Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a6273cd-13c2-3599-b542-3df25ad6a85d.roa
File: 7a6273cd-13c2-3599-b542-3df25ad6a85d.roa (raw, json)
Hash identifier: S83NP/LleCCLWbSkg98CuDKnHffyQ/+5HdUzFNDKrZo=
Subject key identifier: 35:31:C5:A2:81:DA:64:33:77:B8:ED:8B:F4:25:E4:7F:7B:7E:9E:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF2AB323FC1BAAD998BBC6140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a6273cd-13c2-3599-b542-3df25ad6a85d.roa
Signing time: Thu 17 Nov 2022 12:00:00 +0000
ROA not before: Thu 17 Nov 2022 12:00:00 +0000
ROA not after: Fri 23 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f2:ab:32:3f:c1:ba:ad:99:8b:bc:61:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 17 12:00:00 2022 GMT
Not After : Dec 23 05:00:00 2022 GMT
Subject: CN=7846f624-a1e3-4bf9-ae23-f140bf0c5524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:ab:7b:3c:fc:b4:15:f0:d0:41:d9:f0:f0:
e6:40:00:8f:ce:42:81:16:54:7e:f7:24:b7:c6:de:
57:bb:10:9c:aa:4d:f6:ad:e0:96:6d:4e:da:76:01:
01:56:ff:ae:28:93:d6:d7:d8:9a:1b:a5:25:bc:ed:
3a:16:dd:71:e1:a0:96:5b:01:58:05:77:53:1e:fc:
c0:10:1d:49:1a:82:e3:ae:fa:4d:50:bb:42:22:64:
0a:e0:04:be:a5:cf:9f:cd:af:16:40:e3:84:0d:1e:
5e:f3:44:48:b0:9a:13:44:92:ac:cf:e1:36:a6:a2:
af:37:55:eb:56:ca:cc:e4:59:e7:6b:b4:a3:47:d9:
6a:e7:04:6d:32:9f:0a:71:19:1e:5f:55:b1:c1:84:
bf:56:8e:b8:b4:70:20:fc:bf:18:c3:c5:5c:91:20:
3b:fa:c1:02:18:b8:f5:c0:0d:d4:01:3c:c3:89:aa:
d3:46:a2:e1:9a:60:b7:97:4e:3c:16:b7:ab:19:17:
ee:5c:6a:99:38:03:b6:b4:96:47:a8:65:8a:ab:8b:
31:c2:e9:39:d8:7f:aa:4e:ba:6a:bd:97:59:ff:62:
fd:43:c1:1d:a6:0b:9a:96:bb:50:8f:80:a8:da:f6:
be:e3:d3:b7:50:43:80:58:56:63:db:9f:4e:a4:ea:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:31:C5:A2:81:DA:64:33:77:B8:ED:8B:F4:25:E4:7F:7B:7E:9E:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a6273cd-13c2-3599-b542-3df25ad6a85d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:f8:6b:39:66:98:b7:a8:53:46:45:66:1c:fd:16:d1:74:44:
98:4c:7a:f0:67:af:f6:30:5e:61:7d:ae:1c:e0:aa:0f:83:cc:
39:77:f3:0e:d8:f7:5d:65:2b:3d:fe:56:0a:7d:85:30:f2:1a:
4f:7a:85:c5:86:b6:eb:5c:6e:59:da:ad:58:ff:0f:6b:d9:25:
7a:97:10:55:78:2e:b4:7a:0f:d2:42:d2:24:f0:ff:a4:ab:4a:
db:dc:ab:23:04:d5:62:7f:40:d1:8e:77:53:96:fa:d7:78:b1:
58:b9:cd:fe:26:51:61:47:64:66:31:2c:ea:d4:de:cb:0f:50:
44:24:9e:ae:34:c9:dc:05:68:46:74:4d:45:39:a5:87:0c:a3:
8d:06:c8:0a:06:3d:44:37:8a:43:3c:42:12:15:d2:66:e3:28:
5d:64:18:34:29:09:de:5a:e8:31:b4:50:6c:a9:30:dd:e2:f1:
5d:67:15:8c:9f:62:c6:a0:b0:cf:e4:27:88:f9:b2:f6:bf:10:
dd:af:58:6b:04:35:0f:5d:db:5f:a2:c4:74:68:83:b6:4f:d3:
e6:e0:31:64:6d:e6:a6:81:9a:8d:99:2d:fe:b6:dc:a2:18:94:
b3:0f:b7:b9:b2:e1:24:72:41:85:77:24:80:ef:74:ad:3b:07:
1d:3c:ac:e3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/yqzI/wbqtmYu8YUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTExNzEyMDAwMFoXDTIyMTIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
Nzg0NmY2MjQtYTFlMy00YmY5LWFlMjMtZjE0MGJmMGM1NTI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJqrezz8tBXw0EHZ8PDmQACPzkKBFlR+9yS3
xt5XuxCcqk32reCWbU7adgEBVv+uKJPW19iaG6UlvO06Ft1x4aCWWwFYBXdTHvzA
EB1JGoLjrvpNULtCImQK4AS+pc+fza8WQOOEDR5e80RIsJoTRJKsz+E2pqKvN1Xr
VsrM5Fnna7SjR9lq5wRtMp8KcRkeX1WxwYS/Vo64tHAg/L8Yw8VckSA7+sECGLj1
wA3UATzDiarTRqLhmmC3l048FrerGRfuXGqZOAO2tJZHqGWKq4sxwuk52H+qTrpq
vZdZ/2L9Q8EdpgualrtQj4Co2va+49O3UEOAWFZj259OpOpgRwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDUxxaKB2mQzd7jti/Ql5H97fp5oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvN2E2MjczY2QtMTNjMi0z
NTk5LWI1NDItM2RmMjVhZDZhODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMEI2AwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbvhrOWaYt6hTRkVmHP0W0XREmEx68Gev9jBeYX2uHOCqD4PMOXfzDtj3
XWUrPf5WCn2FMPIaT3qFxYa261xuWdqtWP8Pa9klepcQVXgutHoP0kLSJPD/pKtK
29yrIwTVYn9A0Y53U5b613ixWLnN/iZRYUdkZjEs6tTeyw9QRCSerjTJ3AVoRnRN
RTmlhwyjjQbICgY9RDeKQzxCEhXSZuMoXWQYNCkJ3lroMbRQbKkw3eLxXWcVjJ9i
xqCwz+QniPmy9r8Q3a9YawQ1D13bX6LEdGiDtk/T5uAxZG3mpoGajZkt/rbcohiU
sw+3ubLhJHJBhXckgO90rTsHHTys4w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:13:20 2025 by rpki-client