Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ffa3d4b-1782-363f-b21a-d9e99ad059d0.roa
File: 8ffa3d4b-1782-363f-b21a-d9e99ad059d0.roa (raw, json)
Hash identifier: eX2eZGCLvrA4kVsYfcuSPPf1QZi+9wqEpZuiSM3KTEU=
Subject key identifier: D6:5F:37:89:D5:65:7B:92:D3:CA:8A:54:64:97:ED:76:92:78:D7:1D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B9B0F9ED22628852335AB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ffa3d4b-1782-363f-b21a-d9e99ad059d0.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:9b:0f:9e:d2:26:28:85:23:35:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=c65f419f-04e7-4039-8816-95c7a7c3992a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:bb:1b:eb:e6:c5:c4:94:b8:c1:8a:e7:53:
e1:74:19:57:e5:30:78:fb:53:3a:26:b7:7d:40:cf:
54:ca:9b:d8:78:76:d4:90:4b:f4:c6:c1:be:b1:1d:
af:70:43:30:11:d5:88:6d:0d:72:f1:16:58:a3:e6:
77:b1:fb:a0:ef:a2:09:7b:1d:e1:d6:ef:de:cc:eb:
4b:5a:c2:d3:75:e5:92:ae:a1:e3:8f:25:de:fa:3e:
f3:4d:dd:63:9a:91:f1:13:f9:25:07:7f:73:6b:81:
2d:e5:f5:77:2a:b7:64:b8:7d:b7:03:ee:e2:1a:ec:
2f:57:a9:f1:c3:70:11:fa:61:71:a1:eb:5d:23:9b:
6d:ac:90:a7:8a:ba:13:48:05:29:9d:70:87:15:13:
24:7c:9f:dd:71:48:53:b4:b9:5e:5c:f1:e2:d9:c9:
7b:fe:f3:11:ed:ad:50:8b:0a:59:bd:43:e0:46:43:
76:36:db:9f:61:0f:24:d0:70:ff:32:5a:75:e1:57:
f6:a3:1f:42:32:66:e4:3c:9b:88:12:99:94:37:2f:
c5:76:fc:4e:49:bc:d9:82:f3:d3:23:83:2e:e0:80:
ec:56:12:9e:40:23:4a:b4:0f:8e:52:ea:1a:cf:e2:
d2:39:2e:e9:d0:ca:47:b5:03:78:3f:59:42:bf:1d:
ac:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5F:37:89:D5:65:7B:92:D3:CA:8A:54:64:97:ED:76:92:78:D7:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8ffa3d4b-1782-363f-b21a-d9e99ad059d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:07:d9:58:40:51:61:d1:a2:a6:e1:ae:af:14:1d:f9:b6:4e:
52:05:91:e7:53:cc:2e:08:11:f6:27:0d:ee:0d:10:3e:99:11:
9f:0e:d8:7e:d5:14:7c:d4:75:16:c2:d6:76:c4:11:2a:9c:4d:
56:fa:9b:d8:6f:7b:c3:80:e3:09:7f:8e:29:d3:48:b1:15:c3:
de:cb:de:bf:14:44:c6:be:44:c2:4c:01:89:da:ef:0a:4f:6c:
d1:9e:b0:88:b8:22:4e:07:cb:f0:18:f7:71:5c:a0:6e:ab:f2:
d8:9c:c5:02:a1:18:78:48:49:a1:c6:58:64:36:86:35:c6:44:
31:c2:aa:68:a0:9d:02:fc:4f:70:5b:57:d7:8f:0f:40:0d:af:
12:e4:e7:31:38:8b:d8:27:f0:45:a5:b7:95:86:63:0d:78:98:
c1:b8:05:7b:46:53:ff:ad:07:6b:54:58:48:3a:91:95:c6:82:
22:8e:ff:6c:70:ae:47:82:e5:d1:82:79:7a:14:78:79:8a:30:
eb:e4:4b:bf:94:f6:ba:ea:65:18:a2:e8:94:9a:ef:87:99:86:
d2:ce:86:29:7d:b1:56:0e:a4:1d:cc:7e:4a:07:01:11:27:5f:
c9:56:9e:9f:b5:00:0f:88:ae:3e:ae:9f:77:9f:a0:14:5d:bc:
d4:6e:8c:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0Lmw+e0iYohSM1q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIyNTA1MDAwMFoXDTIyMDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
YzY1ZjQxOWYtMDRlNy00MDM5LTg4MTYtOTVjN2E3YzM5OTJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2py7G+vmxcSUuMGK51PhdBlX5TB4+1M6Jrd9
QM9UypvYeHbUkEv0xsG+sR2vcEMwEdWIbQ1y8RZYo+Z3sfug76IJex3h1u/ezOtL
WsLTdeWSrqHjjyXe+j7zTd1jmpHxE/klB39za4Et5fV3KrdkuH23A+7iGuwvV6nx
w3AR+mFxoetdI5ttrJCniroTSAUpnXCHFRMkfJ/dcUhTtLleXPHi2cl7/vMR7a1Q
iwpZvUPgRkN2NtufYQ8k0HD/Mlp14Vf2ox9CMmbkPJuIEpmUNy/FdvxOSbzZgvPT
I4Mu4IDsVhKeQCNKtA+OUuoaz+LSOS7p0MpHtQN4P1lCvx2sMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNZfN4nVZXuS08qKVGSX7XaSeNcdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOGZmYTNkNGItMTc4Mi0z
NjNmLWIyMWEtZDllOTlhZDA1OWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI0eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGUH2VhAUWHRoqbhrq8UHfm2TlIFkedTzC4IEfYnDe4NED6ZEZ8O2H7V
FHzUdRbC1nbEESqcTVb6m9hve8OA4wl/jinTSLEVw97L3r8URMa+RMJMAYna7wpP
bNGesIi4Ik4Hy/AY93FcoG6r8ticxQKhGHhISaHGWGQ2hjXGRDHCqmignQL8T3Bb
V9ePD0ANrxLk5zE4i9gn8EWlt5WGYw14mMG4BXtGU/+tB2tUWEg6kZXGgiKO/2xw
rkeC5dGCeXoUeHmKMOvkS7+U9rrqZRii6JSa74eZhtLOhil9sVYOpB3MfkoHAREn
X8lWnp+1AA+Irj6un3efoBRdvNRujJo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:55 2025 by rpki-client