Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7af89889-8f7e-3930-bb4c-7dad2705c80b.roa
File: 7af89889-8f7e-3930-bb4c-7dad2705c80b.roa (raw, json)
Hash identifier: pMGj51JtcDDegeEA4cQ/oGozDiYIKOhWBAhHE3sDqPk=
Subject key identifier: 60:65:96:42:82:A7:76:D9:4C:AF:F5:D1:6F:14:9C:F8:3B:E0:77:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406809903EBD3563A90D165F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7af89889-8f7e-3930-bb4c-7dad2705c80b.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:09:90:3e:bd:35:63:a9:0d:16:5f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=3d57c8f7-757b-4cb5-94fb-966796d163aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c2:a5:29:d9:c1:2b:17:28:93:a9:14:ca:2d:
64:02:bf:6f:4a:4c:a4:4e:e9:a0:f2:b2:7a:7d:f6:
b0:c4:78:92:27:17:2b:95:e5:cc:b8:20:93:e2:37:
54:10:37:06:49:c2:7a:8a:21:9e:da:db:bb:61:a8:
65:e0:f5:f5:a0:85:78:fc:e0:c3:ac:fb:23:87:47:
0d:90:92:e9:8a:f3:e2:d3:6b:bf:b6:c1:33:7f:63:
da:4c:a1:b8:6a:10:4b:56:b7:e3:5f:da:a1:49:cb:
0f:8b:95:71:f6:99:58:4e:a2:18:51:50:94:11:e4:
ca:40:58:ac:2e:b9:f2:df:41:42:2d:02:ef:2c:1a:
d5:22:89:5f:f4:f5:a1:fc:c1:84:c6:a9:6a:93:c5:
74:43:cd:50:2f:0e:73:d7:77:92:9f:94:52:d4:fc:
39:bf:ab:ed:1e:d3:22:af:fd:31:1e:e5:94:d3:5f:
6c:6b:3c:98:19:71:81:5a:88:cf:5d:f3:bb:b7:be:
99:29:e6:6e:83:72:33:fa:0f:0b:d3:b0:2e:e1:6d:
4b:d5:52:70:cc:2a:51:05:a0:22:23:a4:48:26:6e:
f2:fd:a7:3e:d8:72:3e:8c:4a:55:c0:0f:63:59:47:
1b:7f:a2:2d:6e:7f:d0:1c:e6:b2:1b:93:9b:17:80:
82:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:65:96:42:82:A7:76:D9:4C:AF:F5:D1:6F:14:9C:F8:3B:E0:77:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7af89889-8f7e-3930-bb4c-7dad2705c80b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:7a:51:0d:50:52:c6:b3:b2:7c:e5:ff:7c:11:0c:77:33:e9:
98:89:45:bd:55:47:4c:4a:86:6a:ae:f7:a4:fe:44:9f:05:fe:
c2:7b:16:d1:1c:6a:e5:2f:ac:3c:6e:e8:43:0a:35:bf:bd:e7:
1e:7b:bf:d0:49:24:c6:71:aa:a2:3d:34:ad:af:f7:b5:84:f1:
ad:74:51:41:b6:e1:82:7e:10:61:35:c8:a2:98:6a:22:a7:68:
36:7b:de:2f:5b:0b:ba:42:3a:d3:d2:6e:39:91:c6:64:b6:36:
20:e2:9e:81:fc:39:46:7b:28:d4:7c:51:5d:7e:cf:6a:56:ac:
7d:5b:f8:2a:e9:38:c6:63:5e:d3:7d:22:47:23:d0:27:ae:45:
a3:72:db:f5:72:55:3d:69:e9:2a:20:15:b3:9a:c9:59:46:6e:
a9:ff:d4:a5:46:04:13:13:de:1d:9f:d0:c4:34:6e:49:ef:7a:
87:cd:72:34:98:bb:03:ea:82:20:08:a6:ca:14:25:be:af:56:
20:95:98:2b:3f:43:ac:3e:06:d0:50:71:32:1e:8f:d6:67:25:
17:cd:b1:8d:ba:f2:db:5e:58:00:29:56:6f:f5:53:fb:6a:ac:
1c:aa:a3:38:6f:8b:f6:99:11:bf:55:e0:07:03:79:6b:40:29:
d5:a8:da:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:35:39 2025 by rpki-client