Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9959c0e-044f-3765-a775-40fc2032fdb9.roa
File: e9959c0e-044f-3765-a775-40fc2032fdb9.roa (raw, json)
Hash identifier: x8dPAE2GB8AuphzPhAygp+zp/XXcUnp5q2gDlQc7+/Q=
Subject key identifier: A9:6B:23:FE:81:B0:FC:65:F5:9D:10:B5:94:88:F8:56:08:12:93:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B9A3C8180640AAA710A8780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9959c0e-044f-3765-a775-40fc2032fdb9.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 35.96.0.0/12 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:9a:3c:81:80:64:0a:aa:71:0a:87:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=6f44c688-3b07-472a-af6e-06930088a2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:fe:8d:c5:95:ef:44:a4:86:b9:f9:29:64:
3f:76:d1:e1:9c:f6:55:b9:a7:85:75:9a:c3:de:1f:
c6:6c:c3:4e:65:20:31:60:09:1d:1b:63:4d:93:84:
4d:d6:bf:36:a2:07:45:d5:0a:f3:5e:ad:d8:e1:63:
27:0c:5e:89:9c:5c:35:8c:d6:1f:80:b6:dc:ec:50:
e1:c2:6c:11:5a:6c:b5:cc:f5:31:80:e6:ec:bd:37:
5e:18:34:96:c1:37:ef:5e:1e:4f:c5:08:06:eb:51:
b9:8c:da:1f:43:c0:03:69:9b:fa:37:9d:ca:e5:68:
8f:ce:24:b1:99:b1:6c:68:21:50:e3:01:e6:7e:d3:
3e:76:f1:58:fc:41:1d:3f:18:7c:76:91:e0:0f:71:
79:2c:a8:70:ce:43:ad:26:f5:11:ab:82:e9:6c:eb:
a1:c9:7a:38:11:b1:56:a6:c2:8c:18:e0:78:55:7d:
f5:ff:5e:3f:74:4e:51:70:83:ec:ac:98:aa:d8:23:
9e:23:f6:d2:0c:8d:15:89:a4:79:fa:5f:17:e9:61:
f6:fa:50:4c:05:43:a2:8e:99:67:28:35:db:dc:9f:
22:15:ac:44:ec:39:16:ad:af:d5:b0:21:22:96:22:
fa:d5:68:26:51:ae:d2:72:11:ef:7f:36:eb:66:c1:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:23:FE:81:B0:FC:65:F5:9D:10:B5:94:88:F8:56:08:12:93:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e9959c0e-044f-3765-a775-40fc2032fdb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.96.0.0/12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:32:fb:5a:be:e1:e4:24:58:3e:2c:d1:17:ad:3d:99:e2:39:
81:e6:b0:39:82:9d:04:98:20:23:29:0d:88:e1:16:ca:52:8a:
0f:3c:c5:1a:60:76:ce:b2:f8:56:b2:68:f5:b6:f5:7a:74:84:
fc:22:a3:07:bc:3c:5a:d6:ae:3b:50:08:be:51:d5:de:fc:11:
05:77:3c:46:de:77:ae:7d:5b:f7:e6:06:2c:37:ce:21:a0:e3:
65:bd:1c:b3:61:58:2a:5b:bf:cf:aa:75:1f:7c:2e:02:61:fe:
c0:21:ba:a3:2c:fb:b7:65:7f:a6:62:d4:b7:52:5a:de:db:c7:
dc:42:d3:ff:70:8f:52:25:0c:f7:16:45:f5:e3:2f:51:14:ca:
06:45:54:ca:3b:fc:cd:7e:34:c5:e8:32:a2:95:f9:60:5f:fe:
8f:48:15:98:69:52:65:a7:a4:e5:8d:e6:f7:7b:9d:a6:b5:b2:
58:4b:49:c9:cb:9d:f0:d7:9b:85:cc:4e:73:68:c9:17:c5:a4:
dc:72:92:40:2f:38:02:f8:48:4b:e0:56:ca:5d:c8:2b:24:1d:
a0:14:e8:62:bc:b0:39:74:66:55:b8:90:0d:05:c5:60:e5:ff:
25:98:81:11:a4:b0:23:6d:24:c8:30:60:8a:5d:de:97:59:fa:
ae:d7:3a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:04 2025 by rpki-client