Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bcd27b72-09ad-3171-a627-f23b3404cf38.roa
File: bcd27b72-09ad-3171-a627-f23b3404cf38.roa (raw, json)
Hash identifier: 3cxSCWX40EeGWpjeSWvPDd6a95Aub04k7sUSlyA3PCA=
Subject key identifier: AD:F6:BB:B3:F3:89:F0:C0:96:9A:6D:17:13:85:15:74:74:83:C8:3C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E483B4D3A6F5B0D1F4ED4D340
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bcd27b72-09ad-3171-a627-f23b3404cf38.roa
Signing time: Fri 17 Jun 2022 12:00:00 +0000
ROA not before: Fri 17 Jun 2022 12:00:00 +0000
ROA not after: Sat 23 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:48:3b:4d:3a:6f:5b:0d:1f:4e:d4:d3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 17 12:00:00 2022 GMT
Not After : Jul 23 04:00:00 2022 GMT
Subject: CN=a999ac66-c1dd-4fac-96bf-9c698a864e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bd:bd:f1:50:2c:24:54:aa:74:00:c9:63:65:
54:78:d2:f2:54:bb:d2:78:9b:45:cb:be:54:c9:6d:
27:e5:22:75:0d:ff:7d:7e:c3:bb:84:af:5d:74:44:
0d:87:d8:07:75:6a:95:2a:c1:5c:59:2c:dc:a7:af:
77:7c:f0:08:f4:59:9c:aa:fb:02:9d:05:48:b3:c6:
a5:ba:14:f2:85:1c:24:54:c9:1c:dc:8d:80:d6:94:
09:b6:8d:a2:8c:0e:35:09:c9:69:3d:7b:a8:4c:ca:
73:36:da:23:4e:eb:b3:57:4c:4b:cc:16:72:bb:25:
35:0f:2e:f5:12:66:fb:e9:3e:b6:24:33:68:d6:0a:
d1:e8:07:63:39:65:1b:34:4f:53:47:e0:80:62:e9:
f0:6f:cb:29:f5:28:fa:1c:c0:eb:bc:8f:b4:e5:90:
fa:a2:45:40:c7:83:5e:c8:d0:50:e3:e4:ce:27:29:
a3:8a:76:ad:77:3a:b3:9f:a3:1f:5a:96:32:74:8d:
c5:4f:7b:98:bc:26:44:9e:c3:09:f1:03:6a:21:ce:
ce:b8:41:53:65:07:b5:d4:99:67:05:1d:93:41:d1:
90:36:69:9f:a9:bf:23:00:91:db:99:1d:1c:12:bf:
c2:6d:10:3d:ef:66:f4:8f:bd:27:3d:c7:92:82:5f:
46:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F6:BB:B3:F3:89:F0:C0:96:9A:6D:17:13:85:15:74:74:83:C8:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bcd27b72-09ad-3171-a627-f23b3404cf38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:ca:ef:55:6a:7f:5b:5d:5a:b7:65:ec:db:b2:96:df:50:05:
bf:f3:fc:04:cf:f8:ce:12:81:e4:39:9c:57:05:ab:17:a5:81:
0d:cd:53:73:47:10:33:8b:32:ed:8a:68:2b:0e:da:eb:db:32:
1f:a5:a7:85:11:10:33:c9:3b:7b:55:5b:de:a4:69:60:f1:19:
e6:10:1b:85:30:2d:74:bc:d7:87:16:02:e3:01:7c:da:2b:45:
54:be:d9:d3:ff:ff:ee:38:8e:d9:90:31:52:43:8c:d3:83:a2:
6f:0b:79:bd:0a:f3:cc:c4:57:48:de:41:fd:51:21:f1:c5:64:
5f:6c:66:1e:c1:a2:59:bc:60:b5:f0:00:f5:f9:bf:36:1f:65:
83:09:5c:48:84:6e:b9:8e:ce:bb:84:35:91:80:93:39:97:35:
63:54:7c:92:4d:3f:44:1c:6f:bd:05:bd:b0:c2:0f:b0:a0:42:
24:db:85:cb:ba:ed:5f:13:16:45:a8:a6:c2:17:92:af:79:7c:
02:80:9f:54:6e:5f:15:2b:0f:1b:bf:6e:4c:f7:1b:37:16:64:
20:54:c9:42:e8:38:fd:80:4a:47:04:4c:2c:b2:00:cd:1c:b0:
42:07:8c:2b:de:31:05:ff:bb:6b:e9:de:43:9b:31:84:dd:e9:
c0:12:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:42:55 2025 by rpki-client