35f1-b93b-8c35126c134a.roa
File: 78293a37-8a0d-35f1-b93b-8c35126c134a.roa (raw, json)
Hash identifier: wPhrUs/3bK5GYcqS1MJjm17zE9uzB3tUzJWic7cw2a4=
Subject key identifier: FA:0C:12:2B:6E:6D:60:EB:F8:46:7B:1D:C2:BA:D1:38:93:3A:83:18
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0BA218F4DEA0650B3E1A48C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78293a37-8a0d-35f1-b93b-8c35126c134a.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.176.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:a2:18:f4:de:a0:65:0b:3e:1a:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=b7c1a66c-ce8c-495c-8c61-216642671192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:0c:8c:a8:cd:37:80:7c:93:2a:84:56:b2:
ff:d4:ae:c3:d2:f0:e9:ea:65:e7:3d:f7:64:fa:ed:
16:aa:86:27:4e:3e:f2:89:d8:af:3b:7a:ea:e9:96:
cf:b0:6f:c0:96:f9:8e:64:7a:48:8b:7a:4e:cb:39:
88:18:c4:31:2c:06:ae:30:61:24:92:a1:40:97:38:
62:d4:b3:25:4f:94:c3:7c:d7:f2:ce:4f:d6:fb:f5:
bd:d3:e2:d3:14:b8:89:e4:dc:3e:0e:67:d7:d1:3f:
be:1a:63:1b:e4:c2:e3:f9:02:b5:80:89:38:88:e4:
31:3a:4a:07:86:31:09:46:6f:28:1a:8f:82:c3:62:
b8:a2:93:ee:0a:63:dd:46:49:cc:c3:8d:83:8d:bf:
98:8a:5e:ec:89:00:e9:6d:73:bd:20:96:f1:c1:3c:
9e:2b:06:6a:c3:f1:9d:8a:36:a2:90:b7:58:37:46:
5f:ef:8e:31:ce:4d:66:67:03:f5:ff:84:91:96:b0:
6a:6d:61:d9:72:45:b1:ec:80:75:81:9d:1a:0f:46:
43:74:5a:da:81:d6:4e:3f:7e:a2:c6:88:25:b5:9d:
f6:38:03:20:25:51:42:35:eb:df:ec:87:6b:c6:7b:
fa:47:95:13:ea:2a:9c:17:ca:fd:2f:03:59:2d:fa:
bf:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0C:12:2B:6E:6D:60:EB:F8:46:7B:1D:C2:BA:D1:38:93:3A:83:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/78293a37-8a0d-35f1-b93b-8c35126c134a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.176.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:f7:73:7a:0b:90:31:12:0f:ff:5e:c1:c9:22:58:1d:4b:9a:
3b:81:24:36:19:89:4a:e2:2e:27:fc:3d:77:5c:8d:8d:b2:0b:
cc:70:a3:7e:65:80:7d:97:af:a8:02:f1:2c:ff:0a:31:b9:bb:
45:d6:e7:c4:06:73:71:4c:5e:bc:2a:c2:71:7c:12:3d:db:73:
97:e0:de:29:d6:aa:94:01:40:29:31:a0:0b:46:54:82:9a:e7:
2d:1c:36:4b:71:6e:67:b0:75:4d:3d:04:af:30:a3:0e:84:9a:
70:75:55:60:e7:ef:85:e6:ea:7a:82:c8:b0:5b:15:8c:c9:b0:
84:3f:bf:2b:63:be:8a:e8:72:a1:a0:9d:2b:a9:a5:c2:c6:bc:
ca:ab:53:2d:2e:46:8d:09:d5:21:4a:94:9d:1f:9e:22:23:14:
a0:9a:29:0b:81:93:2b:43:c5:b2:01:3c:a5:88:f7:42:d9:cb:
c9:81:45:05:a6:b2:1b:5f:58:01:30:73:e0:b6:16:7f:ff:f4:
5a:89:cd:e7:86:3d:58:75:0d:17:ee:bc:5e:f9:de:48:68:fe:
39:a5:51:4d:fa:5a:2e:59:fd:98:42:29:dd:5e:c8:84:a7:eb:
6c:0c:5a:71:43:11:e7:1d:54:a8:ba:c9:6b:3a:da:a9:21:e1:
59:99:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:23:46 2025 by rpki-client