Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944e7a8b-818d-306b-bc10-fd436cf93b21.roa
File: 944e7a8b-818d-306b-bc10-fd436cf93b21.roa (raw, json)
Hash identifier: 2kWb0xCpC2LdY8TdXvicFEpOCA0nuf8eb1vam6Dn+P8=
Subject key identifier: B7:D6:7F:9A:F4:2A:1C:A6:6A:7D:C6:4D:6E:4D:AF:8E:5E:D6:54:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B9428751F2C51D1DC1ED2380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944e7a8b-818d-306b-bc10-fd436cf93b21.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 35.72.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b9:42:87:51:f2:c5:1d:1d:c1:ed:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=e02f8b91-2033-4d7a-87d1-9010cf13f3c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:38:4f:cc:9e:27:1b:97:53:38:be:7f:de:
65:61:b5:93:7f:50:c8:d3:b2:f6:46:c8:f1:69:77:
82:d2:95:e5:0f:14:74:1f:28:7b:81:33:df:c8:08:
ee:d6:9b:c6:44:40:77:93:84:4f:ce:69:75:7d:d0:
e9:f9:10:11:e9:02:a3:90:6a:3e:e8:a6:51:a4:c0:
6b:8d:ab:94:7c:51:fd:13:3c:10:13:ce:df:9f:0d:
a3:4d:e1:d4:74:0a:13:c3:dd:63:26:1b:9f:0f:dd:
bc:d3:78:17:fd:54:06:4c:ee:14:6d:9d:00:ee:08:
27:12:d3:fc:91:88:9f:b5:81:d5:7b:46:ca:ea:ac:
a0:37:04:48:f5:4b:e9:4f:6f:37:e2:22:f3:01:b3:
57:76:9d:78:f7:86:73:d2:da:61:7b:d0:bc:3d:bc:
eb:45:9c:2a:2d:96:d2:a5:04:40:f5:22:60:a3:c9:
74:08:3d:c1:49:82:d4:c2:70:13:9a:62:88:74:28:
46:5c:65:b5:61:02:c3:dd:f3:ab:ea:dd:eb:56:ea:
83:e3:f0:5f:2c:70:de:cc:ac:2b:ff:66:d2:4b:3b:
77:4b:a1:39:d5:91:52:ae:11:00:d0:c9:a5:06:22:
9c:72:59:ca:ae:65:e9:5c:58:ac:55:f2:df:61:4f:
02:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D6:7F:9A:F4:2A:1C:A6:6A:7D:C6:4D:6E:4D:AF:8E:5E:D6:54:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/944e7a8b-818d-306b-bc10-fd436cf93b21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.72.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:ac:e3:56:ef:b8:3a:9e:5f:22:49:3e:7c:be:01:87:bd:84:
4b:7e:59:bb:d4:3a:5d:77:e8:19:e2:3d:1c:31:b0:fd:77:42:
9b:4b:29:1a:39:52:5c:bc:79:ab:d0:af:8c:66:c6:d2:f5:8a:
a1:7d:b4:06:6e:1f:ad:fc:25:73:d0:63:4f:93:0b:b3:b3:a3:
d0:96:f8:43:f8:b9:bc:45:5d:54:81:24:2d:46:14:e2:9c:29:
9b:c4:31:54:04:01:15:32:f9:26:24:75:b8:89:bd:07:3e:ca:
75:20:b5:a4:de:55:05:19:ef:4d:ea:fd:6c:7c:8b:65:a3:16:
39:4d:6d:bb:d0:fb:0d:59:e1:05:e8:0a:69:ee:28:30:76:b5:
35:7e:50:e7:87:a3:43:97:51:c1:ba:26:59:56:a8:30:b1:f8:
08:e3:b0:b4:b9:15:38:25:74:44:cc:8d:5f:6b:c0:05:d0:75:
58:5c:79:e9:39:84:fa:93:e8:49:30:54:a2:32:27:c2:a8:1c:
24:0d:d9:60:6c:1d:2a:c5:6c:de:36:90:c5:92:d6:d1:ea:1b:
a9:0a:dd:c6:c0:99:a0:e9:35:60:b8:57:88:3e:ee:b6:84:87:
10:22:9a:d0:5a:e3:18:44:a5:5b:15:80:f3:70:d2:e8:d2:2b:
7a:fb:57:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 14:55:54 2025 by rpki-client