Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e7be10d-da41-331c-b9d7-6cc05e2c1a12.roa
File: 0e7be10d-da41-331c-b9d7-6cc05e2c1a12.roa (raw, json)
Hash identifier: J+GbU8l/SykKDOn+0+4OScKhbJMhsJZNTYE91i0Cngs=
Subject key identifier: 1F:A6:8C:10:61:86:2E:52:99:0E:D1:18:DC:F2:18:AA:5B:40:6B:28
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FEC7951C9485148C335D0C680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e7be10d-da41-331c-b9d7-6cc05e2c1a12.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 3.64.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:79:51:c9:48:51:48:c3:35:d0:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=4a1779c6-a3c9-4ea2-9f85-d142b23b34fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:87:90:65:a7:31:9c:cd:d1:3c:06:58:d0:
44:65:26:b5:7b:41:c1:ba:0b:33:68:35:d4:34:db:
f1:30:b1:fc:99:14:c8:38:27:5b:06:14:fb:aa:bc:
21:f7:c2:e2:90:8e:20:11:9d:03:a5:7d:8e:21:7d:
50:aa:6b:dd:4b:61:e9:47:19:ab:e9:5a:3b:aa:c2:
0b:cc:20:04:31:91:2d:6c:66:26:24:63:eb:2d:9c:
a6:a6:2c:cc:c3:0f:d6:67:18:36:95:da:f7:aa:e9:
31:31:3e:19:7a:6a:d8:30:67:b9:9c:53:79:16:21:
f0:f9:39:11:4e:cf:97:d2:a1:f1:14:cf:a1:5e:2e:
52:cc:00:b1:0b:70:63:31:b5:c7:81:d1:0a:cf:4a:
94:6c:a4:6d:e8:8c:b2:46:ec:9a:e9:bf:81:e2:a0:
cd:d0:e0:63:e3:de:b7:08:e6:4b:e8:69:55:3e:c7:
69:dc:94:f3:23:5a:d6:03:c6:79:06:c1:6d:de:ae:
d7:62:a1:45:2e:cf:32:e8:a3:fa:ad:2e:1f:a9:2c:
09:48:81:32:3d:f2:f8:69:a1:f0:b7:52:4f:3d:a3:
ab:c3:08:bb:cf:90:1f:a2:96:0d:b3:19:fa:5f:9e:
a8:e5:44:c9:77:5e:bc:12:61:80:b8:c3:8e:6f:d3:
e1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A6:8C:10:61:86:2E:52:99:0E:D1:18:DC:F2:18:AA:5B:40:6B:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0e7be10d-da41-331c-b9d7-6cc05e2c1a12.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.64.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:88:01:30:b0:48:2d:5a:55:9c:53:3e:59:41:00:fd:cd:32:
e5:1b:62:35:1b:7a:87:7d:8f:b9:f2:6e:c2:4b:dc:8b:28:35:
3b:2f:3c:99:0a:a0:68:53:e8:ca:93:cb:8b:91:d3:b6:28:2a:
29:26:66:34:06:79:b9:04:63:b8:46:87:5a:51:12:5e:e7:ec:
ce:6f:b3:d5:96:47:ce:4d:ee:b5:3e:b0:0d:6f:4a:b9:a1:2a:
13:19:48:50:73:61:b0:47:b8:d5:dd:ff:88:4e:dc:5a:b7:b2:
e2:b5:c6:18:b8:eb:4f:d5:05:63:3d:ec:94:f0:ab:e7:99:80:
dc:fc:71:32:75:2b:e2:7b:83:0c:f8:92:10:05:62:38:2a:e2:
4d:d4:67:23:26:ed:f0:5f:80:83:f0:4a:c3:b1:36:10:67:3b:
c9:a3:77:33:fd:ba:f0:81:54:c0:14:31:dc:7b:04:05:f4:8f:
37:f3:dc:75:cb:03:c5:6d:bc:99:52:0d:45:62:88:90:d6:75:
94:f0:03:91:3b:0b:42:b3:43:af:00:ae:f7:d5:62:5d:a3:44:
52:b2:c3:bb:57:60:c7:66:0a:7d:75:2a:7c:cd:56:8b:17:ba:
78:e2:9f:4b:ab:ba:47:a3:8c:e4:e5:06:3e:a6:4e:2b:0a:a7:
bb:1d:94:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:11:44 2025 by rpki-client