Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e52545b8-9dce-3cc7-9b94-99c13c838c06.roa
File: e52545b8-9dce-3cc7-9b94-99c13c838c06.roa (raw, json)
Hash identifier: Hj0nfU8jmlJudRxj9/y/2Gcp2ZpD+MyTsf+Sdxxr2zw=
Subject key identifier: C0:64:B2:8E:98:92:7B:F4:1F:FE:1E:60:6C:60:32:62:72:33:ED:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584019DE6343C46CE1461A263940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e52545b8-9dce-3cc7-9b94-99c13c838c06.roa
Signing time: Thu 01 Dec 2022 12:00:00 +0000
ROA not before: Thu 01 Dec 2022 12:00:00 +0000
ROA not after: Fri 06 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:19:de:63:43:c4:6c:e1:46:1a:26:39:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 1 12:00:00 2022 GMT
Not After : Jan 6 05:00:00 2023 GMT
Subject: CN=5fabc11e-5ffd-4ea1-a3a6-a4bd50ade941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:0c:30:a2:84:ec:15:e3:9e:0c:84:1a:ee:
0c:f5:34:89:48:35:9b:5b:00:0a:15:63:62:4a:6e:
10:ce:80:76:1f:d3:d1:28:e4:a1:70:e4:53:53:0a:
56:c3:71:b7:2d:ed:a5:8a:0e:46:f9:23:0c:aa:63:
cc:fa:0c:6b:9f:21:ce:d5:06:0e:b5:05:21:95:72:
60:81:f6:74:c5:75:28:72:8b:f7:e4:2b:88:e3:cb:
6f:c9:20:59:bb:3d:a3:c2:17:74:4f:ac:b3:a6:e4:
d5:22:01:83:85:ce:5f:56:45:6b:f8:04:e3:56:20:
4e:f7:37:d9:9b:53:b3:ac:c1:e9:e8:80:de:bd:96:
de:27:84:9f:e8:e7:56:fa:98:fc:d1:67:e5:0c:1c:
20:c3:15:fd:52:a4:4a:d3:0b:70:46:92:a7:c5:1e:
f0:d7:66:b4:f1:ef:aa:da:ef:52:95:3a:15:f9:73:
af:94:0b:59:21:be:0c:2b:1c:4a:59:a9:de:ef:fa:
8d:53:db:3f:30:30:65:84:d3:ae:bc:2b:2a:29:4d:
80:de:48:9d:d2:af:00:cc:61:5e:21:36:6e:3e:25:
85:8e:62:0a:8d:88:b8:b9:85:b6:fb:b6:fd:11:b3:
5d:25:43:43:b9:05:0b:8f:6d:4c:f6:18:f3:f6:70:
39:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:B2:8E:98:92:7B:F4:1F:FE:1E:60:6C:60:32:62:72:33:ED:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e52545b8-9dce-3cc7-9b94-99c13c838c06.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:79:ab:d5:3b:9a:b5:31:dc:e2:3c:38:4c:2c:f8:01:35:7d:
f5:5c:f9:e3:c5:73:05:d2:7f:b3:2c:72:c4:61:0f:48:a5:f4:
ee:0f:98:7e:18:fb:74:57:b1:a2:5d:bb:29:95:51:3a:8e:1e:
82:df:61:e3:13:7c:fa:f0:fa:82:9b:5a:bf:13:7f:4d:93:a6:
45:a6:15:1b:bf:5b:29:b6:79:e3:d6:fe:d8:a4:1f:ea:8d:67:
a4:d7:7b:8b:f3:6e:3d:c1:42:4d:22:bc:aa:b4:a1:b0:ab:c7:
a1:95:4b:d4:94:57:c4:0f:f8:20:b8:36:d1:b2:35:90:3a:c3:
b6:67:bd:50:50:80:dc:ff:c4:c5:68:93:61:09:72:50:05:29:
22:ae:4c:60:9c:61:21:b4:4f:50:2e:a8:7e:e2:c1:c5:67:2f:
51:10:bc:59:af:f0:c7:17:e4:73:b4:d9:e5:34:29:88:70:d7:
a9:4e:72:78:cf:f9:a7:ec:8d:85:bc:d5:db:10:80:83:95:ac:
d5:e0:c7:8a:b6:b7:1d:13:84:a7:a3:d8:74:30:df:32:db:f8:
4e:86:3e:89:11:b5:0c:aa:62:f0:30:84:8a:23:0d:a7:12:87:
8e:bd:db:71:2d:52:25:9b:9e:c9:86:04:b2:12:bd:f1:3c:3a:
c5:83:c8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:38 2025 by rpki-client