Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f5afde7-f3c0-3fb2-89a9-6ef3c26e7aca.roa
File: 3f5afde7-f3c0-3fb2-89a9-6ef3c26e7aca.roa (raw, json)
Hash identifier: p1cibfVNUPF2rw5vwIpapAk/Orh7AEsZGTFe0bOWuxI=
Subject key identifier: 38:DA:B2:C5:D6:69:C3:14:65:2E:D8:A8:54:79:69:5A:EC:BE:A5:3E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9E2181161923C11007F14400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f5afde7-f3c0-3fb2-89a9-6ef3c26e7aca.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 3.128.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:21:81:16:19:23:c1:10:07:f1:44:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=51b1e780-84d3-4841-955c-355c8970d7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:fc:b8:99:60:ad:50:c0:87:65:c9:b9:8e:
ff:49:41:da:0f:84:e1:34:26:7d:90:27:d8:3d:9c:
c8:84:d9:db:9b:0d:4d:a6:85:84:bc:99:cb:6e:8e:
fe:c0:5b:db:de:bc:fd:09:4a:e2:f5:9a:e8:f7:45:
91:fc:9c:a9:cb:e7:a9:f3:83:84:2e:ab:ad:7a:67:
4b:c5:48:24:30:13:87:eb:26:24:10:22:47:1e:77:
15:7e:79:34:36:3b:44:52:e4:46:c4:0b:23:88:14:
cc:db:12:00:20:6c:e7:58:0f:fb:05:d4:b1:0a:ad:
0d:c6:42:13:7c:b6:f6:a9:7f:bf:54:5a:3f:ea:5f:
fa:26:5f:23:4a:0c:99:e9:08:8c:74:81:7d:b9:1b:
67:28:5b:1e:6a:34:54:c0:34:3f:e1:ad:93:4d:d9:
3e:8e:ee:15:80:46:15:3a:b7:a4:48:09:64:10:6b:
93:8c:22:ab:45:fd:e7:88:d9:f9:39:c8:9b:cb:ab:
56:6c:63:8e:cf:e1:6c:ee:f3:c6:39:20:41:a7:c0:
15:de:3c:e2:96:38:55:6a:c7:58:95:81:0d:8f:d0:
9e:3c:3c:01:26:c5:7b:f5:2e:79:fe:4d:b7:39:c6:
55:3c:86:60:74:ae:d3:be:ac:b4:8e:2a:19:4a:06:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DA:B2:C5:D6:69:C3:14:65:2E:D8:A8:54:79:69:5A:EC:BE:A5:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f5afde7-f3c0-3fb2-89a9-6ef3c26e7aca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.128.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:46:74:5b:e1:f9:b1:b8:45:c7:f6:4a:54:0e:8d:51:b4:14:
50:ae:2f:c4:db:6f:fb:fb:ef:e8:c9:7a:46:a0:73:fd:53:93:
a7:b7:da:f4:70:1c:66:c8:29:4b:c3:7a:98:33:e7:c4:54:0b:
de:33:00:2f:98:1e:55:10:89:05:16:f6:4a:fa:ff:b8:95:cb:
8e:74:04:0b:67:6b:8e:59:36:e5:85:f3:4d:e4:79:a8:b2:ca:
39:44:d0:06:4b:d3:be:f0:c0:88:8e:b7:e0:de:9f:bc:de:8a:
f2:0c:a6:c5:c9:31:5c:29:08:e5:f9:3d:e4:3c:33:56:23:4e:
46:e6:07:97:ef:de:fa:b5:31:25:83:40:d6:01:e9:b0:95:32:
72:c8:1f:6f:ef:a3:d5:55:a3:00:c5:37:f8:79:c9:ea:a9:96:
e5:93:f6:47:5f:66:24:fa:ef:18:8d:bb:0e:12:d7:cb:b2:0d:
84:0e:72:d6:da:0e:a5:83:83:e1:81:61:87:80:8d:43:4b:e4:
bf:d6:68:65:ea:c6:2e:99:dd:5f:a9:ce:9e:72:74:13:05:df:
80:f8:1b:19:33:95:d5:0b:c3:52:91:93:26:a2:b0:6f:c8:9f:
46:10:cb:4f:a7:ec:7c:58:b0:ed:55:62:29:cf:95:a5:52:dc:
c7:bb:71:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:16:26 2025 by rpki-client