Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9465f66-a153-3722-b60b-8ed2c65ca2ff.roa
File: b9465f66-a153-3722-b60b-8ed2c65ca2ff.roa (raw, json)
Hash identifier: jl8rIS6ces/zcgTL6yUQE/w17PVtXP9MYB7971QcD6k=
Subject key identifier: 3B:A1:B8:84:26:3E:39:33:5A:11:B6:E8:E4:33:85:E8:8A:B7:4B:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DD2CDD13B54C44796C1933F20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9465f66-a153-3722-b60b-8ed2c65ca2ff.roa
Signing time: Fri 06 May 2022 12:00:00 +0000
ROA not before: Fri 06 May 2022 12:00:00 +0000
ROA not after: Sat 11 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:d2:cd:d1:3b:54:c4:47:96:c1:93:3f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 6 12:00:00 2022 GMT
Not After : Jun 11 04:00:00 2022 GMT
Subject: CN=3da60051-8ac9-4a6b-b854-1c5b0491b654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:10:8c:00:b6:58:b0:ed:2a:9a:b9:26:9a:4e:
c4:44:4b:fb:1d:46:87:29:9d:9c:dd:56:d9:39:36:
8a:f5:98:2a:43:15:27:b6:34:b1:68:26:d2:57:b0:
bd:c4:1b:8d:c8:ae:7b:0c:76:36:a5:3e:ed:b2:a7:
f0:49:b4:56:bb:ea:6c:3b:5d:fd:b7:99:41:93:ec:
65:6e:ae:73:b0:1f:8d:9d:c7:c9:44:d2:d6:9a:4b:
18:32:d3:b1:34:0a:6f:c6:7f:59:3b:b6:05:cf:d5:
d4:54:90:83:69:fb:99:6a:21:2b:b9:d2:1e:86:04:
29:04:c5:0d:39:e6:87:34:4d:91:30:2a:a0:f5:16:
1e:2d:97:f9:9c:14:89:cb:9b:3e:11:7b:4e:cb:69:
bb:61:88:54:65:7a:8e:e9:41:f9:8e:06:21:a0:d2:
22:5d:22:66:7d:82:b3:52:f2:05:66:50:2c:3b:31:
4f:0b:c7:e6:ba:6e:e8:07:aa:7e:0a:63:ab:b9:87:
45:59:c0:a2:3d:90:eb:ad:ca:43:d3:22:0b:75:cb:
3e:16:94:5f:b8:7f:10:0c:81:75:de:64:02:23:cf:
78:64:06:00:58:4d:09:25:6e:08:6d:52:e2:8e:f1:
02:ea:95:37:ee:4d:60:b5:95:c4:e2:d0:fe:f1:a3:
c6:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A1:B8:84:26:3E:39:33:5A:11:B6:E8:E4:33:85:E8:8A:B7:4B:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b9465f66-a153-3722-b60b-8ed2c65ca2ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e3:a6:47:23:2d:0c:b5:eb:2a:a2:3b:e4:61:d2:76:01:8c:
1e:d2:01:16:26:cb:02:69:a2:2c:86:75:d0:87:02:14:89:e1:
93:9c:ec:30:e8:10:28:e2:77:3f:09:a3:ea:d3:ad:61:d3:ec:
e7:9e:e1:08:ee:c9:f0:ab:ad:28:51:b3:e2:7f:97:9b:ea:3f:
4d:a7:63:f6:bc:21:6a:8d:c2:41:ba:87:89:11:72:a0:00:62:
eb:09:c0:d3:85:ec:03:c5:06:6e:eb:91:78:79:d5:1a:97:34:
1d:ab:46:20:ec:d8:3b:81:cf:24:5b:42:80:d8:23:6f:ce:3f:
4a:ca:a5:ea:76:d5:11:4e:db:8f:32:ce:92:4f:85:61:e9:32:
ca:4c:4d:3c:86:c9:71:78:20:95:0e:09:b7:ed:dc:4a:e9:cf:
fc:ce:7b:e9:eb:87:a1:e3:12:79:e5:da:50:de:5f:b8:1a:0e:
88:05:0b:4e:fd:7b:db:3d:3d:83:e0:50:cd:11:7c:b8:e9:53:
bf:bf:c0:f0:97:2b:97:6b:79:e7:3c:b9:77:77:35:78:b3:0b:
21:2d:38:20:7d:08:62:c6:1e:47:36:f0:81:7a:3b:9e:75:13:
0e:57:6d:f7:a5:3d:cf:ec:39:12:b8:75:b3:cb:ce:6f:4b:a4:
6f:d5:15:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:20:12 2025 by rpki-client