Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e749996a-7844-3259-85f4-90b92db0c0e7.roa
File: e749996a-7844-3259-85f4-90b92db0c0e7.roa (raw, json)
Hash identifier: BApy70xc3gK7MjA8unCpWba2j1okDLuQAuLeKqS7lLQ=
Subject key identifier: 07:8D:4D:48:BA:4C:FB:A2:9D:B8:EC:56:19:40:31:30:AF:88:8D:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FA7DFA05C22EDB5A90A6752E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e749996a-7844-3259-85f4-90b92db0c0e7.roa
Signing time: Fri 21 Oct 2022 12:00:00 +0000
ROA not before: Fri 21 Oct 2022 12:00:00 +0000
ROA not after: Sat 26 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:a7:df:a0:5c:22:ed:b5:a9:0a:67:52:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 12:00:00 2022 GMT
Not After : Nov 26 05:00:00 2022 GMT
Subject: CN=b13117c2-f31e-440f-942c-dc1d463678e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:83:ab:20:02:d1:9e:95:69:83:09:3b:63:
a9:9a:6b:09:4f:c5:9c:f4:ed:59:c1:e9:60:ff:c4:
e4:ee:54:25:33:4e:3b:12:ef:25:8f:70:7f:e6:75:
09:e3:b6:7c:7d:17:56:48:15:65:3d:25:c2:ae:2b:
18:4f:b6:ac:1d:8f:ee:75:1e:11:58:2c:20:f2:38:
7f:ab:75:a1:a3:e7:c8:98:6b:18:52:a4:54:a1:3d:
15:e4:8a:76:64:5a:68:05:d9:4c:cc:1e:32:7c:54:
14:45:80:20:bb:fc:ff:8f:b6:c6:79:f1:1c:43:b0:
a1:c6:e0:2f:ec:f2:04:ce:a1:03:b5:c2:c8:e0:11:
66:d7:8e:cb:e4:c8:4a:89:ea:cf:83:77:be:be:93:
d1:c6:55:31:d0:20:08:88:10:b1:2e:15:b0:85:7a:
74:f8:3f:85:f3:af:a2:32:e8:21:ef:2b:07:f5:18:
91:d1:ac:ef:c4:73:bb:e3:2b:3c:df:6c:49:9b:4e:
31:03:ac:a3:47:3a:a9:19:5e:d9:a8:8b:64:6a:b7:
ad:a2:0b:84:f3:13:3d:69:fb:39:e1:2d:a3:27:8a:
08:3c:59:7c:bb:76:4f:21:bb:05:1d:a9:4d:ad:cb:
ae:c5:2d:72:ef:57:45:5a:53:46:49:af:8a:e7:70:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8D:4D:48:BA:4C:FB:A2:9D:B8:EC:56:19:40:31:30:AF:88:8D:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e749996a-7844-3259-85f4-90b92db0c0e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:b3:5d:1b:81:66:9a:46:47:9e:56:02:ad:d8:47:51:6a:65:
fb:9e:c7:39:41:ca:08:0d:cf:1d:b2:82:f0:6b:8d:08:72:93:
fe:8d:b0:41:ac:26:32:fe:03:7e:ee:f5:5f:c3:e0:54:d7:0b:
9a:2b:c9:f1:b9:b8:06:b4:fa:c6:c1:24:a6:01:ab:46:c3:ff:
76:8f:5e:ce:c4:1b:50:cc:47:7b:bc:c9:9d:95:63:a8:7a:80:
87:6e:2a:e6:77:4d:f7:d6:e4:cc:ba:ff:ed:cf:47:cf:5f:44:
78:c4:45:59:ee:f3:fe:ab:c2:bd:12:39:b6:9b:9e:95:0c:e0:
f1:ec:ef:82:2f:dc:d1:94:00:2e:9b:a3:48:7f:18:88:a0:d4:
8d:15:0d:55:d9:df:c0:fa:ea:38:ef:24:1c:cf:e1:c3:82:62:
f2:c6:e2:fa:6c:b8:a5:cf:9b:99:a6:6e:d1:42:64:9f:e4:2d:
ee:5d:fc:d7:7e:35:fa:40:ec:d2:42:32:52:d5:a2:b5:c5:69:
fd:ff:5c:b8:16:3f:a3:86:7f:b5:74:73:09:07:e0:f4:a9:1b:
17:0e:d2:3e:08:62:cc:06:4e:c0:03:e4:47:11:01:ee:a9:81:
5f:0d:88:a3:70:af:a0:42:09:50:cc:00:c3:e4:28:9e:35:b9:
f3:3f:17:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:15 2025 by rpki-client