Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a82b39a-af4a-3fa3-997e-7b070b5e5965.roa
File: 7a82b39a-af4a-3fa3-997e-7b070b5e5965.roa (raw, json)
Hash identifier: jk1Es2854cgnFE9ljAFaV1NjLUCf9zVu3qeRcZdqcRM=
Subject key identifier: C5:A8:12:1E:9F:26:B1:AF:38:CA:31:72:2D:D7:F3:1F:6C:A9:CD:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584091F164F09CD6F1905BFBD310
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a82b39a-af4a-3fa3-997e-7b070b5e5965.roa
Signing time: Fri 13 Jan 2023 12:00:00 +0000
ROA not before: Fri 13 Jan 2023 12:00:00 +0000
ROA not after: Sat 18 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 35.112.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:91:f1:64:f0:9c:d6:f1:90:5b:fb:d3:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 13 12:00:00 2023 GMT
Not After : Feb 18 05:00:00 2023 GMT
Subject: CN=7147c50c-aca4-439e-87e9-93182b087b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:1e:84:df:4f:f6:95:c7:05:ab:46:5d:dc:
ed:db:ce:67:b9:a2:3c:a7:a0:9a:50:ac:8d:72:5a:
60:c0:3a:12:5b:09:74:d1:6e:15:36:20:8c:d0:8e:
ed:0f:a4:e2:a2:7b:92:61:f2:5f:21:ea:43:fd:58:
83:4e:74:6e:76:94:bd:c4:30:61:88:09:c1:da:05:
21:e6:71:82:5e:3f:91:82:24:3d:c0:53:b6:25:c2:
e4:36:24:c2:b6:69:5b:f5:cd:44:77:42:a3:14:12:
98:eb:80:c2:76:b7:62:7e:98:52:04:76:c2:11:b1:
77:03:94:13:eb:d1:f1:01:70:cc:bc:fa:2c:08:b2:
5e:0e:a7:a7:74:67:db:a9:cb:49:ff:3a:47:7c:4c:
38:95:6b:bc:ee:b4:1d:4c:c7:09:b7:af:a1:5e:bb:
1b:26:47:ab:bf:6e:93:c5:16:3c:b9:cc:7f:26:cc:
5e:3c:02:7c:12:a7:02:7e:6a:6d:14:44:6a:ab:20:
37:3d:6b:17:57:91:ea:b0:58:09:16:76:c2:37:a8:
7b:61:9b:fe:98:d8:0f:1b:8a:06:f4:79:7b:a6:b9:
7a:27:d0:3f:d6:49:00:be:5c:f5:58:79:1c:63:29:
63:50:9b:1c:75:c1:b6:d9:a9:4c:bb:5e:8a:2b:bb:
0b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A8:12:1E:9F:26:B1:AF:38:CA:31:72:2D:D7:F3:1F:6C:A9:CD:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a82b39a-af4a-3fa3-997e-7b070b5e5965.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.112.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:58:70:27:65:4f:dd:c7:9b:b1:b9:af:f8:41:4b:d5:8c:c6:
63:1e:b9:a0:49:d0:b4:78:70:16:f7:39:67:a0:21:b6:b9:ca:
02:48:84:5b:ec:fc:cc:49:02:0f:e1:3f:9d:8c:8a:45:b4:d2:
17:2f:77:03:61:e7:d0:60:b1:9c:5a:f4:2b:dc:3e:10:36:ea:
b7:10:6e:b0:f9:7b:21:b0:16:2c:e6:fb:3f:c8:78:a0:01:ef:
18:41:71:6e:47:d5:f0:ae:35:82:74:2d:04:ce:82:26:ca:e0:
96:81:8d:93:80:73:6c:b4:42:c4:29:eb:f5:5c:d0:23:a1:9f:
76:a5:bc:c6:4a:25:c3:b9:f5:11:46:2b:46:3a:0d:40:0a:e0:
bf:3c:4c:79:3d:e7:fd:ed:18:d8:cf:35:62:69:0f:8a:c9:1a:
4e:5e:85:96:41:6a:fd:32:76:9d:fc:e1:4c:49:d6:18:99:ff:
5e:ea:32:87:ef:51:96:1b:dc:98:35:79:a9:78:90:be:11:51:
c4:fa:06:c2:30:5d:0a:22:72:63:df:09:78:d4:62:f0:45:05:
1d:24:ad:a7:b3:58:60:ce:fc:44:73:44:52:15:2d:5e:58:92:
9b:54:bd:88:2a:e5:c7:44:35:51:84:4b:ed:8f:e3:9d:e7:aa:
fc:cb:5c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:55 2025 by rpki-client