Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc4162b4-6ee5-3d65-9ea6-d21ef72376de.roa
File: dc4162b4-6ee5-3d65-9ea6-d21ef72376de.roa (raw, json)
Hash identifier: ANnDbrKhj5Au/29tQBR+DSDWy/2oJK76bUTKskBmY74=
Subject key identifier: 9D:E8:CD:D5:6E:5B:D5:A1:1E:93:52:AA:4E:23:21:96:26:B1:E5:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9643D20814F82989D283A280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc4162b4-6ee5-3d65-9ea6-d21ef72376de.roa
Signing time: Fri 14 Jan 2022 05:00:00 +0000
ROA not before: Fri 14 Jan 2022 05:00:00 +0000
ROA not after: Fri 18 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:96:43:d2:08:14:f8:29:89:d2:83:a2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 14 05:00:00 2022 GMT
Not After : Feb 18 05:00:00 2022 GMT
Subject: CN=bd0471f3-f5f4-4899-8da7-dc6238dc0133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ce:3f:5b:6f:3d:02:7a:7b:f5:45:97:79:cc:
1a:07:29:0a:6f:53:38:79:e6:09:36:be:4e:23:81:
c9:9c:8b:c8:11:51:26:34:2b:dc:80:2b:1a:47:16:
0d:92:83:7c:2d:f9:03:7a:ff:33:b9:03:d4:8a:19:
50:38:e4:25:e3:0b:7a:4a:a4:5f:15:7a:e6:1a:b1:
39:ed:0b:a8:3b:14:ca:6f:c7:21:02:fe:bd:a7:a2:
ea:99:ff:e0:3a:e8:d6:a1:34:bb:fe:61:c6:94:a5:
cb:30:56:b9:e8:10:64:61:18:87:09:18:67:2b:5b:
7f:f8:d6:13:4a:84:40:21:71:5f:9b:68:80:9d:18:
bb:7a:21:70:72:9f:4e:ff:5d:f1:50:13:b7:52:64:
b2:1b:2a:1e:c7:6d:be:85:a0:0a:de:7b:65:a2:2f:
d2:61:ab:a5:33:59:e7:a4:60:44:3c:4b:99:78:66:
2a:ab:61:b9:d8:f1:26:25:c1:a5:2b:7e:9c:e1:c1:
21:55:12:d2:6d:40:75:dd:15:11:d7:84:22:82:ad:
71:68:13:44:7c:47:26:68:8a:38:84:cb:67:77:c0:
d7:7e:c0:c3:a1:ad:47:86:ff:53:53:8d:d7:c6:f1:
17:aa:75:2e:bd:08:21:dc:13:ec:34:b3:30:87:87:
25:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:E8:CD:D5:6E:5B:D5:A1:1E:93:52:AA:4E:23:21:96:26:B1:E5:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dc4162b4-6ee5-3d65-9ea6-d21ef72376de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:c0:eb:96:19:84:74:fd:e7:36:f6:59:14:6c:13:7a:5d:0f:
90:2e:e9:b6:2b:b6:32:3e:0c:17:81:eb:46:05:32:fe:1a:75:
08:9e:39:2c:44:3d:24:21:bf:b1:4d:e8:c8:cd:3c:5f:a8:f0:
46:68:65:5a:57:3e:21:d3:0f:8b:30:3f:67:1f:6b:d5:4e:e1:
3d:c8:10:87:28:fb:7e:51:72:36:d8:3a:dd:8d:27:3a:62:d0:
2b:ed:ba:aa:0a:72:b8:c6:8a:10:ae:89:e5:20:b6:a5:b1:20:
36:83:10:15:bf:df:5e:6b:03:b4:d9:f3:7b:2a:93:1f:d8:1f:
99:2e:ae:a9:8b:f3:4e:8a:f6:4d:bd:a5:69:f6:89:7b:a7:98:
e0:a7:86:58:10:35:d7:6d:dc:b0:21:60:ef:a2:e0:29:00:dc:
4e:8c:0a:fb:c0:2c:88:b8:e6:f6:f4:93:30:63:e7:76:71:fa:
80:62:7e:9b:11:da:77:d9:33:6a:58:77:9b:35:24:ae:f0:d8:
8a:6b:1b:89:6f:71:d8:c8:cc:f2:90:8f:5a:50:aa:fc:5f:27:
65:c4:f5:66:e7:64:ef:68:c9:51:32:7b:98:d0:2b:4d:30:48:
f8:b6:72:f1:aa:d6:c9:ab:b3:c8:69:0d:af:4e:99:f4:df:c4:
6b:11:8e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:16 2025 by rpki-client