Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fb6de02-a767-3abb-8aca-a0794631e052.roa
File: 9fb6de02-a767-3abb-8aca-a0794631e052.roa (raw, json)
Hash identifier: MbkPhWBY4Lp/tmVqElQeNxhTldkAwl2YNbcPpQMdzPA=
Subject key identifier: A4:95:60:2B:27:50:96:C8:9A:C9:C5:7D:2D:A3:8E:5A:BE:5F:42:1F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32B7831A7A7643BFCEEE8320
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fb6de02-a767-3abb-8aca-a0794631e052.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:b7:83:1a:7a:76:43:bf:ce:ee:83:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=5d442855-ee70-4ad1-a7b6-1c8e6fdaa13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:16:0a:b4:ed:9f:d8:7c:2c:dd:12:b7:67:
0a:03:a1:d5:5f:47:7a:b5:99:91:4f:80:aa:60:d3:
4b:99:bf:bf:64:96:5d:7d:42:a8:e3:16:eb:87:ff:
65:e3:cf:46:ba:f1:9c:6a:48:4c:e7:28:e7:49:de:
d6:f6:1a:83:5a:3b:8c:8b:90:88:a2:f5:76:5d:ac:
fb:45:90:38:15:d5:6e:b2:9b:73:1c:cb:da:c4:01:
2e:ec:45:88:6e:c0:0c:5a:9c:a3:03:ab:c7:95:a3:
2c:c7:78:43:d6:c5:5f:fd:d0:a6:e7:23:4e:64:27:
91:86:85:ff:ff:b3:be:56:4c:ef:5e:e9:2e:58:09:
04:35:3f:28:c1:71:b1:98:1b:56:e2:4e:36:d7:2d:
d9:89:62:f4:df:5b:f8:2b:d0:53:39:3b:db:26:73:
94:5a:8e:6d:11:70:49:a2:e8:98:e8:0d:6c:f4:77:
08:c3:c7:fa:a6:3b:8c:a9:c7:3a:4f:3a:02:ee:44:
ca:bd:54:c2:f3:7d:8d:b9:a4:49:60:ac:f9:09:6e:
ba:58:95:a5:e6:bb:c4:00:29:b1:93:56:a5:cd:1b:
20:04:6c:82:4e:0d:d0:72:c1:5b:6b:2b:b6:6b:9e:
fe:82:94:17:95:f6:e1:ea:d2:04:31:b8:6b:16:f2:
fa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:60:2B:27:50:96:C8:9A:C9:C5:7D:2D:A3:8E:5A:BE:5F:42:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9fb6de02-a767-3abb-8aca-a0794631e052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:34:bb:a4:ae:98:b5:0a:79:24:69:44:d6:9d:1c:e9:1a:ad:
a7:2a:ab:fe:89:97:a2:66:48:22:4d:91:45:ec:48:7d:98:16:
5e:95:84:99:20:0b:3a:da:4a:10:8e:65:9f:9b:48:90:f0:a3:
1b:a4:80:59:cc:65:da:2e:1b:77:89:09:c3:88:51:5e:14:e7:
ad:01:5d:c8:cf:6a:45:b8:42:69:32:df:2d:c3:64:5f:26:c4:
d1:63:58:02:2b:2b:11:31:4a:4a:cd:3a:61:62:d9:86:33:fe:
3e:51:2d:bf:18:2f:78:dc:7d:ab:99:f7:cb:c2:75:ab:d7:c6:
6e:9a:76:ef:d2:64:22:da:85:cf:9c:47:ea:75:76:27:f2:4d:
52:12:86:de:c8:71:3b:46:0b:f4:b5:ce:1d:f7:28:d5:fa:e0:
4e:47:8c:3e:ae:b1:01:7d:e3:2b:44:d9:ca:77:90:aa:95:1c:
49:93:d4:42:50:e5:ee:0a:a4:45:2d:5b:eb:90:4e:2e:13:a4:
8b:e5:5a:c3:f2:4a:21:db:bf:28:1d:bf:13:6b:57:20:79:eb:
94:de:69:49:00:86:aa:26:29:4a:25:1f:b3:42:d7:b2:43:70:
cd:55:57:11:90:d0:0c:7f:71:3f:03:da:39:82:71:33:21:50:
e0:8b:b0:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:25:16 2025 by rpki-client