Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a659e0cb-7ed1-3cdb-a109-ddd596569160.roa
File: a659e0cb-7ed1-3cdb-a109-ddd596569160.roa (raw, json)
Hash identifier: 5cJiCvHeZ5HR65VdA0vlSl1Uqj9RY/eamHZna6mT02I=
Subject key identifier: 3B:86:C9:E3:15:27:EF:71:97:E8:F8:8C:72:07:36:01:7B:D0:BC:9C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF9F25021BA68641195812400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a659e0cb-7ed1-3cdb-a109-ddd596569160.roa
Signing time: Fri 20 May 2022 12:00:00 +0000
ROA not before: Fri 20 May 2022 12:00:00 +0000
ROA not after: Sat 25 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 34.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f9:f2:50:21:ba:68:64:11:95:81:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 20 12:00:00 2022 GMT
Not After : Jun 25 04:00:00 2022 GMT
Subject: CN=7e67bf86-8631-43ca-bd77-bc5b7ce36b03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c6:50:9a:b0:a6:77:e8:7c:86:71:b9:01:c2:
36:6b:d3:dd:3a:ca:5f:be:84:92:1c:ef:1a:15:79:
29:87:3a:fc:2c:a7:f1:65:61:64:0f:8b:76:cb:7f:
18:ed:a5:c2:8e:cd:46:fa:98:44:86:41:0e:28:1e:
9f:9b:23:81:e0:27:4a:46:1f:5d:ed:87:d9:6d:2c:
8f:c6:b9:52:01:c5:4a:a9:47:08:a3:c1:af:c6:f3:
a9:51:64:26:70:b7:4e:c2:5e:bd:40:b8:4b:8a:9b:
6c:57:ad:19:ba:e0:c2:0b:d9:14:14:df:2e:37:6f:
dc:90:31:41:c1:95:a5:d8:f8:9a:98:89:b3:e7:f8:
28:8b:6f:a7:9b:6b:09:aa:24:74:1f:29:a0:d0:20:
0d:c9:72:70:53:e8:b3:35:47:b4:cc:a1:4c:2e:77:
c1:27:aa:f4:e4:41:e1:93:14:7e:4b:7b:32:d5:d2:
a1:d3:72:cb:d3:69:63:f1:5e:07:7e:07:a8:7d:3e:
9c:24:8e:c4:fc:0a:67:fb:12:e4:e5:da:0e:0a:b0:
4b:21:b7:53:ab:44:a3:cb:98:35:e5:6f:69:ae:f5:
5e:bd:48:77:72:15:3f:ba:ba:59:75:c1:3e:07:e3:
d2:a2:f0:3a:e7:e3:26:00:fd:cd:7b:ea:2e:15:4d:
13:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:86:C9:E3:15:27:EF:71:97:E8:F8:8C:72:07:36:01:7B:D0:BC:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a659e0cb-7ed1-3cdb-a109-ddd596569160.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
34.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:4e:6e:12:8a:d3:a0:b8:86:17:bc:b3:d5:31:c6:9d:e3:55:
f3:27:3a:3a:52:aa:b5:2b:1b:88:21:e6:3f:20:c7:42:38:22:
ca:d7:61:a0:35:b7:c9:ce:38:f4:e6:a9:f7:3c:1b:8b:d4:a9:
ea:f0:e7:56:63:a6:86:f3:7d:39:7e:0f:f9:15:53:3d:25:0d:
11:8f:70:8b:be:13:9f:f1:a8:21:5a:d7:fd:4b:83:f5:bc:e7:
ad:b2:dc:85:9e:7d:6f:22:f4:4b:93:e6:84:6b:b0:ab:d7:71:
fd:95:09:7e:13:33:26:22:75:86:ac:de:78:17:06:96:97:a5:
91:df:35:d9:21:06:e3:2a:b7:e4:98:df:19:0e:10:4b:93:71:
db:7a:4d:90:34:c6:c9:d3:85:1b:a6:f3:8f:3b:8c:9b:ce:c0:
b3:7b:59:ec:a6:20:00:a2:ce:18:5b:c1:d6:02:b5:a1:93:c7:
b8:47:14:9f:c4:b0:b6:ac:ba:35:b5:b6:6f:04:87:71:ab:61:
be:74:b7:87:34:18:93:e3:dd:a5:32:ba:60:64:89:78:bd:b7:
9b:c8:25:eb:24:72:18:b2:bd:f1:25:56:ab:aa:e9:52:28:ba:
d2:64:3f:52:c3:a1:54:f4:b7:89:e9:7b:72:92:a9:0a:09:d1:
33:60:cc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:59:12 2025 by rpki-client