Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c74f9a52-0ace-3712-8934-0399fc7c5524.roa
File: c74f9a52-0ace-3712-8934-0399fc7c5524.roa (raw, json)
Hash identifier: gBtfeWruPjyv5wn/yTTR87LstsKRakbHHLhsREtt8cc=
Subject key identifier: 3E:C8:47:23:62:C7:CC:42:85:C4:AB:54:33:01:46:8D:84:E6:66:AB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F32DA4181BA665CE1C1AFFF00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c74f9a52-0ace-3712-8934-0399fc7c5524.roa
Signing time: Fri 09 Sep 2022 12:00:00 +0000
ROA not before: Fri 09 Sep 2022 12:00:00 +0000
ROA not after: Sat 15 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 35.80.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:32:da:41:81:ba:66:5c:e1:c1:af:ff:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 9 12:00:00 2022 GMT
Not After : Oct 15 04:00:00 2022 GMT
Subject: CN=389a48a6-e9f3-4515-8d1a-01ae844a3500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:be:1a:db:60:db:de:db:fc:a0:c8:ae:93:
fc:db:80:8b:ce:b5:5c:c6:c1:75:a5:ff:a9:b0:f9:
1b:15:71:5b:5f:b8:30:fd:64:9c:49:b5:b6:6e:6c:
48:fc:85:97:d6:7c:8a:5b:fc:4b:22:81:ce:01:8a:
14:a4:a9:5a:83:56:57:25:74:c6:77:88:88:0f:0c:
21:e0:d9:cd:5a:de:64:69:65:16:c1:4c:fd:e8:bf:
b1:e4:8b:ff:1c:04:e8:71:83:64:53:62:65:60:27:
03:df:ed:46:fd:8d:d3:76:e8:ca:47:4f:1b:87:70:
d5:6c:e8:05:f8:1b:f7:76:3f:fd:ae:13:08:b0:bc:
50:aa:45:59:df:f3:4e:c5:bd:95:90:f5:7c:c2:d9:
5f:7a:1a:ef:37:32:06:26:5e:8b:40:f5:bf:db:3f:
5f:25:00:81:3d:b5:b4:45:1e:10:1d:bb:f2:0a:56:
8c:c3:8f:4b:b8:f0:ff:7b:93:7a:ab:13:13:25:f0:
78:f4:e2:12:6d:db:48:59:be:24:4e:fc:73:0c:11:
ef:34:2a:f9:67:97:04:99:38:b5:5c:80:92:04:48:
92:b8:99:06:72:65:f8:a4:2a:62:82:16:cf:0d:08:
ea:76:4b:85:3e:64:eb:41:df:cf:07:3a:c3:4a:e1:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C8:47:23:62:C7:CC:42:85:C4:AB:54:33:01:46:8D:84:E6:66:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c74f9a52-0ace-3712-8934-0399fc7c5524.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.80.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:96:3d:2e:71:00:f4:93:af:f3:3d:de:72:23:5c:da:50:50:
66:64:dd:91:30:9d:15:e8:c6:96:15:b4:eb:b2:7a:7a:a7:a2:
7f:e8:bd:7e:61:65:d3:90:b4:d6:3d:1e:d8:d6:c4:93:26:dc:
3f:70:a0:be:d8:ca:ff:70:de:46:49:ca:ba:55:cb:b5:fd:95:
33:9d:66:1a:cb:4e:06:0b:26:44:c5:46:65:ef:0a:b6:72:95:
e1:46:b3:2c:6a:b5:98:ad:46:5f:81:ff:5b:54:8e:cc:db:11:
8f:db:be:06:62:49:8f:cc:f9:23:8c:88:48:00:fd:18:ee:6e:
e0:64:50:0e:f8:8f:28:d5:a4:04:6a:17:24:8c:c1:46:67:26:
be:bb:31:6b:54:2f:70:b4:75:35:0f:38:52:7d:89:b2:22:cf:
dc:f5:32:57:40:e0:28:2e:b8:57:26:a1:32:5a:18:73:ab:09:
ab:a8:d9:43:4c:35:69:75:8c:88:a9:98:f2:26:9f:8e:eb:08:
ab:b3:2d:52:89:e4:a1:b9:24:3a:7a:f2:62:2b:36:3a:66:56:
da:71:47:0d:65:c3:92:16:3a:f6:97:c4:28:4b:fc:d2:e5:0e:
72:73:78:6a:bb:7c:0f:c6:9d:fc:31:37:c5:f9:0e:61:fb:ca:
eb:e3:10:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:36:01 2025 by rpki-client