Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a97e04f-18ec-3289-95ff-197efb57fcf0.roa
File: 2a97e04f-18ec-3289-95ff-197efb57fcf0.roa (raw, json)
Hash identifier: FgQQSFs68ix+zCcghGfHFagRCx+ZmPGM+qWDRz6F6go=
Subject key identifier: AB:B1:83:E2:F7:14:52:70:38:AB:68:0D:76:0C:D9:DB:F0:CD:BE:73
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFA50F410AF35F05271437180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a97e04f-18ec-3289-95ff-197efb57fcf0.roa
Signing time: Sun 20 Nov 2022 12:00:00 +0000
ROA not before: Sun 20 Nov 2022 12:00:00 +0000
ROA not after: Mon 26 Dec 2022 05:00:00 +0000
asID: 7224
IP address blocks: 3.4.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fa:50:f4:10:af:35:f0:52:71:43:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 20 12:00:00 2022 GMT
Not After : Dec 26 05:00:00 2022 GMT
Subject: CN=04f411c9-b314-49db-b57b-766ba4468677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:3a:7f:27:1b:ed:6b:1e:4f:a5:58:8e:75:5f:
dd:b3:bd:da:fb:7f:ae:16:4f:2a:c4:94:4b:d1:66:
16:58:ac:a0:8e:03:3e:fa:21:d7:3e:fd:65:30:2e:
d9:57:b1:97:af:8b:b3:71:1f:d3:9c:52:e6:ec:ed:
7d:62:f9:49:87:18:88:34:85:51:db:b8:8f:42:d5:
9d:11:26:07:4e:a9:2b:9b:97:98:48:87:3e:e8:f2:
8c:9c:29:13:ee:73:76:84:d4:2e:eb:e2:d7:b0:54:
70:45:db:23:21:a8:f5:57:b8:8f:81:55:1d:d2:e4:
81:69:4d:cb:8e:17:db:56:80:e4:a6:19:64:ec:56:
98:a6:ce:b1:5a:b1:f6:be:fd:3c:03:9a:6d:93:04:
06:8b:c4:58:4c:13:bf:65:99:66:a0:8a:11:33:07:
a0:1b:9b:71:78:4d:5b:04:18:41:ff:27:37:ca:3f:
b7:93:1e:af:1d:68:88:40:78:55:49:1e:11:5c:4e:
4a:c1:f4:1b:09:44:25:4e:f9:5e:4e:e9:69:ba:72:
b5:9e:e4:07:c8:04:0c:b8:b4:e9:e7:18:b4:0b:b1:
59:05:e5:9e:92:ca:78:3f:9a:c2:cf:67:22:3c:06:
2f:e7:0c:67:8f:bc:99:62:ab:d5:00:45:20:9d:d8:
67:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B1:83:E2:F7:14:52:70:38:AB:68:0D:76:0C:D9:DB:F0:CD:BE:73
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2a97e04f-18ec-3289-95ff-197efb57fcf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:46:78:4c:d2:a7:eb:44:80:39:47:80:2f:89:c1:f7:76:9d:
6e:7c:4d:9f:74:6a:76:64:11:f8:e5:92:0b:a7:fb:f4:c2:fc:
2c:d7:1e:9a:5c:e3:95:81:25:09:19:54:e1:8d:0f:ab:50:6b:
83:91:65:22:b0:4f:39:61:12:50:da:df:6a:cd:1b:78:1a:26:
ab:1e:c4:67:18:cb:b4:cc:ea:50:57:e7:b1:27:6d:a3:fa:77:
96:aa:f1:9c:10:c8:93:48:3d:db:56:e4:01:25:7f:38:be:71:
a4:57:ca:d4:ad:7c:a7:f1:7d:24:21:fa:df:7b:66:0e:d8:a5:
7e:75:da:26:c9:71:db:6e:f0:b4:31:c0:04:f1:ea:d9:e6:fc:
e3:af:f7:af:36:30:a6:df:04:7c:bb:95:a1:24:9f:fe:e5:92:
95:52:87:05:91:76:6a:56:0b:92:d3:7e:f5:14:f4:f5:e9:ee:
f5:0d:37:95:e1:b3:38:17:e6:97:02:da:d4:08:4c:7c:a8:54:
47:e9:35:23:41:b3:5b:78:fa:ad:d1:7e:e9:63:29:d0:d5:92:
62:dc:aa:e3:ba:4f:a4:f3:21:96:e4:90:84:4e:fd:e6:22:5d:
93:91:0c:60:85:ed:8a:e5:ad:9a:1d:22:85:18:10:1e:a3:c1:
bc:97:27:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/6UPQQrzXwUnFDcYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyMDEyMDAwMFoXDTIyMTIyNjA1MDAwMFowLzEtMCsGA1UEAxMk
MDRmNDExYzktYjMxNC00OWRiLWI1N2ItNzY2YmE0NDY4Njc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijp/Jxvtax5PpViOdV/ds73a+3+uFk8qxJRL
0WYWWKygjgM++iHXPv1lMC7ZV7GXr4uzcR/TnFLm7O19YvlJhxiINIVR27iPQtWd
ESYHTqkrm5eYSIc+6PKMnCkT7nN2hNQu6+LXsFRwRdsjIaj1V7iPgVUd0uSBaU3L
jhfbVoDkphlk7FaYps6xWrH2vv08A5ptkwQGi8RYTBO/ZZlmoIoRMwegG5txeE1b
BBhB/yc3yj+3kx6vHWiIQHhVSR4RXE5KwfQbCUQlTvleTulpunK1nuQHyAQMuLTp
5xi0C7FZBeWeksp4P5rCz2ciPAYv5wxnj7yZYqvVAEUgndhnDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuxg+L3FFJwOKtoDXYM2dvwzb5zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMmE5N2UwNGYtMThlYy0z
Mjg5LTk1ZmYtMTk3ZWZiNTdmY2YwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAwQEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF9GeEzSp+tEgDlHgC+Jwfd2nW58TZ90anZkEfjlkgun+/TC/CzXHppc
45WBJQkZVOGND6tQa4ORZSKwTzlhElDa32rNG3gaJqsexGcYy7TM6lBX57EnbaP6
d5aq8ZwQyJNIPdtW5AElfzi+caRXytStfKfxfSQh+t97Zg7YpX512ibJcdtu8LQx
wATx6tnm/OOv9682MKbfBHy7laEkn/7lkpVShwWRdmpWC5LTfvUU9PXp7vUNN5Xh
szgX5pcC2tQITHyoVEfpNSNBs1t4+q3RfuljKdDVkmLcquO6T6TzIZbkkIRO/eYi
XZORDGCF7YrlrZodIoUYEB6jwbyXJyk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:05 2025 by rpki-client