Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2a9268e-6de1-37f8-9dbc-03775aa47303.roa
File: f2a9268e-6de1-37f8-9dbc-03775aa47303.roa (raw, json)
Hash identifier: XthMKFv621BkuVLTs0/JJHn1Z7scKY4Ouigr2FgQPu4=
Subject key identifier: 7F:48:A4:14:DB:44:6A:98:77:E7:EE:39:B5:4C:E2:A7:DA:9D:29:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E96754EB044A2E31ACF4783A8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2a9268e-6de1-37f8-9dbc-03775aa47303.roa
Signing time: Fri 15 Jul 2022 12:00:00 +0000
ROA not before: Fri 15 Jul 2022 12:00:00 +0000
ROA not after: Sat 20 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 35.71.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:96:75:4e:b0:44:a2:e3:1a:cf:47:83:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 15 12:00:00 2022 GMT
Not After : Aug 20 04:00:00 2022 GMT
Subject: CN=42a61e6d-d71c-415d-b755-42ffdd800b2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:f0:44:5a:c4:85:c1:4d:09:34:90:90:9e:
3f:a0:ae:bb:da:ca:7f:ae:54:18:61:50:5e:e3:90:
16:1b:bf:cf:21:15:36:be:ff:d8:dd:6a:d6:a4:a8:
4b:a0:20:19:91:51:e7:a4:2f:66:9a:34:84:88:31:
dc:38:25:81:75:72:7a:db:85:59:f0:00:c8:5e:b2:
96:b0:33:62:4f:86:a8:54:38:f3:b1:bf:88:11:2d:
53:68:aa:76:ea:86:0c:6a:d3:a7:4b:73:07:85:54:
49:9d:50:8a:2c:84:32:68:d8:0f:d4:4b:00:b8:2d:
ed:8e:23:7c:7b:5e:da:af:81:b6:e7:4f:49:c5:66:
5e:7a:a7:49:eb:d5:4b:4d:b7:ea:15:e1:33:fe:c0:
e4:37:11:ed:00:a6:d4:09:30:6b:ca:11:d9:cf:a8:
d1:1a:83:ed:ae:62:fb:43:4b:c7:31:5f:c8:d1:77:
c2:7d:f7:7b:a6:58:6d:94:cc:46:d4:2f:3c:f9:2c:
71:1e:22:22:8e:1e:35:aa:55:82:2a:cb:71:d4:95:
1f:4d:0d:35:db:70:62:01:99:f0:b8:52:2e:2b:b6:
bd:e9:37:ba:68:38:f1:b1:10:94:d3:85:c1:2c:38:
c6:98:98:d4:a7:e1:81:18:eb:75:f9:32:2b:5a:8c:
a6:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:48:A4:14:DB:44:6A:98:77:E7:EE:39:B5:4C:E2:A7:DA:9D:29:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f2a9268e-6de1-37f8-9dbc-03775aa47303.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.71.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:05:a1:ac:ed:ae:55:17:3a:f7:3a:28:ca:bf:1f:a3:b1:0e:
2c:39:c0:26:f4:ca:40:88:56:cf:e3:6e:73:ce:0e:e2:c6:ef:
07:73:78:b1:12:b4:bb:97:71:0d:ff:2b:87:3b:0b:ff:f6:a7:
b6:1e:ea:e3:f7:a6:10:d4:5c:be:85:53:f5:0f:fb:82:6e:15:
70:22:57:cd:34:c3:f0:51:42:2e:b4:51:56:a2:c4:10:51:5c:
82:8b:a9:ba:3d:bd:91:5b:b3:c7:2e:76:95:2b:8f:f4:61:3a:
ea:72:d4:18:6d:ff:d6:97:ff:d7:31:69:d2:d2:6f:ce:3b:e4:
37:5b:87:50:27:25:b0:5b:a9:44:e6:b9:f4:a2:1b:da:5c:ed:
5c:fc:2d:17:af:d7:17:6e:36:66:2e:bc:bc:82:fe:a8:ea:23:
b6:38:71:e9:fa:b6:0d:fb:54:4e:47:5e:4b:00:c4:59:5c:b3:
82:cb:5b:21:1b:5c:f9:b9:2d:05:ca:8c:40:eb:f1:2d:d3:bf:
c0:bd:6e:67:56:94:b7:1c:fa:07:4a:a9:22:db:37:b6:71:08:
c7:2e:f4:76:ae:c0:68:23:57:3b:2c:4f:c8:59:51:50:19:7a:
4f:9a:fd:e7:cc:42:d5:56:e4:6c:76:fb:3d:1b:12:f7:32:c6:
53:81:4f:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6WdU6wRKLjGs9Hg6gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNTEyMDAwMFoXDTIyMDgyMDA0MDAwMFowLzEtMCsGA1UEAxMk
NDJhNjFlNmQtZDcxYy00MTVkLWI3NTUtNDJmZmRkODAwYjJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdLwRFrEhcFNCTSQkJ4/oK672sp/rlQYYVBe
45AWG7/PIRU2vv/Y3WrWpKhLoCAZkVHnpC9mmjSEiDHcOCWBdXJ624VZ8ADIXrKW
sDNiT4aoVDjzsb+IES1TaKp26oYMatOnS3MHhVRJnVCKLIQyaNgP1EsAuC3tjiN8
e17ar4G2509JxWZeeqdJ69VLTbfqFeEz/sDkNxHtAKbUCTBryhHZz6jRGoPtrmL7
Q0vHMV/I0XfCffd7plhtlMxG1C88+SxxHiIijh41qlWCKstx1JUfTQ0123BiAZnw
uFIuK7a96Te6aDjxsRCU04XBLDjGmJjUp+GBGOt1+TIrWoymPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH9IpBTbRGqYd+fuObVM4qfanSmbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjJhOTI2OGUtNmRlMS0z
N2Y4LTlkYmMtMDM3NzVhYTQ3MzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHI0eAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYFoaztrlUXOvc6KMq/H6OxDiw5wCb0ykCIVs/jbnPODuLG7wdzeLES
tLuXcQ3/K4c7C//2p7Ye6uP3phDUXL6FU/UP+4JuFXAiV800w/BRQi60UVaixBBR
XIKLqbo9vZFbs8cudpUrj/RhOupy1Bht/9aX/9cxadLSb8475Ddbh1AnJbBbqUTm
ufSiG9pc7Vz8LRev1xduNmYuvLyC/qjqI7Y4cen6tg37VE5HXksAxFlcs4LLWyEb
XPm5LQXKjEDr8S3Tv8C9bmdWlLcc+gdKqSLbN7ZxCMcu9HauwGgjVzssT8hZUVAZ
ek+a/efMQtVW5Gx2+z0bEvcyxlOBT5o=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:58 2025 by rpki-client