Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3db3f976-d0b1-3799-bd7a-ae8d38d9843e.roa
File: 3db3f976-d0b1-3799-bd7a-ae8d38d9843e.roa (raw, json)
Hash identifier: bPKvdHan1SWZNsupkQe367jRmMSHj1wqbFQ+GngPk5M=
Subject key identifier: 1A:A9:39:B2:4B:B4:5D:F1:15:10:68:17:25:0A:0C:67:51:05:DD:E8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC31F492E807E791544AC8D20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3db3f976-d0b1-3799-bd7a-ae8d38d9843e.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 3.0.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c3:1f:49:2e:80:7e:79:15:44:ac:8d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=e12e2e89-e2d4-493a-ba76-c0e4f3a70547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:bd:43:91:63:36:b9:22:e0:0d:b2:e4:fb:17:
58:23:b6:64:4f:6b:76:0e:d6:5c:21:2d:45:99:3a:
db:5c:fa:b8:d4:91:19:51:c2:d1:1b:84:9e:99:0a:
97:db:ec:4a:39:88:3d:b6:cc:bf:06:58:30:f5:02:
9e:8a:24:cf:f0:7c:2c:8e:71:6c:3a:f7:ca:7b:22:
35:4f:4e:b1:74:ec:36:22:e1:6b:3e:ba:1f:04:a3:
aa:57:9a:c2:e2:fe:35:bc:26:71:cf:18:83:dd:5c:
35:9d:73:f3:49:94:a0:f6:f8:0e:54:d4:0f:bb:ce:
65:f8:01:a2:1a:e5:00:3d:ee:05:7e:19:4a:87:f3:
be:5d:b3:11:b9:b9:30:27:44:42:ef:1d:69:64:89:
dc:64:9b:4c:9e:41:d1:5b:a8:e8:84:34:8f:92:1e:
d4:3e:59:50:92:80:9a:db:b8:3c:77:c0:d9:79:91:
ce:1a:d0:54:cf:49:0f:f2:20:b2:7b:93:72:f1:06:
56:fd:1b:b9:89:a6:83:e7:ff:a0:98:4a:f7:4d:b0:
e5:d4:c2:db:75:f6:5a:9c:4c:36:71:a3:b9:eb:5e:
63:2a:c4:5a:73:ee:16:d3:91:17:18:92:ea:73:fa:
85:1d:2e:26:94:2b:0e:83:4c:83:3b:de:c0:c6:77:
79:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A9:39:B2:4B:B4:5D:F1:15:10:68:17:25:0A:0C:67:51:05:DD:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3db3f976-d0b1-3799-bd7a-ae8d38d9843e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.0.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:4e:22:3a:25:3e:87:2c:c4:1b:e0:74:df:9c:eb:5d:ac:d4:
c5:fb:12:59:f5:6b:fb:06:32:ab:f3:71:5f:4c:70:26:d4:bd:
55:b6:f6:c8:00:a1:aa:d2:94:31:93:ec:89:ca:c2:e7:a9:4e:
69:e6:34:34:39:63:d0:b0:31:1e:66:13:0f:07:f9:30:dc:c7:
54:0f:15:1c:c6:d8:8b:12:bf:0d:39:ff:31:c0:e4:19:41:33:
e6:18:44:5a:5f:8d:91:03:df:95:ae:f7:a9:2b:3f:fa:26:d1:
4e:53:27:92:1a:f8:f8:3a:30:8a:b8:06:58:ba:b5:f4:1a:b0:
fd:24:f5:7e:95:69:c1:20:bb:a8:56:ed:69:20:0b:d5:a5:4d:
5e:c4:8d:0b:96:47:31:1b:0c:27:c0:aa:eb:c3:a7:74:e8:ad:
96:da:f8:95:95:bd:b5:d6:36:90:c6:d5:75:2a:5a:71:34:f6:
08:a4:da:52:4e:00:03:3f:10:08:67:24:2a:a9:74:f6:60:db:
97:21:99:b4:fe:43:e6:0e:d5:ac:2e:51:8a:55:74:db:e6:17:
78:fc:66:84:18:b7:a5:07:1c:a7:8b:93:c2:ff:f0:54:95:19:
28:0e:7d:13:cd:64:6d:c8:7f:9d:02:95:f9:52:ec:a1:d2:5f:
62:59:ab:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:01:35 2025 by rpki-client