Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dd24dd2-1233-320c-8c44-8a8567b71beb.roa
File: 1dd24dd2-1233-320c-8c44-8a8567b71beb.roa (raw, json)
Hash identifier: IXE7LwbKVrDsKXNzOepNjBqfsZnHIdDmCHJJcx/KPn0=
Subject key identifier: 59:1F:88:4D:AD:53:C5:E6:0D:E3:8D:18:5A:AE:75:5C:6D:C9:A7:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0561CB10DD0DB767F82E5E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dd24dd2-1233-320c-8c44-8a8567b71beb.roa
Signing time: Wed 23 Feb 2022 05:00:00 +0000
ROA not before: Wed 23 Feb 2022 05:00:00 +0000
ROA not after: Wed 30 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 3.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:05:61:cb:10:dd:0d:b7:67:f8:2e:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 23 05:00:00 2022 GMT
Not After : Mar 30 04:00:00 2022 GMT
Subject: CN=e8613e98-af9b-479d-97a7-0d49a8b7f3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1d:51:eb:40:d8:40:f7:8f:0c:27:0d:21:b3:
04:62:d4:91:3e:41:7a:7f:20:b5:d7:28:f4:04:9a:
bb:d7:a2:e2:34:16:57:c8:3e:34:3a:22:4a:4a:f4:
95:ee:5a:57:ff:70:a0:5a:01:41:21:a8:a3:07:b1:
a7:07:6e:05:4d:f5:f7:db:9c:94:82:46:f2:33:83:
90:ca:40:64:80:72:b0:f2:b1:d0:4e:e1:84:4e:49:
d1:5e:b7:68:a4:9a:35:43:ad:13:80:d0:eb:a1:8d:
36:f9:e5:22:47:a2:22:7a:ef:12:73:da:29:5b:20:
bf:46:1d:13:d4:c8:f5:fe:c4:70:63:bc:64:e9:8e:
bf:f8:d9:bc:91:79:38:cc:79:4c:51:af:41:3f:d2:
4a:d1:e0:a4:c4:11:ce:42:34:7a:f9:17:79:94:94:
1f:84:f3:eb:be:35:a9:18:dd:78:24:27:46:0f:b2:
8d:e8:60:d7:6c:86:03:3d:b7:9e:78:c7:ce:1f:1e:
9e:67:98:ad:9b:77:43:0b:3d:f1:ae:b5:ee:c5:08:
d5:03:ce:ac:a9:30:59:ff:a0:da:86:36:32:17:98:
d2:3b:2d:45:6d:c0:75:bf:87:2a:4b:9a:14:1c:05:
74:6c:82:df:cc:1b:57:b7:f0:6c:19:7d:c2:64:7a:
67:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1F:88:4D:AD:53:C5:E6:0D:E3:8D:18:5A:AE:75:5C:6D:C9:A7:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1dd24dd2-1233-320c-8c44-8a8567b71beb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:cf:b4:c9:71:47:bf:08:4c:92:fe:c6:50:2b:1f:04:78:55:
9f:c0:d1:d0:f2:eb:5a:c4:24:cf:2c:c0:5b:dd:49:c9:a5:2a:
8f:9a:30:d3:69:5a:d0:90:68:2b:8c:2a:eb:d5:64:eb:92:7e:
95:20:31:4a:9d:02:98:a5:99:19:5b:8f:26:23:8e:fd:c4:eb:
ec:9e:d6:2a:04:59:18:a4:66:eb:7a:70:ba:99:ac:70:ed:a3:
46:3e:69:31:62:2f:95:81:4a:d7:f5:6a:46:37:7e:62:ab:96:
11:ae:97:39:ad:8a:62:9d:b6:8a:bf:49:db:db:eb:74:d1:3e:
d1:54:cd:bf:67:99:d0:d7:43:e3:15:ab:09:4e:a5:53:6a:73:
e5:19:62:17:6d:3b:18:1e:fe:d4:a0:ec:43:63:25:c8:31:12:
c8:15:6d:cb:56:bf:b9:cf:54:c8:8d:24:1a:d1:5d:0d:ce:53:
c7:c8:90:68:72:84:4e:6c:61:8e:df:3a:ba:33:a1:ac:8b:44:
10:7a:b0:6d:7a:b6:41:b6:63:74:33:e9:e6:b4:d9:6e:fb:ba:
60:67:6d:6f:d3:e9:b2:b0:2d:c5:c5:d7:09:96:a8:cf:c0:c0:
67:bf:be:f9:f8:eb:1b:a7:1d:3d:a4:ad:d0:f4:2f:be:ca:2f:
0d:eb:58:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:08 2025 by rpki-client