Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a826a525-8bac-3412-b0c9-efe360de764f.roa
File: a826a525-8bac-3412-b0c9-efe360de764f.roa (raw, json)
Hash identifier: Qzr5LS4FkXg8U8KF1K4mozVE5P1y0WdkPegMxNEgK4w=
Subject key identifier: 59:B6:92:79:D3:B2:EF:E7:0B:D8:8F:2D:C7:23:A8:ED:91:B5:04:78
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBD834D5F6C0D529470838B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a826a525-8bac-3412-b0c9-efe360de764f.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 34.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:83:4d:5f:6c:0d:52:94:70:83:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=ff913612-5df4-4976-9b1f-1ab36c02a45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:76:3d:ff:63:dc:76:53:e4:82:ee:15:42:7d:
66:34:0f:65:58:7b:12:30:e0:bc:50:0d:0a:c9:6f:
1d:eb:9b:a2:fa:b4:cf:12:e5:fc:02:c8:34:52:d4:
cd:fa:9a:f9:04:ee:0d:05:57:fb:a7:98:aa:76:22:
a1:94:b2:8f:7d:2a:dd:6e:d9:97:e6:2b:f4:73:8c:
3c:a2:50:e9:6e:82:66:40:22:8f:12:5e:5c:14:0d:
7a:41:97:b8:0e:14:9a:21:30:0b:5d:61:43:a5:88:
e0:ca:9e:c1:e3:57:70:4a:28:b4:26:95:ea:24:74:
9a:13:d6:19:51:7c:e7:9e:dc:96:6e:01:97:73:a9:
6e:a1:cb:18:ef:26:82:46:a8:de:b5:12:2c:a1:69:
49:2b:3f:32:e6:ac:71:7a:39:75:67:4b:29:12:ad:
19:85:f8:01:3f:69:cd:eb:72:f3:e0:52:44:3a:fd:
85:03:de:7d:2e:e6:09:f6:1b:aa:5e:0f:c7:26:da:
98:28:53:fa:75:34:4c:0c:34:fb:85:98:c7:ab:d8:
0e:22:71:ad:fd:fa:f4:b8:93:e4:7d:3e:25:36:3d:
88:c7:03:32:5d:a7:2d:4e:22:d4:6c:01:8f:9b:cb:
db:e8:54:73:3e:51:61:37:37:06:c9:7f:d8:7b:67:
5e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B6:92:79:D3:B2:EF:E7:0B:D8:8F:2D:C7:23:A8:ED:91:B5:04:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a826a525-8bac-3412-b0c9-efe360de764f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
34.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:3a:23:9c:d8:f8:14:ba:b3:10:6b:d1:36:9f:a6:ff:b7:80:
88:e9:ce:fe:01:78:63:c5:63:1a:63:20:bf:3d:3f:a3:35:5d:
ce:d3:dd:32:c1:59:9a:ce:99:fd:82:56:19:8c:46:ae:83:55:
0a:48:66:4e:52:66:9c:79:fd:8d:8b:4d:d9:de:b6:d8:5c:23:
8a:9e:94:0f:2b:26:3f:2c:d8:e8:cd:7d:b7:57:cf:e5:6d:a5:
92:00:db:24:98:8b:03:3e:ce:c3:aa:88:32:a6:e4:33:d7:96:
b1:18:c1:11:bf:bb:2c:df:4d:b7:75:f8:09:eb:77:51:cd:1b:
9c:3e:a3:cb:2d:ef:fb:ba:4d:0d:a7:28:01:be:30:7c:65:9d:
c2:8c:5b:0a:a2:99:26:67:2a:b1:e4:3c:b2:77:e4:e1:18:68:
05:7f:34:1d:59:2d:76:9a:6d:cf:69:09:33:23:c2:7f:bf:4d:
3a:b4:b1:8d:8d:04:4b:df:f5:1e:43:98:56:45:b4:fd:8a:23:
bb:6a:d7:f3:cc:48:6c:38:4b:2c:cc:e8:85:91:56:3b:88:54:
ad:1e:f0:4b:00:24:69:ae:ac:95:a7:17:98:61:cd:ca:22:31:
d6:00:83:87:49:9f:10:01:af:ce:76:83:35:5a:a4:f9:76:1e:
cb:c8:30:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:31:45 2025 by rpki-client