Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8807b090-7a10-3022-97b4-b5cff940b0be.roa
File: 8807b090-7a10-3022-97b4-b5cff940b0be.roa (raw, json)
Hash identifier: il+uCgECd1it95/FUj8X/NiuqAT7my8tkgTONA2Sono=
Subject key identifier: 19:BF:31:AB:C7:AC:7A:A3:F1:CF:DB:88:5B:2A:FF:9E:91:0C:73:61
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858401C2A8835276B9BED1EA2A220
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8807b090-7a10-3022-97b4-b5cff940b0be.roa
Signing time: Fri 02 Dec 2022 12:00:00 +0000
ROA not before: Fri 02 Dec 2022 12:00:00 +0000
ROA not after: Sat 07 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 35.71.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:1c:2a:88:35:27:6b:9b:ed:1e:a2:a2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 2 12:00:00 2022 GMT
Not After : Jan 7 05:00:00 2023 GMT
Subject: CN=da15dd49-7648-4020-9e91-63709f55daa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a5:9c:34:82:ca:fb:c3:44:d0:29:c9:c2:77:
14:62:71:3f:14:09:fc:69:7c:39:b5:54:3a:1f:57:
77:1d:c8:54:fd:9e:f7:4f:15:1d:ad:a4:ee:57:e6:
61:a1:01:38:b9:ae:6a:e0:c9:34:04:0d:16:74:bb:
36:6a:e2:86:2c:cb:20:f9:7d:10:27:e2:b3:ab:9d:
e5:71:68:48:d9:a1:a5:82:b0:47:19:90:9c:e9:bc:
0b:2a:b5:37:00:93:e9:a8:18:3b:f4:11:91:c8:61:
cd:03:46:c2:eb:9f:1b:48:31:89:da:4a:a4:5f:0b:
21:4d:0d:9a:3a:13:bf:f8:88:4a:14:c5:2b:09:b7:
d4:4b:4e:6f:96:73:43:ee:ea:52:26:c3:d4:54:ab:
ac:c9:5e:51:ce:6b:63:45:39:b4:4b:81:d4:5a:e5:
a3:27:46:7f:a4:4b:25:34:23:dc:84:99:4a:5e:86:
b2:b2:0d:fb:9b:dc:ef:cd:f6:d1:53:22:81:c0:ca:
1f:bf:ee:e1:e7:d3:fd:88:38:81:81:e9:3a:5a:2e:
82:29:f6:6a:d9:b4:03:15:72:a9:32:3a:ef:8b:5c:
d5:59:fa:2d:13:16:e3:cd:84:88:cd:57:80:54:56:
83:8e:e6:8a:d8:e5:1b:21:9c:0e:0d:4c:db:9e:e2:
21:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BF:31:AB:C7:AC:7A:A3:F1:CF:DB:88:5B:2A:FF:9E:91:0C:73:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8807b090-7a10-3022-97b4-b5cff940b0be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:13:af:d1:be:4f:ba:ac:b5:5c:31:e0:b2:16:d5:03:6e:34:
01:a0:83:82:ab:56:2e:55:2c:25:bc:67:ae:30:8f:26:d2:55:
74:eb:6b:61:f1:07:0f:61:cb:ff:d6:99:98:96:88:8f:84:c3:
9e:16:b7:ff:d7:51:26:82:25:10:ab:67:47:a4:4e:c9:40:32:
1f:22:28:49:1c:65:75:ce:1c:1b:95:4e:9f:0e:16:df:18:9f:
4d:ae:dd:5d:ff:9c:fa:df:98:ea:9c:c0:68:c4:94:ba:2c:e5:
45:b5:0d:b3:59:61:a9:71:43:ec:7e:42:3b:13:e7:c3:4c:8d:
15:ce:35:04:07:bc:ca:2f:a4:79:3a:38:ec:14:6f:89:0f:ab:
01:59:38:b9:e5:03:9f:ac:9f:19:55:7c:f6:ca:39:a0:4f:8a:
5c:3d:7b:83:e4:ff:d2:f3:25:64:ad:ea:32:93:fb:51:cd:56:
70:ef:d5:a5:84:34:53:ca:14:61:5e:2d:6a:d6:92:e2:1c:0d:
97:89:e6:44:a9:e6:db:74:0b:8c:b8:41:38:a0:7e:a2:fe:7f:
9e:a2:34:8e:86:f1:99:b4:fb:75:52:c9:78:7c:29:86:b2:b2:
02:03:07:b5:6b:1a:fe:30:93:70:09:8d:d5:8c:36:66:21:ad:
5d:0e:37:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:59:52 2025 by rpki-client