Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd313c2c-4a2f-3363-80cb-fd403af3cb59.roa
File: bd313c2c-4a2f-3363-80cb-fd403af3cb59.roa (raw, json)
Hash identifier: 1KkldBdXltCcMaWHpXhwtA/+CGge9CTKu+jSc3ecrJw=
Subject key identifier: 32:D2:97:F5:75:24:DD:EC:F0:C8:73:FA:6B:B4:29:44:01:7E:1D:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCEAA9205DE79F96BB979A300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd313c2c-4a2f-3363-80cb-fd403af3cb59.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:aa:92:05:de:79:f9:6b:b9:79:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=d35a4b15-3717-4cf6-acb2-5079eae692ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:d5:d3:f5:7f:bf:99:38:2b:b2:90:97:68:
ee:f2:e3:c7:fb:f7:0e:82:84:08:e9:1a:c8:b4:6b:
67:2d:79:fb:19:d0:fa:da:8f:35:79:0e:d9:f5:dd:
34:69:d7:21:4e:f1:0d:eb:41:5b:f7:6d:18:8c:f8:
b3:da:e1:67:44:16:31:e7:d7:e5:d1:b6:3b:2c:a3:
8e:91:e2:1a:e1:a9:13:bd:ee:18:39:d0:d1:bf:d7:
a7:40:44:a9:da:2a:45:49:d9:31:c1:41:ee:62:ce:
56:21:a8:69:16:f0:87:4a:05:60:9e:be:b2:b8:35:
e5:b4:06:34:dd:9f:f0:b7:6a:6f:f5:1d:a7:b3:ec:
76:48:5d:8d:27:43:6d:e9:45:a0:df:39:0a:cb:d8:
2d:e8:c6:7a:c0:09:b4:c4:e4:88:38:e2:68:f3:44:
00:29:ab:3b:9a:73:4d:9c:89:63:cf:31:39:6b:00:
ec:0e:de:c2:67:e1:53:93:1e:61:dc:9b:d9:3a:02:
6a:67:52:c0:55:92:97:05:4b:8d:4b:40:9b:03:3b:
04:71:af:97:79:ad:53:be:77:c2:5a:d4:bf:96:f0:
bd:92:b9:68:45:b5:69:2f:2b:30:c1:23:1f:38:f0:
d5:97:1f:ae:4a:47:21:11:eb:7e:a3:51:c6:42:c9:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D2:97:F5:75:24:DD:EC:F0:C8:73:FA:6B:B4:29:44:01:7E:1D:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd313c2c-4a2f-3363-80cb-fd403af3cb59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:c6:98:29:b7:66:b9:f1:72:b8:57:f7:0e:a2:0a:8f:2c:36:
90:e9:c7:07:ab:b7:87:65:35:af:e5:0c:84:55:a4:94:7f:68:
56:fe:50:5c:4b:b2:f7:13:c0:c2:19:07:1e:0a:b8:74:5c:73:
88:ad:ec:c0:b5:9e:b9:7a:89:9f:7f:91:8d:f2:fd:7b:da:7b:
e3:d6:4e:fd:f3:86:ce:d1:e0:47:21:a8:0f:d9:d9:44:99:c1:
dc:3f:7a:18:3b:08:56:5e:4b:71:f9:6e:23:12:59:60:98:eb:
e0:74:25:7d:8d:2b:d6:be:1a:85:ee:58:e5:04:3f:13:ab:e6:
76:a7:e9:fc:ff:4d:64:5c:87:90:3b:c7:2b:61:e2:b1:10:10:
9a:bb:2c:12:0c:fb:31:d1:00:58:a2:69:eb:a1:c2:4d:a6:7a:
19:22:0f:b0:74:ff:7e:35:3b:85:f1:41:6b:60:48:c0:05:54:
c5:00:30:48:e4:44:50:cb:f4:59:9b:66:5c:8c:69:eb:09:a3:
48:80:61:e8:95:d4:b9:3c:56:6c:b1:bc:11:d0:f8:7e:52:52:
bb:02:12:11:c1:4a:71:1f:22:93:e8:5d:cb:bf:21:b9:98:18:
24:d4:8b:02:9b:1e:2a:5d:d3:f7:72:3f:aa:75:40:78:5c:f6:
57:55:fe:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:08 2025 by rpki-client