Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b34b1a79-621d-3fca-aca0-f8d3a22c75c6.roa
File: b34b1a79-621d-3fca-aca0-f8d3a22c75c6.roa (raw, json)
Hash identifier: HL7mdstQ5UdT94lG3R/C7FYnHgLLvpRV3zhtXCQh+PQ=
Subject key identifier: 9A:97:98:C0:E2:59:55:9F:F7:0E:87:79:7F:A1:E1:0D:4C:18:C4:F9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EBD7BC42B1ABBCF181E327500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b34b1a79-621d-3fca-aca0-f8d3a22c75c6.roa
Signing time: Fri 29 Jul 2022 12:00:00 +0000
ROA not before: Fri 29 Jul 2022 12:00:00 +0000
ROA not after: Sat 03 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.71.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:bd:7b:c4:2b:1a:bb:cf:18:1e:32:75:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 29 12:00:00 2022 GMT
Not After : Sep 3 04:00:00 2022 GMT
Subject: CN=bdf22d66-6c0a-4981-9e81-ef6b9203789e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:98:23:0c:9b:72:8a:8e:20:75:87:0f:cd:f9:
3a:b8:08:e7:38:86:6e:1f:89:d8:e4:3a:0c:f9:47:
ec:ac:ad:4e:f3:fd:ec:83:6e:84:6e:d5:c1:64:eb:
1e:35:38:0a:63:7c:63:1d:8b:41:e9:d4:dc:dc:36:
1e:6a:2a:40:23:96:5a:f3:ca:e8:32:22:ae:89:42:
89:2d:ae:21:35:31:37:75:4c:cb:cb:ac:07:1d:3f:
1d:0f:a4:6c:67:97:6d:12:d9:3e:7f:a8:11:5f:50:
2e:e8:65:6f:5c:a1:52:62:62:fb:cd:a2:86:17:e3:
b1:e7:3a:a7:47:90:49:9f:f0:bd:d1:11:14:c4:8a:
48:7e:a7:c7:41:cc:55:5b:d5:24:d9:e2:96:0c:97:
00:d9:90:cf:1c:02:3c:67:32:f4:0c:d4:06:cb:cd:
a4:fe:91:c4:68:4f:05:86:69:e1:79:97:58:65:60:
a9:fd:64:f3:8b:36:60:9e:96:a3:3e:65:b2:fd:ce:
23:61:6e:16:00:57:73:fc:e2:3f:63:6a:d0:2a:29:
7f:ae:86:18:05:07:22:5b:e8:08:71:e9:a4:97:ff:
e5:a7:35:2d:5d:f3:9b:bf:d5:bf:39:75:65:cb:6f:
c9:b5:86:f7:c4:5e:92:b5:99:5a:c7:72:1b:74:cb:
40:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:97:98:C0:E2:59:55:9F:F7:0E:87:79:7F:A1:E1:0D:4C:18:C4:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b34b1a79-621d-3fca-aca0-f8d3a22c75c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:53:17:ca:c2:54:c0:4c:b9:56:89:1e:f0:1c:42:56:0c:37:
c7:82:b8:90:7f:57:0b:d7:d6:1f:1a:80:6b:e5:3c:55:01:d7:
ef:ea:eb:81:df:1d:bd:87:4b:c6:c3:bd:b2:2b:ae:a2:3b:e7:
5b:e3:b0:4a:65:16:71:7a:87:1e:8f:16:93:9e:2b:91:a5:bb:
b2:de:2b:53:a9:c5:49:59:26:31:bb:b8:d4:b9:cc:a6:97:c6:
26:8b:2c:be:a0:e6:35:82:e8:ac:46:75:53:36:cc:66:9a:01:
34:1e:30:13:5f:72:2b:df:cc:8a:e3:98:2e:03:58:39:a5:83:
0a:3c:a9:02:99:02:89:24:ec:38:bd:0a:e1:42:62:5c:e7:49:
ae:3d:e7:da:73:22:cb:1a:bb:1e:28:1a:3b:a0:ed:09:42:1c:
75:2c:fb:1e:ae:d5:2d:72:cd:62:f8:62:44:d8:8c:14:ac:e1:
0b:87:9a:a9:26:14:66:21:a1:7d:db:0c:4a:e3:3d:8b:a9:1e:
36:e2:f4:71:a6:24:44:2e:e0:4e:03:d2:c3:88:ed:43:d9:7f:
14:47:66:b0:13:de:d2:0b:43:1d:f7:d5:95:6b:5b:49:07:5c:
57:54:6a:6f:7d:ce:0a:96:14:32:02:03:8f:ce:da:e0:36:14:
0d:2a:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:39:30 2025 by rpki-client