Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f31b4249-244b-3c53-a1fb-11c80c109b82.roa
File: f31b4249-244b-3c53-a1fb-11c80c109b82.roa (raw, json)
Hash identifier: VOmcLC1M6gYTI5aZqe3W5Rv0lhfXf7knO8SXHuT/fAk=
Subject key identifier: F0:44:48:FD:6C:65:6D:BC:02:72:52:99:2E:83:20:E4:3C:E4:34:E1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBD601BF3688A17D98C20CDE0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f31b4249-244b-3c53-a1fb-11c80c109b82.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bd:60:1b:f3:68:8a:17:d9:8c:20:cd:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=46e4dcce-3d71-4e79-ab25-6174e7fa60a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b2:06:31:8b:48:03:d7:4a:ed:fc:67:1d:0a:
75:33:66:53:43:58:12:a3:61:63:5b:64:c3:92:30:
47:aa:70:4a:07:3e:a5:a7:6c:d5:e5:4c:15:4b:4f:
ef:08:af:9b:e4:85:9d:f1:f3:da:45:f7:8f:8c:14:
d5:2b:1c:b4:90:40:4c:39:a4:c8:1b:e9:89:f0:b3:
05:54:aa:c8:66:3b:4f:38:f5:c2:b0:3b:7e:ca:f9:
af:d9:f1:1c:6c:42:30:39:28:f2:42:20:38:cc:be:
bb:b4:13:5e:e1:6e:35:13:4f:65:a6:65:d8:f9:fa:
e0:30:5a:6e:70:5a:5e:db:08:84:95:f2:13:88:d9:
93:4a:86:bf:37:d5:9c:5b:53:7e:26:cd:12:6a:28:
1e:a3:9b:2d:2c:94:77:e4:77:17:11:c2:fa:4e:f3:
79:76:7e:b1:10:44:20:fc:be:7f:93:af:fa:62:1b:
32:07:72:a1:c1:d5:57:e7:81:3e:ee:5a:25:4d:db:
9e:39:81:16:4c:d5:99:4b:c9:f4:38:a6:c8:71:16:
47:0c:42:5f:84:fc:10:a3:74:f0:d4:a9:ab:63:1d:
d4:b1:56:5d:4e:2a:a8:7b:e7:b7:fe:7a:f2:82:22:
5a:ab:b4:c6:88:ac:40:e4:01:b2:5f:7f:a6:a2:ab:
b6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:44:48:FD:6C:65:6D:BC:02:72:52:99:2E:83:20:E4:3C:E4:34:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f31b4249-244b-3c53-a1fb-11c80c109b82.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:8f:6e:e0:f0:d2:8c:de:49:53:1a:6d:0f:99:fa:58:f3:b7:
71:84:72:02:e6:f8:41:55:cf:9a:8a:97:85:0d:0c:9e:28:2e:
5d:3d:5c:ec:42:03:e9:7f:d4:17:6c:4b:32:64:93:bf:03:ad:
86:bd:9c:b0:1b:ca:84:80:0a:c3:e6:d7:b6:25:14:fd:07:06:
f6:f9:4f:69:28:2a:0b:e6:d9:a6:9c:f6:c4:81:7e:cf:3b:e7:
a8:37:b5:de:2b:bf:5b:4b:fd:ea:ca:0c:a0:86:0f:df:af:f1:
5b:7f:e8:e2:93:a6:c2:fd:1a:93:dc:ad:ec:ac:b0:1c:27:c6:
ce:b4:35:41:9f:ef:d8:67:e1:2f:71:c8:e6:9f:28:e2:77:0b:
7a:2b:c4:1d:2d:51:43:a0:71:29:2d:a7:4a:df:10:c8:dd:65:
9a:73:e6:ca:c6:18:fb:be:c1:63:ee:35:d8:90:5c:5f:d2:d2:
66:3d:c5:37:a0:f6:a0:73:89:d9:56:43:0e:ca:55:b0:7f:89:
5c:37:28:90:f0:ec:9d:b1:fe:f0:1d:82:01:a7:23:c9:75:c5:
ac:15:f4:b6:74:f2:af:f3:70:4c:b4:a8:f5:3f:b0:98:a9:f8:
a3:79:73:d3:ea:49:94:54:18:e4:21:7d:77:6d:25:43:b1:fe:
55:9c:c2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:27:28 2025 by rpki-client