Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1f01b44-c66d-3743-bae9-f1c8b807c27e.roa
File: d1f01b44-c66d-3743-bae9-f1c8b807c27e.roa (raw, json)
Hash identifier: I/wSRNeTa76GWbxNJaoGCJ/zQMbqcB2k/DoMMB+C9ao=
Subject key identifier: 37:D8:A4:94:F7:67:BF:1D:77:AE:7E:46:23:10:7C:86:1B:07:A3:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9643B8937E8645985ED8CC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1f01b44-c66d-3743-bae9-f1c8b807c27e.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 35.112.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:43:b8:93:7e:86:45:98:5e:d8:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=bec23210-ece2-46d1-8aac-d8a479525478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:de:4e:90:e4:0b:23:77:68:4d:2d:00:01:
cc:9f:e3:d7:49:6f:47:87:a2:a1:32:e9:5c:4e:44:
ce:02:30:cd:6a:1a:31:90:6e:00:d8:10:94:ef:67:
fa:3a:12:11:ef:84:d8:77:ba:57:56:b0:ce:5e:bc:
9a:1b:49:77:26:d0:1a:39:f0:e8:ac:97:4a:35:86:
6e:73:7a:4f:61:c7:64:1a:d9:eb:f6:31:95:49:6f:
bf:3b:65:76:77:bb:f3:0d:50:41:79:3d:cc:6e:4f:
c2:c1:10:0f:5e:a0:23:d7:82:aa:fa:bf:ad:cc:ee:
39:cc:48:64:af:5b:4b:b1:a6:1e:de:fd:92:58:ab:
63:f1:1c:7a:a4:25:d2:80:ab:cc:dd:5c:58:49:2d:
bf:17:d8:eb:e9:ba:cf:7a:f5:fb:98:50:01:63:82:
32:1e:63:e4:64:ce:d5:ff:99:3f:86:9f:9f:3f:2a:
7a:d0:13:5d:d4:d4:f1:ad:43:dd:aa:40:66:43:e6:
0c:41:b4:01:88:68:3d:d5:a4:9e:63:10:75:14:44:
32:6a:32:91:d6:9a:9d:db:56:0d:bf:6d:34:4a:1b:
1b:aa:c8:da:c7:7a:5a:fb:94:41:fe:d6:1e:db:21:
c5:73:2a:55:81:2d:ec:97:b8:ea:e4:f2:50:a0:2c:
53:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D8:A4:94:F7:67:BF:1D:77:AE:7E:46:23:10:7C:86:1B:07:A3:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d1f01b44-c66d-3743-bae9-f1c8b807c27e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.112.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:de:94:cc:af:7a:f9:85:40:29:5e:bf:0c:da:11:61:ff:5f:
c7:f1:2c:69:4a:d2:4a:83:0b:3c:a4:5c:6a:21:42:2b:ac:f0:
f9:ad:37:9b:98:3c:23:84:88:4e:cc:f3:12:79:7b:1e:63:e6:
14:3c:a4:d8:99:e1:3c:08:fe:f4:ef:6e:8b:a3:0b:e2:f6:e1:
ca:62:2d:94:3e:2c:7e:53:b4:7b:6f:a2:33:07:33:fd:1b:bb:
b4:af:76:aa:8d:6b:58:7c:48:a2:2e:8b:fc:5f:c2:d5:f3:b2:
0d:f8:f2:01:45:05:07:7f:8a:79:a9:54:37:b3:6b:b6:9b:78:
cf:45:ae:aa:7d:1e:4a:9e:c3:da:8e:3b:83:47:0a:0b:bc:98:
45:84:10:b2:bc:d2:5f:b7:fb:47:d4:4d:49:6e:79:a1:7d:f6:
57:96:f3:2b:d8:dd:a0:a3:40:59:5d:20:81:98:ca:61:d8:49:
b6:52:91:9e:3f:75:0e:59:f1:c8:dc:86:9a:ce:17:e5:21:62:
ca:c3:c1:16:f0:48:c2:ab:14:17:f6:88:fc:55:d8:1d:4a:ab:
d5:61:69:70:36:87:a1:64:cd:1e:07:7b:f3:d4:5b:47:48:22:
56:7b:c3:2d:47:c8:5c:5f:74:c7:3a:75:19:7e:ef:35:d9:a3:
c3:cd:0c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:28 2025 by rpki-client