Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2ce6129-a7dc-34bf-ba98-1a8f1cb641a7.roa
File: a2ce6129-a7dc-34bf-ba98-1a8f1cb641a7.roa (raw, json)
Hash identifier: 3LOq9/hkqYMpfY1Mb3Q/vqFa4WDbOMVzpuawQhWhtYU=
Subject key identifier: 23:84:5E:A0:50:87:BF:43:2B:1C:82:7F:8C:09:E0:8C:40:19:16:99
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406ADBA255D1D7FEABB9A7C180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2ce6129-a7dc-34bf-ba98-1a8f1cb641a7.roa
Signing time: Fri 30 Dec 2022 12:00:00 +0000
ROA not before: Fri 30 Dec 2022 12:00:00 +0000
ROA not after: Sat 04 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 35.112.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:6a:db:a2:55:d1:d7:fe:ab:b9:a7:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 30 12:00:00 2022 GMT
Not After : Feb 4 05:00:00 2023 GMT
Subject: CN=564d6d93-1c6f-48ff-8732-19ec4d6cc351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6b:9e:9b:e0:17:02:16:fd:5e:7c:e3:da:14:
45:cf:ea:0c:d1:42:88:5a:49:dd:0f:0e:96:06:3c:
91:6b:df:b6:31:ab:1d:be:5f:e4:4c:c7:34:9a:be:
2a:bb:4f:ca:17:ac:26:5d:83:0b:31:88:ab:51:d1:
87:29:a5:e2:65:e6:05:48:26:76:2e:e3:cb:83:6a:
68:98:22:56:57:60:d1:35:90:14:3f:dc:d0:6b:97:
87:b6:0b:9e:20:0a:e0:2c:a9:e7:ff:24:29:74:99:
29:02:32:4d:cd:e0:35:41:63:90:44:0d:8d:e6:02:
b5:8a:a4:5c:50:35:85:61:ef:58:46:74:2f:43:79:
94:bd:a1:e3:2f:da:08:ed:da:24:aa:ed:7f:09:10:
c1:85:93:b7:b5:e4:4d:3d:57:1b:50:d2:14:8a:f6:
6f:55:80:8c:e5:d7:93:9a:62:a3:3f:a5:04:41:f0:
fb:82:27:7f:c1:a1:df:7e:bd:3a:99:5f:1d:5a:11:
7f:15:a9:99:12:e9:12:67:23:66:29:37:92:8d:03:
f2:d7:29:c7:c5:30:00:84:cc:fa:71:86:48:7b:cd:
fd:0b:81:ec:f3:86:8e:df:13:b2:8a:c1:6d:fd:6d:
30:17:ac:de:dc:b4:a9:55:65:83:23:50:99:79:02:
03:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:84:5E:A0:50:87:BF:43:2B:1C:82:7F:8C:09:E0:8C:40:19:16:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a2ce6129-a7dc-34bf-ba98-1a8f1cb641a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.112.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:80:11:fd:0d:8b:0f:52:0e:5c:ba:89:8f:17:1d:fa:29:da:
86:b0:2c:31:9d:7b:e5:43:22:e4:3b:58:bf:91:d8:d7:7e:fc:
1d:da:60:5a:e2:da:1a:e2:96:e2:4e:88:21:53:16:e6:ea:b7:
4a:38:18:67:26:b9:cb:f9:3f:40:2f:bf:ec:cf:64:17:38:6b:
45:a0:f5:19:6a:a0:0d:5a:73:28:6e:7c:c8:2e:66:ec:51:de:
c8:5b:46:99:d7:2d:d7:bf:8f:c7:ad:92:ee:5a:76:fb:d3:ec:
1c:60:55:dd:10:44:ed:e3:92:41:4b:64:7a:a9:36:71:3d:56:
dd:12:16:94:bb:e5:fb:c7:f5:6c:0a:d9:a3:d1:50:95:50:17:
74:f6:45:1e:71:bf:7c:22:68:b2:4e:a2:cc:3e:e9:cf:80:4b:
ea:fd:ae:7e:04:75:f7:35:4c:b3:be:8b:85:b8:67:b8:ae:1e:
21:a4:29:23:ce:1c:1d:9c:db:ae:b6:7d:03:fb:9c:3d:a4:a3:
87:20:3d:af:54:29:05:87:8f:52:45:47:dc:cf:24:f2:c6:f6:
a0:1c:82:c5:a0:3c:7b:c4:39:f0:af:9a:94:ae:21:85:61:fc:
54:c2:60:12:a9:7a:42:fc:d4:7c:66:d7:cc:7a:6e:ad:93:f7:
f1:22:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:34:20 2025 by rpki-client