Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c247a92c-01e1-31c2-a748-b7ac976bc0af.roa
File: c247a92c-01e1-31c2-a748-b7ac976bc0af.roa (raw, json)
Hash identifier: GwEEvzmspNe6+Q5cxZ5g2v8NftxCiBFG4yKi3L9I6vc=
Subject key identifier: 33:94:FF:DF:D4:8B:91:0C:76:4C:1D:C4:E1:4E:99:1B:8B:CF:3A:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FCEF522CA06E24CC184956360
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c247a92c-01e1-31c2-a748-b7ac976bc0af.roa
Signing time: Fri 04 Nov 2022 12:00:00 +0000
ROA not before: Fri 04 Nov 2022 12:00:00 +0000
ROA not after: Sat 10 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ce:f5:22:ca:06:e2:4c:c1:84:95:63:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 4 12:00:00 2022 GMT
Not After : Dec 10 05:00:00 2022 GMT
Subject: CN=33342304-0a92-450a-9abb-f871ae3f8bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:57:5f:31:70:64:3f:34:ff:7a:97:aa:8f:d0:
f8:06:b2:d4:d2:d9:64:ad:87:b2:a3:db:6e:b7:bf:
9c:e4:d3:cf:6c:57:a6:68:f3:82:50:6d:aa:4d:89:
4e:0a:60:1b:f7:8a:fd:1b:8c:d2:df:af:82:cf:b8:
9c:0b:a5:5f:e0:2c:12:e2:ba:c7:3d:bb:85:14:3c:
e3:72:73:ba:ce:54:72:e1:b7:3f:fc:11:cf:12:9a:
0b:27:04:11:d9:41:bf:df:84:51:4d:ac:0e:da:36:
e8:22:31:b5:bb:99:9a:67:12:2b:85:1a:fb:69:cc:
9d:fa:5c:44:03:cf:c7:a9:61:f7:fa:36:49:13:97:
b1:23:c7:6e:b8:c6:f4:32:0d:24:4c:db:c9:a6:1e:
44:a9:c1:35:cc:d9:fa:9d:1f:f7:a0:0e:cf:7b:b4:
5c:14:fa:56:03:fb:52:e6:23:ed:5c:26:46:c4:f7:
68:5e:d8:53:48:9e:18:40:2b:07:93:73:7a:bf:15:
0f:5a:f7:a1:1b:70:9d:be:2a:fb:48:32:35:6d:05:
2d:e5:13:1e:20:dc:5d:34:ee:74:e5:23:e0:21:c3:
15:43:4f:73:ff:be:64:10:e5:14:c2:c4:d9:e9:ea:
fc:fd:5f:2d:fd:dc:93:9f:06:5b:98:51:48:ec:69:
67:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:94:FF:DF:D4:8B:91:0C:76:4C:1D:C4:E1:4E:99:1B:8B:CF:3A:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c247a92c-01e1-31c2-a748-b7ac976bc0af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:f1:f5:8c:db:04:93:76:40:e2:e9:63:e0:0c:80:ca:b0:44:
5a:96:87:34:ff:ad:04:31:54:d6:73:f4:77:89:d9:e8:20:fb:
25:46:d5:a2:0c:e6:a6:4c:f3:b3:cf:11:19:c5:e3:44:25:25:
16:11:cc:05:a1:d0:2d:4a:57:7c:56:95:d9:a8:33:87:0c:81:
c1:be:59:4b:43:aa:f2:c3:48:59:aa:1f:bc:c2:61:d8:20:d1:
b4:48:f3:11:59:37:fc:64:19:d5:7f:2d:a5:7e:06:77:be:21:
79:b3:b9:ee:87:bd:b1:a5:08:ed:d3:cb:76:f7:ce:36:be:4a:
4a:63:57:72:fb:46:68:63:59:be:e2:ba:3a:d1:14:4f:49:99:
2c:94:48:91:a7:36:0c:1e:52:53:ae:c3:61:ee:77:a0:94:ea:
c2:8e:4b:bb:b9:fb:f0:86:7c:7c:67:2c:de:75:8c:4f:a9:e6:
09:52:9a:65:9a:2d:dd:c4:39:e8:2a:4f:0f:9f:30:cb:7c:32:
a3:b7:4f:23:60:d6:7b:8d:bb:08:f0:8f:61:34:65:9b:10:d2:
05:98:a1:b0:c4:ec:13:6a:e3:e7:86:df:bf:2d:75:79:43:34:
6a:be:71:78:23:af:6b:9e:a3:ef:be:60:45:06:f6:ed:e6:17:
69:da:06:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:45:19 2025 by rpki-client