Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6af1fa3-bee8-3567-aaea-6460ae07b653.roa
File: c6af1fa3-bee8-3567-aaea-6460ae07b653.roa (raw, json)
Hash identifier: YG06EQFdKFKzukyvdOinSnS6/+346+2b0IJZ4SKv6CU=
Subject key identifier: 4D:F7:3F:16:63:6B:E5:B8:E6:10:05:4D:60:07:C0:2B:C0:DC:8C:DF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B9A5D7D478A568E24305480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6af1fa3-bee8-3567-aaea-6460ae07b653.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.71.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:9a:5d:7d:47:8a:56:8e:24:30:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=15f1870e-58bc-4a82-a107-c3e4ab1249fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:d8:df:d4:80:0c:95:fc:36:84:ea:f6:e8:
d8:94:e2:71:39:08:d8:68:5b:68:ac:b8:0c:bd:10:
f1:71:0b:d9:38:88:9b:1c:5f:17:52:39:e7:50:be:
5d:c2:75:ca:1b:b4:b6:00:2c:db:06:d0:d5:f3:1c:
67:b2:f3:a8:c8:a0:51:a5:e0:45:4d:70:bf:5d:f7:
ec:8c:7e:98:2c:92:ce:9c:b6:f8:f0:1d:4f:48:d4:
29:dc:3c:8a:59:4b:62:32:7c:54:e3:63:60:10:09:
57:36:2f:34:bb:26:0f:d4:1f:3f:5a:7f:8d:f1:02:
7c:c4:25:70:d3:3a:10:18:43:aa:79:62:f1:ed:2c:
aa:11:b2:ea:de:15:d8:0e:e2:6a:36:b5:b9:f3:55:
09:a3:68:d7:70:44:27:a5:3b:07:52:3f:a1:5d:d2:
0c:24:7f:a4:06:9d:ca:d2:c5:eb:5d:4f:fc:0e:32:
96:19:d9:44:dc:31:4d:50:7f:a4:66:c3:ef:a8:c4:
6a:72:6c:31:67:51:1b:2e:2d:c4:7c:92:fa:f1:b1:
8c:20:69:08:19:b0:2f:d4:20:fa:6c:52:cf:a4:61:
b7:b9:ac:f8:a5:05:3f:7d:cc:03:93:cd:d6:c0:8d:
93:63:b8:56:71:00:f0:82:03:42:ef:eb:44:41:ea:
2f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F7:3F:16:63:6B:E5:B8:E6:10:05:4D:60:07:C0:2B:C0:DC:8C:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6af1fa3-bee8-3567-aaea-6460ae07b653.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.64.0/18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:6e:e3:38:ff:32:2d:0f:dc:36:f8:c7:87:77:1c:78:16:fe:
eb:63:f8:54:7b:e5:d6:45:c3:72:cd:87:cc:12:22:38:c7:eb:
96:5c:19:51:49:1b:43:bb:f7:90:a2:7c:bf:56:0b:1a:63:c8:
1b:f9:65:5d:3b:a1:8d:56:5a:e4:30:98:24:5d:ef:1b:a3:5d:
bf:20:99:dc:ed:4b:75:5e:2e:3b:98:df:72:3c:9a:c0:5d:ec:
18:c7:08:2f:a0:ab:e8:d8:64:98:31:e2:fe:c4:f5:09:86:51:
3c:84:ad:f2:4d:1e:2f:f4:7b:72:ac:f2:3a:af:46:a5:39:5b:
7f:91:f6:f8:70:47:b3:53:76:11:9b:21:6e:d7:b4:f0:01:a2:
92:af:fc:ad:f6:a2:1a:9b:f1:e5:40:59:6f:c4:ed:bf:8f:d5:
3c:45:91:32:05:a6:f1:20:8b:bb:04:30:2b:ec:1e:95:30:80:
c6:87:43:c2:51:f3:50:e3:8e:ff:22:74:b6:9c:e4:21:b2:11:
49:92:f4:2f:b9:50:ba:e6:af:94:73:80:19:c4:27:5e:3e:0a:
9c:bf:fa:1b:9a:d7:99:8c:76:10:5d:97:b4:b9:5e:c6:51:da:
2c:36:75:16:5c:d0:7a:1f:8d:26:37:8c:42:9f:f7:71:39:83:
16:1a:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:10:29 2025 by rpki-client