Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9881111a-ebcf-348b-954c-bdf67a5f5142.roa
File: 9881111a-ebcf-348b-954c-bdf67a5f5142.roa (raw, json)
Hash identifier: mGQ6+rQksLWYLnnfCqAMd/Uwak63QPtCQYF0qRQ9OGo=
Subject key identifier: F0:1B:87:7A:71:A8:7B:FC:01:9F:56:91:12:19:BA:1F:45:3C:89:F2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCB9594FCE61A51FB1DAA55C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9881111a-ebcf-348b-954c-bdf67a5f5142.roa
Signing time: Thu 03 Nov 2022 12:00:00 +0000
ROA not before: Thu 03 Nov 2022 12:00:00 +0000
ROA not after: Fri 09 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:cb:95:94:fc:e6:1a:51:fb:1d:aa:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 3 12:00:00 2022 GMT
Not After : Dec 9 05:00:00 2022 GMT
Subject: CN=57954c53-3895-47c3-9f7d-38207a0ef0f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:32:e3:8c:91:a4:17:12:67:19:98:5a:04:c1:
65:a9:b4:17:61:6d:98:ab:ff:b5:0f:b2:d2:85:cd:
7d:fa:4a:e9:d7:b0:4a:9f:6b:7e:89:1a:b9:6e:d3:
49:99:4d:0b:9e:de:61:4a:ac:12:26:5b:f7:4f:05:
a1:d7:3e:86:78:a5:e8:95:1b:ba:53:ba:63:fa:98:
92:34:68:34:ed:ef:82:86:10:be:b4:f1:6c:73:1b:
4a:f2:97:25:34:98:87:6a:87:f8:c7:2a:42:2f:09:
34:ec:5a:6c:d5:98:c6:6a:98:0b:f5:2d:4c:42:76:
a2:c9:5f:99:b7:52:0a:87:dc:81:98:87:99:33:ee:
e1:32:78:50:11:69:b2:57:15:48:13:80:86:f2:b2:
b7:33:6c:6a:27:0d:a6:10:6b:cf:24:08:c2:dd:8b:
c6:67:a9:81:fe:4a:b0:13:e5:af:fd:2f:8c:e3:d0:
cf:24:9b:db:76:48:78:0c:27:56:36:d1:c4:f1:c9:
db:67:5f:12:4d:b1:3d:37:45:14:b5:43:3b:c1:a7:
18:84:f4:a0:1f:d8:f0:b5:9a:3b:3d:f8:b4:f5:cb:
1d:c6:df:e0:e5:43:5c:ba:9a:90:90:22:df:43:08:
00:26:69:9d:f1:23:df:b2:55:7c:90:51:f5:42:f6:
c1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:87:7A:71:A8:7B:FC:01:9F:56:91:12:19:BA:1F:45:3C:89:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9881111a-ebcf-348b-954c-bdf67a5f5142.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:a1:91:8b:28:54:e3:be:15:ad:88:4c:dd:41:88:59:2e:0c:
96:37:42:06:46:b8:d4:8e:cc:74:61:a3:50:86:e5:c1:b7:5d:
08:15:f8:88:52:64:04:81:83:ac:74:9e:69:ec:30:e7:e9:f1:
41:1e:fc:9c:a4:5b:98:99:3f:7c:5e:4a:01:f2:bf:ac:c4:28:
38:5c:40:75:c3:bd:10:a3:7a:a5:22:bb:76:4b:b6:f4:88:32:
ba:fe:7d:a8:9d:f8:99:f8:4e:38:e1:eb:a7:c7:fa:e5:59:cb:
ae:ec:37:62:37:4e:20:43:e9:1e:12:a2:2a:03:de:f2:ce:18:
86:fc:31:2e:ed:be:da:5f:84:39:ff:e9:46:55:a6:df:cb:d0:
6b:e0:10:f5:33:1b:3a:e1:e3:b0:91:fd:41:61:dd:92:7f:fd:
71:02:5a:9e:20:ee:f5:a2:a5:b9:94:ad:0d:d0:12:91:00:f5:
b6:1b:8a:6d:11:4d:1e:cf:45:93:56:81:3d:dd:b3:1c:b8:1c:
aa:5f:b0:4d:ce:c3:1f:e3:b9:6c:77:9c:b2:a6:44:ad:ad:b6:
24:43:3c:24:69:6a:bf:b9:ba:31:5b:09:12:b7:cb:f9:b5:91:
95:ec:72:08:98:9a:de:17:9f:98:d9:cc:71:93:b6:7a:65:af:
e6:1e:09:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:01 2025 by rpki-client