Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8165b5e5-69e1-3cc0-86c6-d5944ef1e3e6.roa
File: 8165b5e5-69e1-3cc0-86c6-d5944ef1e3e6.roa (raw, json)
Hash identifier: xTONbvTeb5bF9Ur5OeYWI8vtpjt5HwcbUShy180u7L0=
Subject key identifier: F2:EB:41:1D:44:BE:89:5B:38:3F:17:30:16:D2:F4:53:86:6D:AB:27
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FF6120BFC991D5F13329CCB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8165b5e5-69e1-3cc0-86c6-d5944ef1e3e6.roa
Signing time: Fri 18 Nov 2022 12:00:00 +0000
ROA not before: Fri 18 Nov 2022 12:00:00 +0000
ROA not after: Sat 24 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:f6:12:0b:fc:99:1d:5f:13:32:9c:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 18 12:00:00 2022 GMT
Not After : Dec 24 05:00:00 2022 GMT
Subject: CN=0fe8a031-ea5d-4f82-87c3-1fe25dbea7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3e:5f:0a:ef:15:31:92:2e:f6:50:23:e5:fe:
f7:64:60:2a:ec:95:80:32:56:13:ff:23:82:3e:e6:
7a:e3:cc:3a:5c:df:6e:ce:aa:fb:3d:85:44:c0:fb:
0a:da:e5:85:3b:a5:c0:4b:43:ff:f8:b5:fc:16:4b:
99:22:3c:3d:7e:35:b8:c9:41:a1:7c:78:22:af:44:
45:6c:80:a5:dd:d4:91:51:61:d4:30:fe:0c:05:4d:
9d:d5:84:8d:c9:d0:5f:bf:57:f2:ef:97:3f:85:2c:
2d:56:c9:8b:ba:a3:90:38:5e:86:4c:93:3b:4d:16:
eb:83:da:ee:59:ce:a4:ee:5f:09:de:d9:c4:84:96:
bb:03:b9:93:10:21:18:bc:cf:95:36:c5:f0:aa:f1:
b2:76:c1:67:05:65:da:22:ca:07:b3:48:99:71:01:
46:8b:a3:1b:b9:3f:99:88:82:28:d2:e1:10:28:74:
0f:90:33:24:84:07:35:a5:04:6e:cf:c4:6a:a3:e6:
9c:c7:45:eb:95:3c:95:72:a2:15:28:a6:eb:a7:4c:
56:c3:f1:24:12:f0:0f:e4:d9:3f:5a:0e:91:c9:bb:
08:15:b1:ab:37:dc:6c:42:5b:e7:ed:3f:b3:2f:f3:
5a:6c:03:b7:19:cd:9b:5f:e3:87:1c:fd:bc:87:96:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EB:41:1D:44:BE:89:5B:38:3F:17:30:16:D2:F4:53:86:6D:AB:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8165b5e5-69e1-3cc0-86c6-d5944ef1e3e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:23:bf:fc:ff:fe:43:d4:23:b6:d7:33:6e:14:6d:06:d3:55:
7c:8c:0b:ba:04:df:5e:4d:55:37:4e:2c:46:b2:26:dd:de:7e:
00:a9:29:0f:b6:c1:16:8e:74:72:95:0b:4d:62:94:20:4b:24:
05:1b:f2:4f:60:09:49:1d:89:86:92:95:10:18:59:81:a5:e6:
7d:66:6f:8f:e8:f7:48:07:fb:51:5d:4f:8e:a1:fb:0c:91:4c:
37:fa:5b:a8:7a:5a:ff:da:c6:3e:be:2d:53:57:bd:d1:62:52:
25:6a:ee:85:95:ab:20:7d:48:04:54:cd:82:b8:b2:3f:fd:28:
e9:69:41:96:99:1b:10:15:ca:d9:76:21:18:91:07:a9:8d:77:
f0:4d:25:8b:a5:06:99:57:b1:07:27:6f:83:ab:92:d4:e4:ef:
79:17:34:8b:8e:96:f6:ef:fa:ac:15:4c:3b:bc:03:f4:45:b9:
83:0e:59:54:6e:0a:42:c2:4f:e7:72:7d:69:99:76:8c:80:6a:
00:09:bf:4b:72:63:b0:e1:e6:3e:fa:3b:f5:1a:d7:04:23:12:
5c:7e:fe:aa:f2:50:6c:d0:49:01:a3:6b:57:e8:df:4d:4b:c3:
34:6b:d7:34:b2:7c:bf:1f:67:4e:d3:1d:8b:ab:36:53:df:3a:
6d:bd:64:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:02 2025 by rpki-client