Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d89c84fa-4550-3271-9ca6-52f6d122c399.roa
File: d89c84fa-4550-3271-9ca6-52f6d122c399.roa (raw, json)
Hash identifier: zDS6S6+OkSj0VuX3XcFVleuEyHfkpI/Aljl3wzFTsw4=
Subject key identifier: 38:27:1C:3E:13:1F:3A:AD:C0:C8:B4:3B:2C:0A:0A:E1:3D:20:BC:26
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C6F2E2C0B3F234B20F5843100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d89c84fa-4550-3271-9ca6-52f6d122c399.roa
Signing time: Fri 31 Dec 2021 05:00:00 +0000
ROA not before: Fri 31 Dec 2021 05:00:00 +0000
ROA not after: Fri 04 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 35.160.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:6f:2e:2c:0b:3f:23:4b:20:f5:84:31:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 31 05:00:00 2021 GMT
Not After : Feb 4 05:00:00 2022 GMT
Subject: CN=dfd56ac7-1a09-4785-aeda-1bfb9f632dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:33:68:a9:63:29:55:50:3c:23:67:d9:1d:e1:
21:ca:13:6a:b9:85:8a:d3:48:09:2c:c1:c8:e4:4d:
e5:33:2b:15:25:bd:00:50:fc:15:5b:9f:51:8c:30:
ba:0d:a5:11:f9:3e:0f:5d:6b:33:2c:e9:ea:b7:12:
bc:0f:6d:82:1b:4f:d3:30:ef:01:9c:af:87:1e:b3:
f4:60:fb:55:b7:b8:5a:ca:02:36:41:ee:df:da:5f:
dd:39:90:fe:88:bd:63:54:a7:aa:ab:c1:e7:3a:73:
e4:48:42:6c:d7:82:b1:c4:8a:2b:3b:d0:ca:7a:de:
0c:cd:50:69:d4:65:ad:5b:2b:67:73:a0:f9:34:af:
fa:65:f6:cc:3c:34:28:94:c0:6f:55:03:96:d8:35:
5c:cb:3d:e7:77:48:5c:47:d8:33:b4:17:f0:56:6c:
24:85:a9:44:02:91:30:70:8e:35:6a:d3:68:cb:41:
37:6f:54:cc:b2:c2:7e:1a:60:40:4b:5b:16:52:02:
59:ef:f5:af:f7:d8:b7:38:14:b6:94:04:88:d3:90:
ce:0b:f5:d3:07:d9:1b:5d:e9:4d:45:83:fc:10:fc:
b0:10:91:5d:47:b8:82:78:c4:0a:d0:7c:9b:ee:32:
02:ef:83:ff:0b:ad:d3:75:b4:b7:09:99:e3:92:86:
15:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:27:1C:3E:13:1F:3A:AD:C0:C8:B4:3B:2C:0A:0A:E1:3D:20:BC:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d89c84fa-4550-3271-9ca6-52f6d122c399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.160.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:2b:fa:38:00:05:3d:93:6a:97:ca:82:c2:8d:75:92:f2:f1:
f9:61:e7:7e:30:c1:95:52:38:b7:51:80:4a:b7:4e:56:6e:cf:
89:ab:cb:4d:57:71:ce:da:6b:99:0f:de:3c:6b:79:79:ea:ab:
c9:67:04:1b:5d:5b:d7:58:63:3a:96:3d:eb:57:bf:c0:fd:ab:
b3:34:c7:93:4b:f3:1d:85:13:ae:5d:d3:af:4c:d0:16:66:ba:
12:b4:2a:f6:30:20:e5:dc:4e:c7:90:03:9e:df:cc:58:d3:89:
58:49:ce:7f:b3:e0:50:08:16:ed:e1:a1:d6:ff:af:cb:e1:51:
e0:29:aa:72:30:80:56:91:3c:d4:ec:d5:a6:91:be:02:c1:65:
41:c6:61:5c:31:fc:9b:c3:47:94:21:f7:8f:93:79:7a:19:3e:
5b:8c:6f:44:12:3d:c1:6f:59:f5:e0:c6:0d:34:11:30:42:e6:
c0:45:2a:b9:ca:98:a3:dc:c5:60:1f:f7:a5:46:86:4d:62:3d:
e0:7e:da:47:8a:f6:36:67:65:65:e9:07:f3:4f:c6:0d:56:93:
4e:02:c2:a6:b5:ba:05:de:50:d2:72:aa:bf:f4:b5:a6:dc:11:
2a:26:a2:2a:02:1c:1a:b1:48:b2:0a:54:22:41:72:b1:ef:2a:
74:e7:80:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:35:46 2025 by rpki-client