Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/254f8308-9991-3e20-b0b2-d9cff0878d56.roa
File: 254f8308-9991-3e20-b0b2-d9cff0878d56.roa (raw, json)
Hash identifier: zQwzu6SQ1pJRft9lxUZunBFT2sw/2s0zZsqfJzrWE0s=
Subject key identifier: C2:08:73:3C:35:26:44:BA:BE:B7:32:55:6C:86:13:A0:05:33:99:54
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584068021240E2C3BE00784B3600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/254f8308-9991-3e20-b0b2-d9cff0878d56.roa
Signing time: Thu 29 Dec 2022 12:00:00 +0000
ROA not before: Thu 29 Dec 2022 12:00:00 +0000
ROA not after: Fri 03 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 35.152.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:68:02:12:40:e2:c3:be:00:78:4b:36:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 12:00:00 2022 GMT
Not After : Feb 3 05:00:00 2023 GMT
Subject: CN=72550f1e-d372-4923-aeb9-267f2323e4c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:58:c8:b0:a9:50:97:48:25:50:78:ff:8d:46:
18:bd:0a:cf:f2:71:f3:a3:cc:58:cd:3b:b2:4e:5e:
24:a8:b6:04:fc:d3:c1:3c:01:f6:0f:e2:c3:f6:8f:
36:a4:29:3b:6e:22:83:f1:2e:32:64:1b:b7:3e:d2:
c3:d6:d6:0f:56:ed:eb:fc:2d:a4:4c:4e:1b:ea:cc:
a1:8b:10:08:ff:46:91:31:03:4a:87:be:21:d3:99:
69:48:9d:9a:a7:96:5d:73:d6:ed:38:85:1e:d5:a6:
bc:0a:20:03:75:84:bf:bf:89:08:49:60:6f:fc:55:
90:0f:a1:68:f4:28:2a:af:f4:32:1a:71:b8:a3:9e:
58:40:b2:7c:1c:ee:e4:1b:7e:20:d4:93:a4:13:e1:
6d:84:e3:6f:2a:00:5f:f5:04:f3:3d:ef:1c:be:99:
a7:47:75:73:94:45:40:79:8d:dd:b9:ea:0b:de:1f:
c7:de:dc:6c:e5:75:13:60:f3:2f:36:21:7a:cc:99:
f7:39:c0:8e:a1:f5:89:4e:a0:ad:dd:b6:bf:c1:66:
8a:18:f3:cb:f8:b7:f2:96:57:c1:75:1d:6a:b7:2e:
d2:85:bd:85:79:72:68:24:8f:63:97:25:62:fc:56:
fb:a2:67:f8:74:0b:39:25:c8:1f:2c:aa:28:1c:13:
16:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:08:73:3C:35:26:44:BA:BE:B7:32:55:6C:86:13:A0:05:33:99:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/254f8308-9991-3e20-b0b2-d9cff0878d56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
35.152.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:34:a6:3b:ce:c7:67:c4:99:0b:33:4a:40:e2:9b:52:de:18:
88:60:26:06:60:15:df:5f:57:50:b1:2f:0d:4f:0d:d2:50:2c:
80:e0:69:23:79:38:de:41:83:5e:6f:bf:57:4b:54:ba:5d:e8:
5d:83:4c:d2:fc:2a:1c:39:92:35:ec:7d:9e:70:54:ce:1a:6d:
b2:b8:bb:4d:00:98:ba:77:ef:65:17:a4:f8:8c:0a:ea:95:36:
cb:8c:a2:1c:5c:97:54:84:2e:66:b3:e1:42:51:fc:43:47:d5:
10:6b:20:0b:c4:68:e6:8a:52:d8:4d:fa:02:4c:23:e3:ec:f0:
3f:90:28:2b:6a:94:31:59:30:31:60:12:81:16:99:d1:21:d2:
be:62:1b:95:4e:bb:e4:fc:e1:d2:26:13:16:a9:31:9c:5e:8c:
92:9b:60:68:f7:f3:a7:d1:99:82:87:16:64:59:07:c4:e4:38:
fc:17:8a:10:7f:bc:65:c5:e2:09:25:af:6c:08:0f:89:49:27:
8b:50:92:95:1d:b4:1a:32:a7:b9:47:ef:28:d8:26:b4:c4:76:
0f:29:90:9c:b6:cc:55:82:97:6c:25:a4:e9:83:06:ae:25:60:
a6:c6:82:52:58:44:4b:c1:77:e6:f3:7d:77:c9:ce:c7:42:5a:
a1:7c:b7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:53:33 2025 by rpki-client