Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30c1be24-af3a-399f-b939-a0e3f97f2ffc.roa
File: 30c1be24-af3a-399f-b939-a0e3f97f2ffc.roa (raw, json)
Hash identifier: vuLnFbZKRe9wca/sVw3IUAQS33zmh+xnozq5pvgiPag=
Subject key identifier: C2:4A:F1:BF:35:DC:79:BF:E6:6C:29:34:E1:68:F9:44:4B:10:BF:4C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3E6702D684BBE14E7CA1DB80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30c1be24-af3a-399f-b939-a0e3f97f2ffc.roa
Signing time: Tue 14 Jun 2022 12:00:00 +0000
ROA not before: Tue 14 Jun 2022 12:00:00 +0000
ROA not after: Wed 20 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 3.192.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3e:67:02:d6:84:bb:e1:4e:7c:a1:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 14 12:00:00 2022 GMT
Not After : Jul 20 04:00:00 2022 GMT
Subject: CN=9d844592-5579-4042-a51b-f2e6bc151b5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:25:50:a9:2b:c2:66:2c:14:3d:c4:2a:6a:87:
c0:bf:73:1c:4c:73:3b:6a:36:17:1a:0f:1a:c8:4c:
15:6b:45:64:6e:8b:fa:72:e0:11:08:23:ac:db:50:
9c:ea:1e:1d:7e:6c:1a:96:68:69:ba:d9:d9:0b:b5:
c5:dc:f4:66:3a:07:b6:99:15:e3:57:e5:e6:33:9c:
69:1b:31:cd:a5:c0:52:b6:61:59:b4:12:d0:a5:02:
9d:dd:c8:a4:26:58:1e:73:c1:7d:69:0f:a3:56:85:
e5:89:ee:67:63:8f:27:85:0f:93:cb:50:29:6e:08:
78:c1:dd:4e:a4:8f:e0:52:cc:16:4d:26:5a:08:ce:
1d:5f:fe:d7:ab:7a:39:d9:8a:ae:22:9c:af:76:e1:
0d:dc:ac:0f:19:71:4b:6d:50:f3:7e:8c:d9:f3:bd:
59:1a:23:3c:0b:aa:8e:d1:4a:82:50:0d:f4:6d:ac:
6a:b4:c2:16:cd:85:ad:81:fe:51:88:c6:7f:19:3d:
64:11:52:08:3d:da:89:5f:97:a1:38:18:aa:15:a9:
a6:24:22:48:59:67:d1:6e:34:7f:c6:20:08:b2:d8:
4d:9d:75:26:b3:f0:8a:9c:4f:87:fc:f5:b0:83:bd:
f2:b8:49:7e:54:17:d7:29:e2:6e:91:26:92:64:a2:
52:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:F1:BF:35:DC:79:BF:E6:6C:29:34:E1:68:F9:44:4B:10:BF:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/30c1be24-af3a-399f-b939-a0e3f97f2ffc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.192.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:ad:0c:b8:9d:73:aa:75:3a:d4:a6:84:96:d0:ff:ac:41:f1:
fe:ac:16:89:28:92:b8:c8:a2:2a:8e:3c:fb:15:92:2f:d8:e7:
79:99:e7:f8:fe:cb:04:85:4e:4e:1b:1a:86:30:29:70:81:bd:
60:2f:10:29:05:a5:a3:26:7f:76:4c:86:67:26:2f:62:8e:42:
2e:b5:8e:4a:b6:42:dd:71:3e:12:c1:23:c0:c4:1a:86:fe:5d:
f8:8e:f8:b6:df:9f:ef:ff:62:ed:dd:63:92:20:c8:64:3f:ad:
1d:e7:d3:af:99:3c:f3:cf:f2:4f:fa:0e:82:3c:c9:88:a3:d2:
71:7a:fa:3a:90:4f:a5:c2:37:b0:fc:10:94:7a:58:a1:01:92:
d4:bd:5f:1e:e0:c6:e8:e6:43:e6:be:09:58:25:d9:b6:1a:d6:
58:0e:4a:8b:d2:e7:5d:47:11:8a:8d:68:72:a2:9d:7b:cd:0a:
46:12:c1:4f:96:f5:4b:76:f6:c2:a3:47:b2:0a:7d:19:9e:11:
78:3a:50:4e:29:39:86:d7:86:57:a6:d2:6b:f3:03:92:93:41:
01:01:b2:40:dd:f1:9f:0b:39:97:92:7a:6b:b0:dd:75:9b:77:
df:06:53:6c:3f:7b:63:8b:00:33:2c:fd:4c:b8:02:1d:4d:e8:
56:6c:a4:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:30:27 2025 by rpki-client