Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e613a3a-38c1-3859-b14f-ba5eb502f6bb.roa
File: 1e613a3a-38c1-3859-b14f-ba5eb502f6bb.roa (raw, json)
Hash identifier: ymoQt9t5OQF330pe1GZLeH4/1CnPzXa86FuJ4wvthNc=
Subject key identifier: FA:40:A6:6D:17:77:3C:92:8C:13:60:3C:10:D3:51:0E:49:48:7B:16
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C900A65102856FBE6325BA680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e613a3a-38c1-3859-b14f-ba5eb502f6bb.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 3.64.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:90:0a:65:10:28:56:fb:e6:32:5b:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=e3202a7e-2626-44d9-82b3-859b7baa3750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:60:da:2b:c3:df:89:a8:ff:50:af:7f:47:
29:e6:0b:be:8b:0c:e5:a7:1b:99:e7:a0:48:38:8f:
64:4e:a7:d4:9a:d3:2a:ca:63:56:b1:a5:5a:34:1f:
c8:88:b0:7a:59:c5:ec:5b:bd:bf:ac:38:cd:51:06:
5e:23:2a:a7:67:28:4e:72:97:1f:72:a3:fd:6d:5c:
1b:29:49:a4:6c:a8:bc:5b:6f:a6:80:50:8b:47:6c:
2c:27:2c:d8:0a:d0:ed:b3:4d:55:2f:62:7c:b3:dd:
46:13:eb:84:b6:87:db:27:e9:4e:e4:33:e2:68:8b:
f4:45:12:f0:6c:9e:c4:90:33:df:63:a5:dc:97:65:
4f:8b:ae:37:aa:d4:76:9c:26:48:53:79:c6:9f:43:
c0:9e:44:08:c4:60:b0:31:b9:57:be:77:c2:f2:9a:
28:e8:e3:60:f0:ba:61:27:66:14:63:b2:e5:eb:a6:
94:96:08:c1:c8:df:6e:57:e2:87:89:1a:63:a5:35:
d3:b9:a7:a8:8f:c2:81:11:9a:96:93:8f:6c:eb:cf:
77:77:4d:0d:23:ae:6b:3c:33:79:f4:83:a5:d0:80:
1d:6d:69:35:68:f8:b6:7a:0c:00:21:1d:ee:21:a6:
fc:d5:ea:d6:ff:c4:ce:88:8d:e2:50:e0:d6:bc:ee:
8a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:40:A6:6D:17:77:3C:92:8C:13:60:3C:10:D3:51:0E:49:48:7B:16
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1e613a3a-38c1-3859-b14f-ba5eb502f6bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.64.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:29:8a:45:45:8c:b4:34:84:55:39:64:c3:74:00:1d:0c:1f:
18:bd:b2:12:ed:99:e9:80:33:36:9b:70:33:19:67:c6:0a:7b:
b5:a6:e4:2a:a1:3b:be:0f:18:5b:0e:f9:bb:b5:7a:6d:f9:ea:
34:83:d7:16:95:36:f1:26:53:ac:8f:7f:48:25:a9:68:f2:f4:
7d:93:81:e1:6a:3e:71:ed:f2:40:78:59:e9:bc:50:4a:81:95:
1a:01:b2:3d:b0:3c:e3:49:fd:4f:fc:ad:30:25:3d:3c:64:a5:
ef:e7:af:26:85:ba:bf:75:6d:f2:ac:1e:52:74:9f:35:fd:0a:
3b:b9:0e:3a:25:b2:95:a4:16:f1:86:44:ae:ab:b0:dc:7f:4e:
a0:5f:f9:d6:25:4f:2c:c7:90:fe:9c:65:21:43:1b:43:59:0d:
ab:5b:ad:c1:59:35:48:95:c9:63:c4:b6:7c:07:22:3f:d4:0c:
51:b9:40:6a:15:ea:d2:bb:e8:39:f5:e5:b3:fd:f2:95:81:9e:
af:d2:61:cb:1c:c8:9a:32:be:ce:2c:0b:67:64:9a:ac:12:f5:
f5:48:9f:b3:64:e2:59:05:11:3f:d5:09:5d:bb:ee:19:c4:8f:
9a:18:c8:e5:af:cd:b9:d3:a3:a2:86:d1:f0:0e:15:57:d6:32:
32:90:0d:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:33:19 2025 by rpki-client