Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50bef923-6ce2-3ae8-b9c3-cb3529ea5ccd.roa
File: 50bef923-6ce2-3ae8-b9c3-cb3529ea5ccd.roa (raw, json)
Hash identifier: O6KXx1XLXJS7klU0JbSsQoUIS7JrxsBq04Ts5US3hsw=
Subject key identifier: C1:BF:BE:7F:3A:E5:78:C8:5F:B4:41:25:F9:1B:81:E5:1B:80:47:F3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584021844C59FD32273724901900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50bef923-6ce2-3ae8-b9c3-cb3529ea5ccd.roa
Signing time: Sun 04 Dec 2022 12:00:00 +0000
ROA not before: Sun 04 Dec 2022 12:00:00 +0000
ROA not after: Mon 09 Jan 2023 05:00:00 +0000
asID: 7224
IP address blocks: 3.4.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:21:84:4c:59:fd:32:27:37:24:90:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 4 12:00:00 2022 GMT
Not After : Jan 9 05:00:00 2023 GMT
Subject: CN=fc27a539-1c23-454d-b2b6-c3573c15f7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4b:25:97:97:61:37:dc:92:0b:31:ea:01:0f:
1d:d0:bb:7e:d8:3c:10:01:70:0c:2e:ab:fc:62:44:
ee:44:35:55:38:0f:03:91:ad:7a:31:4c:85:9c:c4:
06:b0:c6:39:29:9f:c9:25:37:18:d0:34:70:a4:4b:
9a:3b:8a:27:e2:dd:1b:47:7c:11:b0:be:d4:1f:4b:
36:59:50:68:8a:6a:92:c5:a3:a1:96:78:5b:be:61:
9b:26:a6:58:48:eb:94:5a:4c:89:59:10:d4:7b:df:
f4:d1:2e:59:77:7d:d8:8f:25:4e:d4:f8:9b:c2:e9:
05:91:c7:64:a1:63:2b:ab:72:ff:9f:f9:a9:39:27:
df:d3:21:21:92:2f:dd:ba:6d:36:79:cd:e0:73:d5:
a8:c9:6b:1d:c3:f2:2f:e5:61:8e:8e:e2:32:a7:61:
8a:dd:33:c3:a4:92:db:cc:a0:1c:57:9b:4d:dd:60:
1c:93:8c:63:d2:f6:ff:3f:c2:68:25:99:c9:37:f8:
b1:d4:9e:c7:87:6c:b9:b9:46:18:1c:7e:97:1d:ae:
e1:d6:90:69:a4:a2:25:ff:06:29:df:2b:63:3a:af:
8c:4f:2a:50:b1:d6:68:c8:40:a9:46:81:ce:6c:ee:
d0:40:28:5f:c4:42:27:b2:26:3d:96:44:36:78:ea:
b5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BF:BE:7F:3A:E5:78:C8:5F:B4:41:25:F9:1B:81:E5:1B:80:47:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/50bef923-6ce2-3ae8-b9c3-cb3529ea5ccd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:e7:a4:5f:d8:41:ba:71:3a:12:77:b6:43:2d:eb:d7:f9:85:
e4:65:75:d3:8d:1b:63:47:2a:d6:7c:28:ee:2a:be:02:f9:ad:
9f:d0:51:46:23:db:a8:5e:f9:90:be:e8:4c:68:33:e8:ed:09:
28:fe:36:58:fe:f8:06:14:f9:d7:29:0e:fc:62:56:31:2d:c8:
c0:1a:2e:fe:14:ae:72:b1:86:a0:65:0c:82:44:ec:bf:99:e5:
f2:58:47:ea:5d:e9:52:95:ac:1e:60:c0:dd:0f:4e:5a:ec:3c:
b9:1c:b9:91:ae:7b:6d:83:0b:09:e1:53:da:21:72:e7:dc:19:
0e:e1:1a:9e:3b:01:57:9d:38:da:5f:77:89:fa:cf:9d:8b:7c:
91:dc:68:79:01:7a:84:c0:8f:73:5e:87:20:92:3b:ba:24:af:
0e:51:cd:87:81:65:40:16:cc:10:2a:36:fb:69:4a:37:4a:00:
2d:a3:fe:c6:7a:a3:d1:e9:b7:81:bb:49:32:df:12:bc:3f:08:
f7:b2:2c:bf:05:79:da:df:4a:32:89:de:30:13:fb:f7:92:d0:
6d:54:47:50:4a:94:31:43:8b:07:0f:e5:78:9e:3e:ac:66:0c:
0a:4b:c8:74:50:80:9f:4d:2a:67:c3:95:d9:ef:1e:b5:b3:00:
2d:3f:b4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:27:31 2025 by rpki-client