Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d7f3fa3-0a41-3d79-943c-ca3bbc63b713.roa
File: 9d7f3fa3-0a41-3d79-943c-ca3bbc63b713.roa (raw, json)
Hash identifier: csouEbAOHmKNdZiroLePuloX5cItWLi3q5xv4c470ts=
Subject key identifier: DF:9F:24:EC:FF:86:43:3F:8E:27:9E:73:33:1A:09:FA:A6:83:16:B5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B98D0D8FE1645BF9C371BC00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d7f3fa3-0a41-3d79-943c-ca3bbc63b713.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:8d:0d:8f:e1:64:5b:f9:c3:71:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=eab8531a-555a-45d1-8a40-52913a9622c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:15:33:2a:4e:5c:89:1f:0a:05:bb:15:10:51:
f7:be:33:a7:bd:09:55:95:cc:12:57:49:1f:13:a8:
ea:35:a6:08:f6:b2:da:0c:5f:27:07:6c:93:ae:c7:
07:6b:51:95:20:31:7f:42:47:37:fe:ed:36:cf:f2:
56:90:ea:c0:62:18:09:15:18:41:5b:e0:9e:61:00:
0d:f8:3d:71:35:58:6a:b2:5b:85:3d:51:f3:0e:f1:
d9:95:50:d8:82:9c:a6:da:a1:83:71:e9:e0:c3:39:
24:da:a7:91:64:85:bd:bb:32:32:87:37:59:e7:dc:
17:53:77:8d:eb:2b:55:54:ca:6c:07:06:4d:b2:0c:
cc:8e:d3:44:6a:e0:51:ec:e3:46:7d:e5:0e:a3:8e:
fe:33:eb:e9:cc:cc:d5:55:d7:d9:2b:3c:ee:7b:a4:
01:74:22:ad:5f:c6:cc:d2:a0:2c:77:95:eb:b4:b5:
e9:c0:19:39:bc:1f:2f:e7:10:ba:47:f4:98:16:17:
48:9a:84:41:59:37:6d:a5:e4:b0:61:2f:b1:6e:29:
f1:4c:bf:f1:41:fa:70:03:57:4d:97:d3:4d:7d:f3:
62:0d:83:96:3a:76:09:18:8b:3e:24:fc:31:89:db:
3d:ca:eb:dc:5a:42:84:26:d5:7d:82:09:bf:2e:68:
d5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:9F:24:EC:FF:86:43:3F:8E:27:9E:73:33:1A:09:FA:A6:83:16:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9d7f3fa3-0a41-3d79-943c-ca3bbc63b713.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:b1:b3:50:7e:2f:a4:67:c4:a9:38:41:e3:0b:df:fc:89:ec:
5e:22:c2:d2:79:72:1e:49:d8:74:44:80:c0:a9:06:5d:65:e5:
e6:1a:d7:a6:0a:b2:87:e3:5b:4a:1a:05:31:4f:14:40:69:92:
03:9f:2e:3b:c6:17:47:5c:a3:f7:e7:07:b2:c6:6c:de:28:80:
49:fe:ab:5f:4a:a3:48:aa:7b:0c:44:f8:29:51:75:b0:5d:46:
38:ad:f9:fb:e7:fb:93:64:cc:47:1d:46:14:ce:e8:fd:b6:c1:
d4:46:74:73:04:48:2f:7d:2c:a6:c8:78:85:28:40:27:3e:61:
8b:64:7d:f4:77:3e:38:6e:8d:3e:22:e4:b5:ba:ed:7a:44:ab:
87:60:c7:fa:8a:7a:93:bb:8d:9e:4e:37:c4:58:d8:fe:72:98:
31:0d:65:d4:67:ab:90:93:98:f5:35:70:0a:33:00:04:4d:e2:
33:d8:80:f6:cd:78:81:9f:1e:6d:84:77:e1:6d:8d:8e:55:37:
38:84:18:48:ff:d5:b7:11:68:6b:cb:c1:15:e9:c9:67:9d:a8:
71:3b:d1:0f:43:24:b6:8b:95:05:b8:63:ce:89:0c:80:66:82:
d9:5d:e9:85:ad:63:49:dc:77:65:4f:a6:4e:aa:23:f9:1a:fe:
75:43:28:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:05 2025 by rpki-client