Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af0eb897-15ce-3d3e-9560-a5f5ee410612.roa
File: af0eb897-15ce-3d3e-9560-a5f5ee410612.roa (raw, json)
Hash identifier: H6JuwGHyM8BxBcGtiy559p9Qn+Rk5PLqqU3k/o4FD7g=
Subject key identifier: C5:45:C1:4E:EB:04:12:2A:86:41:D8:43:68:89:45:D6:35:4F:1D:74
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32D2F008FA1EC2C53DADEF80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af0eb897-15ce-3d3e-9560-a5f5ee410612.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 35.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:d2:f0:08:fa:1e:c2:c5:3d:ad:ef:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=26bc64d9-1d6d-42ec-b973-e28c51046958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:8c:6b:9b:b8:6c:3b:e8:d8:69:ce:38:94:
00:c4:d3:38:f0:59:6a:fc:9f:62:c9:ee:d9:9b:53:
b5:3d:a2:4c:9c:60:57:9b:59:c3:81:cc:b3:b5:fe:
9f:32:2a:40:d3:8a:16:f6:27:6c:02:0d:3b:af:32:
71:8a:43:7b:ba:17:f9:a9:4b:e0:93:b6:fd:68:88:
71:ff:b8:fc:a7:ef:05:bb:ea:c4:32:ff:2d:18:1b:
81:a7:e8:cf:6b:84:99:24:45:01:c7:80:66:2f:09:
77:18:8b:e4:c5:33:c0:57:90:34:a8:a4:fa:ae:dc:
a8:cf:0a:92:99:97:4b:88:84:7e:5e:6d:76:13:0b:
d1:0b:cb:38:d9:e8:8e:d0:8c:86:f2:d7:ce:64:be:
a8:a6:42:a9:00:ac:4f:dd:0c:b0:11:c0:e1:0c:0e:
48:4d:98:fe:22:c1:d3:4a:d0:76:c2:94:38:da:3c:
bd:fc:c4:92:33:ea:1a:df:a6:d3:21:8e:31:7b:63:
59:8f:f4:76:f7:bb:83:b6:50:39:22:56:15:f0:1d:
ba:51:31:2e:8b:c3:67:44:04:d9:3f:18:3f:be:c3:
98:73:20:30:ec:0b:65:27:84:c0:71:a0:de:67:71:
dc:10:1f:93:8f:06:e7:21:47:ec:42:85:6d:4f:c8:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:45:C1:4E:EB:04:12:2A:86:41:D8:43:68:89:45:D6:35:4F:1D:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/af0eb897-15ce-3d3e-9560-a5f5ee410612.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:b3:8d:8c:03:15:79:04:8a:bd:c5:49:b6:6b:26:dc:a0:e2:
3b:52:05:53:34:30:94:b4:55:b9:27:d1:d6:c7:8d:29:19:65:
e4:45:19:39:3b:d1:3b:17:fc:f8:51:22:f6:3b:97:2d:a3:3a:
2d:be:8e:4d:2f:39:d6:f5:a0:10:ac:cc:a1:35:ef:35:24:dd:
7e:89:93:3b:94:ee:2a:38:28:89:d5:14:52:d2:8c:85:0b:a5:
29:d8:b8:18:9d:e1:08:fb:53:34:31:5c:87:91:a5:35:82:56:
3f:80:ff:18:7f:9b:81:05:2d:fc:cf:f2:71:3d:53:7b:30:d1:
20:a4:b1:d2:e3:f5:f6:c8:66:5e:fa:39:2d:56:92:ae:4a:d5:
f3:f7:f3:06:58:04:1e:d2:45:b8:79:e4:23:26:48:a4:fd:64:
f0:c4:51:0b:99:6e:c7:da:68:d7:75:09:0e:d7:cf:d9:90:14:
06:ad:7f:23:5f:31:96:da:dc:f8:9e:5f:d1:e4:a5:70:bd:48:
8f:b0:a5:9e:b8:5f:79:06:01:d8:e4:fd:8a:fa:ab:4a:05:6d:
cb:f0:5c:d2:9e:b8:08:f0:2e:ed:f9:a8:23:0d:da:6f:6d:a1:
6a:ac:a8:ea:4f:5d:84:b2:b1:84:57:85:1a:53:b9:bd:12:43:
2d:84:64:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:13 2025 by rpki-client