Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87eb705f-a646-382c-877b-2b5bed5a6570.roa
File: 87eb705f-a646-382c-877b-2b5bed5a6570.roa (raw, json)
Hash identifier: muNFGaDDN6b9yVBJkXstjC+l9WzRkk3PCeZ12bcn3Ug=
Subject key identifier: 03:BC:00:64:4E:E5:5E:4E:46:16:C4:F0:E4:8F:EB:E4:58:FA:83:E9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858404338BA220E299BD0C86E2600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87eb705f-a646-382c-877b-2b5bed5a6570.roa
Signing time: Fri 16 Dec 2022 12:00:00 +0000
ROA not before: Fri 16 Dec 2022 12:00:00 +0000
ROA not after: Sat 21 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 35.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:43:38:ba:22:0e:29:9b:d0:c8:6e:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 16 12:00:00 2022 GMT
Not After : Jan 21 05:00:00 2023 GMT
Subject: CN=e36d201b-62fd-44e9-a1a0-c9a5140e57c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:72:c7:ad:e7:90:93:26:08:4b:6e:32:76:
06:87:3e:63:4b:06:7a:eb:ab:0f:64:87:ea:97:5e:
9b:ea:ec:7b:df:6d:82:7a:76:99:96:6a:44:0d:22:
d3:8d:1f:ff:02:04:ef:ad:d0:1f:c9:4e:a1:88:5e:
5f:6e:88:f9:e6:9e:8a:da:c8:10:a3:15:e8:2c:88:
c5:aa:09:f8:3f:45:3f:f4:67:85:fc:93:cb:38:d3:
59:7d:4a:f5:ef:55:98:de:71:22:c8:45:29:3f:1a:
ee:77:4d:dc:d5:a8:67:93:1f:97:d2:07:57:54:50:
7f:b5:1e:66:e6:fb:53:68:d9:32:60:7e:b9:04:19:
38:08:bc:95:1a:58:d7:5f:7e:06:2b:7d:d6:67:f4:
aa:ab:41:76:c8:16:29:fe:68:f9:78:86:cf:4b:65:
cc:73:f7:0a:18:0e:95:61:6e:d8:2f:35:30:d1:91:
73:ed:43:37:fa:4a:bc:63:aa:03:bd:bf:48:ff:69:
61:f5:dc:76:b5:62:57:ea:8e:fc:ab:e9:f0:6e:7f:
c4:d0:d9:00:b3:30:c6:a6:23:51:b0:d4:3a:c6:11:
ad:33:9d:bd:4e:96:86:83:7a:b3:f8:dd:87:fd:36:
b6:c2:4a:5c:e4:a2:51:68:b4:59:a9:98:d4:4b:b2:
41:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BC:00:64:4E:E5:5E:4E:46:16:C4:F0:E4:8F:EB:E4:58:FA:83:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87eb705f-a646-382c-877b-2b5bed5a6570.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:66:9c:31:70:22:01:96:be:34:a3:e2:4c:70:7e:96:bf:bd:
1c:a5:cd:02:59:9f:17:47:9b:ad:15:b1:ac:52:f9:04:fc:f7:
8e:cc:78:24:39:d8:0e:46:61:f5:05:e6:51:73:41:b3:ad:5f:
ee:e6:2d:63:9d:0b:d9:ed:f7:a8:41:0d:9c:ea:88:81:ec:8d:
58:9a:8f:aa:a1:11:cf:42:92:c2:07:dd:9f:d4:a1:e6:ae:af:
d4:d9:c9:1b:f6:3a:38:99:73:b2:f1:48:af:f4:ec:a0:42:0c:
de:38:0a:20:fa:6b:60:19:7b:b1:cf:95:b2:65:8b:1e:23:e2:
35:28:a5:c2:e1:61:6b:0c:be:f9:53:ae:3d:d7:2c:27:e7:59:
18:82:63:b2:14:ea:b7:98:88:bc:09:52:47:a8:48:af:67:da:
76:2f:04:16:d0:e2:0f:47:a9:8d:d2:6e:4c:ed:6e:8a:62:f3:
ad:2a:9a:64:82:04:b9:34:d3:16:ba:cc:74:89:f0:f7:ac:12:
e7:5e:4d:d0:f2:3e:cb:ef:db:72:da:05:42:fc:02:8b:d2:a1:
7f:63:75:a7:dc:10:93:cd:74:07:31:ae:93:96:8b:14:14:ce:
21:d5:73:18:84:ee:51:aa:5a:02:44:25:f1:b1:e8:21:95:4d:
22:a6:ff:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:39 2025 by rpki-client