Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2089173-d748-3d8f-bdae-227014dd07a1.roa
File: a2089173-d748-3d8f-bdae-227014dd07a1.roa (raw, json)
Hash identifier: dFQ6N2xtC62iS0smKGozWQLgwfXSEKnMWzu7y6kcL9A=
Subject key identifier: DC:39:98:17:FC:98:8A:3E:C3:52:D2:1C:55:B8:6B:95:80:CF:B9:11
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9F98942FE8937B935BDCB00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2089173-d748-3d8f-bdae-227014dd07a1.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 35.112.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:f9:89:42:fe:89:37:b9:35:bd:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=4a566a20-2ced-4724-beac-44094c63fb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:be:c7:46:ca:4e:f3:f3:a2:69:ce:22:80:
2f:42:22:6c:94:54:e8:a3:5b:cf:c7:39:f8:5f:0c:
24:47:2c:17:3b:2d:27:e8:e8:9e:18:17:69:47:0e:
3c:c7:f6:cf:ae:c6:75:7c:26:b5:fe:de:b4:fa:f9:
07:6a:a2:53:9b:b8:16:52:b7:76:05:1e:4a:01:9e:
e9:b2:b0:f8:3f:67:83:00:a8:79:13:19:58:86:89:
78:4b:0e:c0:a5:27:18:dc:d2:c7:64:72:67:65:40:
46:43:cf:80:02:33:48:65:fb:33:e6:6d:56:c2:de:
cd:52:5d:04:9e:a3:2f:4a:e9:f5:3e:12:fc:c5:11:
80:74:23:2d:00:76:9c:d7:41:0d:e3:bd:bc:62:68:
82:75:b4:e9:52:59:cc:28:51:2d:9b:08:78:32:df:
72:85:cc:aa:85:5a:33:d0:53:fb:3c:22:5e:29:34:
6e:27:a6:1e:7f:52:67:b5:e0:77:5b:44:d1:02:46:
22:78:3f:49:2c:1a:eb:58:fb:33:2f:19:30:15:15:
e1:5d:47:13:45:58:06:c6:b5:0c:f0:f2:ed:ee:3a:
8f:e4:65:62:3d:19:76:32:33:07:09:63:2d:c2:77:
50:7c:fe:a4:1a:6c:c1:dd:dd:f8:58:2f:46:72:11:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:39:98:17:FC:98:8A:3E:C3:52:D2:1C:55:B8:6B:95:80:CF:B9:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2089173-d748-3d8f-bdae-227014dd07a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.112.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:d3:ba:8b:d7:2c:cd:0e:2e:a1:00:9c:2a:27:f6:f7:f1:0e:
9a:63:06:a1:79:aa:eb:51:d7:4c:73:1e:3f:6a:63:dd:7e:f5:
e4:af:ae:ef:a9:63:f2:dc:12:5e:a9:43:fe:46:0a:e7:7f:4c:
6e:f9:a5:fc:23:38:46:bb:4c:7a:d7:34:4c:14:c1:d0:09:e2:
35:d0:1b:6f:f0:f6:62:37:46:cc:48:d5:69:1d:2c:d8:d7:0e:
39:20:a6:14:fa:0a:87:28:dd:e6:f6:c0:7e:6b:8d:a0:b5:35:
05:48:76:48:05:98:1c:59:52:60:02:54:21:b2:75:19:e2:6e:
58:46:c8:d5:5c:78:6e:48:c9:52:4a:0b:ca:20:ba:e2:a7:82:
0e:b4:2b:59:21:6d:90:80:89:7f:87:10:7f:a4:49:20:bd:45:
68:a9:32:43:fc:ce:20:0d:91:bc:8c:1d:5e:dc:ae:40:fa:a2:
ba:a2:dc:54:6c:6d:4e:e6:c9:7b:f6:de:51:87:0d:80:8b:d5:
a3:30:b0:dc:57:4e:35:78:ef:89:03:0e:0b:bf:6c:08:d7:02:
6f:2f:35:f3:4b:c5:c3:47:fb:1b:2a:61:e1:0c:7f:5c:cc:a4:
e6:87:16:0f:6f:84:4f:86:6b:12:90:56:3b:ce:c1:34:4d:ff:
54:71:7e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:17:28 2025 by rpki-client