Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a5f185c-a767-3123-bcc7-3eb15f78c66d.roa
File: 7a5f185c-a767-3123-bcc7-3eb15f78c66d.roa (raw, json)
Hash identifier: JUdwDt9FWRzPmIj2dKbQ4n0+GK5f0cXB8Z97J4LhW/0=
Subject key identifier: 71:97:80:05:B7:55:29:51:5B:9D:64:40:FD:37:A7:38:62:C4:4D:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B62D3F95D490204C33524D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a5f185c-a767-3123-bcc7-3eb15f78c66d.roa
Signing time: Thu 26 Jan 2023 12:00:00 +0000
ROA not before: Thu 26 Jan 2023 12:00:00 +0000
ROA not after: Fri 03 Mar 2023 05:00:00 +0000
asID: 16509
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b6:2d:3f:95:d4:90:20:4c:33:52:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 12:00:00 2023 GMT
Not After : Mar 3 05:00:00 2023 GMT
Subject: CN=2b0194cf-97cc-422a-b1c4-143da4e9a3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:22:bb:0c:f1:5d:59:68:f2:87:8f:a8:f7:46:
bd:ca:12:57:7f:d1:c5:46:59:27:6b:fc:57:3d:bf:
ba:ee:cd:6a:db:27:14:01:b1:a3:bd:3e:30:1a:6c:
e4:74:af:dc:9b:63:12:bb:7a:cb:d3:c3:b9:06:a3:
a2:d6:de:bc:5a:53:ce:a1:1c:d3:bc:af:b1:67:e2:
e8:c0:d4:14:f5:a0:57:1a:df:e9:7f:c3:7c:12:4a:
f0:e2:62:a1:f5:7b:b6:5e:5a:70:65:13:64:3d:bc:
89:6c:ab:e1:dc:d8:34:80:da:e1:33:5a:a8:8e:49:
34:9e:c8:a5:74:c1:1c:e1:4f:bc:c3:d9:2e:cc:d1:
4e:59:4a:d7:57:39:ab:7f:a7:7e:c8:a4:da:82:88:
0a:e7:35:70:d9:b0:db:12:af:e2:32:35:a9:72:b2:
8d:f4:e8:ce:53:18:e4:0c:8c:70:64:06:f7:6b:f9:
98:b1:2e:dc:7a:c4:42:c1:0c:5d:43:e0:23:0c:10:
0e:45:81:1e:06:d4:64:25:25:29:90:1a:e1:85:57:
78:f9:b2:1c:ac:51:44:29:59:16:e7:e5:a8:90:d7:
93:20:43:c1:31:4c:11:ae:0e:d0:df:af:8b:35:11:
c3:c6:ab:d6:31:2d:f0:c1:df:04:75:4c:4a:33:cf:
32:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:97:80:05:B7:55:29:51:5B:9D:64:40:FD:37:A7:38:62:C4:4D:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7a5f185c-a767-3123-bcc7-3eb15f78c66d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:4d:d6:7c:84:a3:61:d4:ff:08:d2:ee:75:58:0f:5b:d2:d3:
f1:71:72:24:7a:5d:87:51:b3:0c:b8:0d:8a:3a:6e:4b:5b:c2:
7b:30:2d:2c:45:04:5e:a8:08:fc:2d:0d:73:17:dd:8d:01:0f:
65:d5:3c:98:01:36:08:e4:26:ee:6e:9b:7d:1d:c2:f4:d0:1a:
c8:e9:fe:6a:7b:cd:dc:ac:4d:b9:d5:ae:26:f7:ae:fe:79:ba:
91:47:55:3f:44:4d:67:b0:32:0b:54:56:7d:8e:f3:75:67:ae:
7a:7f:2f:d6:ba:d5:0c:f8:80:ac:08:07:85:d5:4f:af:3f:d1:
d9:16:b2:21:7b:7d:0d:bf:4f:79:1c:f7:b5:f6:c2:df:37:a4:
00:cb:e7:40:a0:42:87:7a:8d:13:e5:5d:8d:ad:05:77:e2:96:
80:a8:f7:d7:b7:ce:e8:3f:7d:80:02:7d:2e:71:b8:fb:ee:c9:
25:ce:cb:63:ba:e5:69:54:2f:fa:83:f4:75:c7:66:55:ef:31:
14:44:52:91:af:3e:23:54:5d:18:1c:71:6d:16:63:06:5f:69:
57:3d:fc:89:7a:97:db:cd:b5:6a:e3:62:19:fd:9d:94:05:a3:
94:a3:cf:49:dc:6b:79:2f:2e:ef:43:5b:c5:02:99:d0:f6:0d:
5c:bd:56:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:58:35 2025 by rpki-client