Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11b0f2fc-dd0d-36ba-b3b7-4e238cc4e95e.roa
File: 11b0f2fc-dd0d-36ba-b3b7-4e238cc4e95e.roa (raw, json)
Hash identifier: U1w4Y/CB1O7L2UkRMpnjbfXGDkw59Sl3df/XhiWSYWQ=
Subject key identifier: 24:1C:87:63:16:41:20:D4:A9:16:01:67:BC:55:E9:41:E3:4D:A2:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9C6B3587883A02725317F0E0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11b0f2fc-dd0d-36ba-b3b7-4e238cc4e95e.roa
Signing time: Sun 17 Jul 2022 12:00:00 +0000
ROA not before: Sun 17 Jul 2022 12:00:00 +0000
ROA not after: Mon 22 Aug 2022 04:00:00 +0000
asID: 7224
IP address blocks: 3.3.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9c:6b:35:87:88:3a:02:72:53:17:f0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 17 12:00:00 2022 GMT
Not After : Aug 22 04:00:00 2022 GMT
Subject: CN=87295cb3-bb61-4439-b6e7-aafa992e5f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:6b:65:e0:6c:75:4d:ff:8a:a1:d7:45:0d:b8:
2e:a0:98:9a:8c:f9:e7:a8:85:ba:fb:87:c9:2a:2a:
2b:31:0f:25:86:e6:e9:c0:2a:84:bf:df:ef:49:3c:
76:ac:f9:e8:76:08:e9:20:cb:ae:01:e5:d9:df:5b:
d5:e1:e8:a6:ce:56:07:21:40:ac:49:79:f7:8e:de:
e7:88:ab:b7:ae:27:d7:54:48:7a:72:cc:d8:d7:1d:
4f:3f:d7:2d:cb:0e:29:05:72:59:7e:3b:9e:f3:85:
90:30:32:15:ff:95:65:2e:fd:40:26:2c:7f:a2:31:
ca:e5:fd:c1:a7:59:42:9e:fa:b7:16:9c:ff:fe:d9:
23:82:d8:bb:7b:b6:3a:f7:57:1c:c1:4a:09:28:a6:
d1:e0:e5:e9:0b:3b:d9:a0:c5:5c:a9:07:11:fe:a0:
36:8a:ab:71:6c:7c:e6:2e:52:eb:c4:aa:3b:58:c8:
a0:e4:e7:92:2d:3b:63:eb:e0:95:c3:15:90:02:df:
0f:e5:30:04:e5:d8:ae:ce:b9:39:b6:e0:5a:d4:cf:
e8:03:13:22:74:44:22:c6:97:af:10:54:cb:da:0a:
2e:bb:f7:6a:d4:7a:6b:be:26:ac:21:b6:ca:a2:a3:
6d:48:f6:b4:2a:e1:1b:73:3c:d8:f3:f2:4a:64:05:
44:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:1C:87:63:16:41:20:D4:A9:16:01:67:BC:55:E9:41:E3:4D:A2:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/11b0f2fc-dd0d-36ba-b3b7-4e238cc4e95e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.3.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:a2:61:d8:03:ef:a4:23:8f:cc:21:df:b0:d2:de:e1:b5:cc:
6e:52:c4:a4:95:a8:13:55:b3:1b:01:f1:39:0b:5c:7f:fa:0b:
4c:52:75:2b:9d:95:8b:c3:f2:20:f4:dc:da:0d:3f:0b:58:ed:
cc:dd:c6:a2:23:8c:0a:0e:3f:96:a3:a2:68:35:c3:1d:e3:b4:
09:12:a5:88:81:ba:df:6f:e2:c9:29:85:2a:c7:7f:5e:28:9c:
f9:a3:f1:42:90:80:59:5e:61:bd:94:e4:8b:f8:37:b0:9c:30:
6b:89:ae:7f:36:6b:cc:dc:36:77:f3:3d:d6:1c:28:48:e6:18:
15:2a:d2:4b:2b:16:76:35:81:0a:8e:2f:bd:e1:f7:89:9b:33:
66:74:8d:63:f7:27:9f:c4:68:b8:ac:7e:ef:90:de:a1:20:fd:
89:86:3f:56:a2:53:29:43:3e:24:8d:30:07:c7:9d:c2:97:94:
b7:68:88:31:d1:aa:46:14:a6:9a:e8:7b:3a:af:b0:da:26:d7:
e3:1b:6b:25:b5:06:15:81:62:c3:54:58:32:df:f3:b5:73:96:
99:a9:5e:41:a7:fa:bd:b1:96:7e:c2:ad:56:c0:9d:72:9a:10:
ce:e3:ea:79:68:b7:9c:aa:be:31:98:3a:aa:5b:01:28:28:07:
ca:e3:a9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:14:01 2025 by rpki-client