Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f284921-e26a-3ce7-b318-0ac125b442f6.roa
File: 2f284921-e26a-3ce7-b318-0ac125b442f6.roa (raw, json)
Hash identifier: TJ1J/MyQA2KYcvkhrBlyh9dJt3lvTzTpKgiU98zJdh8=
Subject key identifier: FF:B0:13:E6:FB:64:14:9D:08:1B:27:6D:84:A2:58:04:5D:D5:EA:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840BDDAC70EF55E35E581245C30
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f284921-e26a-3ce7-b318-0ac125b442f6.roa
Signing time: Sun 29 Jan 2023 12:00:00 +0000
ROA not before: Sun 29 Jan 2023 12:00:00 +0000
ROA not after: Mon 06 Mar 2023 05:00:00 +0000
asID: 7224
IP address blocks: 3.4.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:bd:da:c7:0e:f5:5e:35:e5:81:24:5c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 29 12:00:00 2023 GMT
Not After : Mar 6 05:00:00 2023 GMT
Subject: CN=9b0e3673-8e17-4b08-a119-bfc5068bbdf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:70:65:79:89:54:97:42:02:16:c2:a6:6b:61:
95:ed:11:7e:8e:b8:73:21:64:49:ad:53:46:67:ab:
5d:41:5a:19:39:04:49:ce:21:08:23:93:b5:48:6b:
2e:24:50:c6:0c:97:ee:90:e2:f1:5f:3b:b5:d0:d4:
98:4a:f2:40:86:99:d7:4b:f1:82:9d:a7:c7:0c:1e:
8b:39:ad:51:d4:15:31:22:a6:0c:bf:a6:26:40:a3:
47:7e:78:44:85:f3:d1:30:f5:33:f4:0a:92:ad:d6:
56:d8:07:7c:cf:ef:41:62:13:db:ad:cb:75:58:47:
80:70:6b:a5:41:26:ef:dd:74:32:44:20:52:52:7c:
da:92:b3:4e:aa:e4:5d:8b:82:be:68:0b:55:a4:64:
b6:07:5b:cc:81:85:3b:36:30:fe:5f:54:08:ab:f5:
15:95:34:2a:fe:f6:ea:6d:18:be:59:4e:d4:69:b0:
26:54:db:55:51:13:5a:4a:c9:1b:90:28:29:ee:9a:
0d:02:30:03:0b:05:19:06:e3:99:01:b8:57:f0:9d:
b3:11:ff:58:24:b5:ee:63:ba:db:18:21:27:df:8d:
7b:89:25:c6:4e:d1:7a:e7:87:e2:eb:fe:8b:5b:66:
dd:e7:ff:ab:3c:2b:e8:df:49:9f:a9:09:e9:3e:dc:
e9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:B0:13:E6:FB:64:14:9D:08:1B:27:6D:84:A2:58:04:5D:D5:EA:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f284921-e26a-3ce7-b318-0ac125b442f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:3d:a2:68:d3:22:74:f8:72:f4:9a:40:55:d2:83:fd:32:10:
f2:7a:f7:2b:65:bf:a5:2e:ca:83:ec:73:85:73:20:c6:28:10:
32:5a:27:70:90:7b:80:6a:5c:23:26:40:77:07:e0:62:4c:b0:
02:19:53:d6:89:ec:4c:ba:04:f8:39:c6:76:d4:d3:98:bc:5e:
5f:3d:6d:56:80:a3:83:2c:1e:93:29:32:60:39:75:e4:05:8f:
f3:d5:ad:49:02:00:e5:c3:59:fb:cd:31:79:7c:af:87:33:f9:
f2:8d:e2:96:b9:b9:18:be:8e:7e:48:8f:3d:c0:fa:34:86:1f:
54:e1:57:e7:5c:13:58:9c:40:7c:21:49:f1:21:a9:4d:f2:dd:
91:65:a9:65:da:a1:14:ee:e1:2d:3f:8b:7d:39:53:3e:4b:ff:
58:2b:b1:da:b2:c8:a5:fb:7d:ee:27:b9:3d:14:3b:37:59:41:
3f:28:7a:5a:c4:16:0b:fa:25:72:10:bc:c7:f7:c7:34:ea:66:
17:4f:e5:3c:93:8f:a5:6b:36:f0:ef:b6:c5:d9:81:c1:92:c5:
61:0e:22:86:59:01:53:c5:81:db:41:b4:0c:bc:fa:08:45:dc:
94:3b:31:42:73:2e:ac:36:fa:d3:e6:a6:fc:50:93:a9:a2:37:
17:5b:59:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 04:15:26 2025 by rpki-client