Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95f7f59a-5c97-3910-9a13-aa0176326bdf.roa
File: 95f7f59a-5c97-3910-9a13-aa0176326bdf.roa (raw, json)
Hash identifier: dzTZy7OAWHml37wmnD7m5Y9ho3ew9Il2LcAk55KJZ74=
Subject key identifier: 33:A5:32:4D:5F:9D:28:8E:6B:1E:80:B6:8C:3F:20:7D:DA:05:18:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B9AD65AC5DB123EDD517A80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95f7f59a-5c97-3910-9a13-aa0176326bdf.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:9a:d6:5a:c5:db:12:3e:dd:51:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=67287f85-c43d-4793-8bae-3484f86e8f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b5:9b:27:e7:3c:9b:93:dd:35:74:8d:ed:c3:
72:fa:7b:9a:45:0d:50:b0:b6:16:a3:a0:8b:d5:38:
a2:18:f5:84:3b:75:bd:d2:1a:e2:4a:08:60:de:87:
e0:88:81:07:1a:ce:1f:7e:28:86:f2:17:04:07:ee:
9f:31:d3:4f:85:65:a7:b8:f0:69:32:78:fe:bd:f1:
75:5a:ee:3c:b9:01:b7:7b:0a:5e:51:cf:df:a4:aa:
50:48:60:df:34:56:c3:d9:53:7a:c6:33:7d:8a:fe:
b4:ef:68:f7:4f:bc:89:83:87:20:96:6b:74:b2:3e:
98:ed:28:9a:7d:a3:a2:8a:91:c6:d9:eb:cf:51:a9:
48:86:07:fc:f1:ac:0d:4d:92:66:05:02:46:ac:4d:
88:26:5f:9c:4b:48:29:20:09:10:bb:4e:0c:86:d0:
98:5f:81:d6:e5:3b:7f:b1:82:52:49:38:02:19:26:
bc:02:d7:d8:74:f4:cc:21:f3:3c:33:26:09:66:47:
b4:be:9d:98:df:3b:83:3e:96:78:bd:f6:ee:dd:d4:
3d:29:28:00:13:34:a3:14:ba:ee:5d:11:4f:b0:26:
42:0e:26:b2:b1:2c:95:d9:c9:cf:7d:24:4c:13:c6:
44:7e:18:56:74:87:13:36:bf:c8:a4:dc:a1:91:fb:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:32:4D:5F:9D:28:8E:6B:1E:80:B6:8C:3F:20:7D:DA:05:18:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/95f7f59a-5c97-3910-9a13-aa0176326bdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:28:76:c8:e2:83:13:15:64:98:3d:06:74:6f:bd:3b:9f:01:
51:0a:9e:3f:d8:f9:f1:c6:61:b2:3e:1c:2f:99:34:e9:4a:af:
38:b0:c9:87:51:f0:31:27:7e:c1:43:98:2b:09:35:1b:65:62:
6c:2e:72:04:b2:84:ea:4a:05:08:db:c3:ca:91:97:38:93:56:
ab:4b:bc:3b:3e:c3:be:8f:28:31:ef:de:9b:19:73:ef:a0:ea:
86:2f:4a:ac:aa:e3:f6:8e:00:fc:1d:f9:a2:af:81:e6:3d:ae:
5c:e4:18:99:b8:9f:c8:1e:c5:a0:28:2b:dc:1e:6e:1e:a9:dd:
6b:cc:d2:72:53:3f:c2:99:3f:bc:ef:84:bf:f7:2e:a8:53:29:
5d:07:a3:23:db:cf:96:94:ce:ce:40:99:9c:83:d1:7f:2b:87:
12:8b:0e:14:70:97:fd:c0:a9:92:c6:a3:43:4e:45:1a:76:ce:
4b:b5:20:dc:45:c8:ef:4c:a0:a8:21:37:7e:64:60:52:5c:a3:
1c:67:d5:e6:19:2a:14:43:2e:b4:90:16:6f:42:7b:41:c5:12:
cd:77:ce:3e:71:c2:84:f9:df:81:9b:27:eb:52:6b:4c:ae:fd:
b5:ca:11:d6:3d:98:0d:40:9e:b6:36:d6:12:88:c8:dd:6d:b1:
48:4a:47:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:32 2025 by rpki-client