Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1f87d87-9bc4-30f4-b695-503b278fad8d.roa
File: b1f87d87-9bc4-30f4-b695-503b278fad8d.roa (raw, json)
Hash identifier: KDdB1ruJcySPO212rinjq3WtDvweu/hRUQrtFjwzyH4=
Subject key identifier: 73:02:9E:91:58:8B:10:23:A3:4E:6F:A1:3D:D8:A4:4A:4A:59:35:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCE67C449299BDB433A4B3CD0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1f87d87-9bc4-30f4-b695-503b278fad8d.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 34.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:67:c4:49:29:9b:db:43:3a:4b:3c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=8af2e159-cdbc-4546-aa5a-3197980360d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:d8:b8:e1:4c:b6:0e:0e:3c:b8:68:6b:2e:
f9:31:37:50:fa:97:17:ac:85:36:33:dc:1a:a6:11:
44:2a:c7:32:d5:cb:72:eb:70:06:8c:79:75:0e:44:
47:ea:71:82:26:90:cb:e6:d8:04:d2:18:13:ec:42:
dd:d7:49:1a:48:5e:9e:c9:45:6a:5e:96:07:9f:23:
90:1c:88:da:c0:a9:b6:54:a6:97:f1:64:c7:f9:be:
63:7e:7b:2a:40:e5:3c:8d:5d:45:c1:dc:49:7f:9a:
fd:c9:f7:d7:08:9d:73:4c:bc:1f:08:25:60:05:5a:
a1:4c:b7:af:2e:92:f7:e7:a5:86:bc:58:2d:12:8b:
e7:9a:96:1d:66:22:f4:24:5a:35:3f:44:46:7c:cf:
5a:df:bf:e6:58:6b:35:d1:b2:55:da:97:e3:77:b0:
2a:74:46:57:01:a5:19:42:46:0a:47:19:bb:5b:9b:
74:f1:57:65:ec:d1:b1:c1:71:00:55:df:30:e6:0b:
dc:e4:d2:67:9f:39:b8:b3:74:37:b3:e8:09:0f:a6:
70:45:b6:c4:a0:ea:18:04:c0:4e:76:c7:54:a0:30:
4e:4e:45:12:65:e7:99:7f:91:9e:ec:87:70:f9:fa:
08:c8:a2:88:db:cc:dc:46:d7:e6:69:dc:02:f1:77:
dd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:9E:91:58:8B:10:23:A3:4E:6F:A1:3D:D8:A4:4A:4A:59:35:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b1f87d87-9bc4-30f4-b695-503b278fad8d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
34.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:72:ae:60:55:0b:26:1a:fd:61:55:35:c8:bf:82:7d:1b:f7:
4d:da:52:fb:dc:70:41:a2:02:2f:a1:28:4b:de:c8:63:cc:74:
ac:30:56:13:57:4b:30:eb:8e:30:0c:23:f8:e9:88:6d:27:21:
2a:af:25:e2:d3:ba:cd:29:7b:38:e0:03:19:7e:58:8a:8d:73:
8b:3e:69:ab:67:c2:c8:65:03:26:e7:33:e2:fe:32:88:ed:91:
49:be:24:3c:fc:5b:15:83:78:56:9a:88:ff:8d:9f:0e:81:60:
11:43:e3:6f:d2:db:1d:2e:7e:a2:40:0c:3a:52:6c:bb:38:1e:
b9:ac:47:4b:15:18:ef:69:82:53:13:4f:db:d5:6b:7c:53:49:
e5:8e:68:3f:78:f4:aa:4f:8a:b0:7e:d7:bb:f7:d7:38:cc:c5:
ca:d4:a8:dd:19:3f:78:b3:15:e1:96:c5:58:e0:0e:e3:65:ee:
5d:d9:71:ab:4c:93:f0:80:07:6d:7e:5a:fb:52:42:0a:b5:5f:
28:97:68:7e:3d:b4:bc:67:fd:85:5d:64:f8:45:41:89:2b:1b:
c5:65:1d:67:26:00:d6:f8:30:b2:91:a3:8b:10:20:6a:b1:2c:
da:c4:68:ed:5a:1d:60:bd:c2:9d:d2:a2:57:42:91:57:c8:e1:
b7:88:20:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:32 2025 by rpki-client