Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f0e88e4-9ddf-30d5-95f8-f9d474e75441.roa
File: 5f0e88e4-9ddf-30d5-95f8-f9d474e75441.roa (raw, json)
Hash identifier: CX51HOEoDQY0Pd56GWaZXulmK/Qh8CoSiH8Tr+i21UQ=
Subject key identifier: 04:AF:D1:D5:1E:45:43:6C:B3:10:AA:A0:32:1B:58:C2:83:22:E4:5A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C78D5244BAD8BFCEBF4EB5700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f0e88e4-9ddf-30d5-95f8-f9d474e75441.roa
Signing time: Mon 03 Jan 2022 05:00:00 +0000
ROA not before: Mon 03 Jan 2022 05:00:00 +0000
ROA not after: Mon 07 Feb 2022 05:00:00 +0000
asID: 7224
IP address blocks: 3.4.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:78:d5:24:4b:ad:8b:fc:eb:f4:eb:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 3 05:00:00 2022 GMT
Not After : Feb 7 05:00:00 2022 GMT
Subject: CN=9d66c5b4-063c-4e1a-90ab-0a76e96828f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0e:12:bd:c4:b9:d1:3e:9a:ee:b8:45:15:15:
79:b3:fa:a4:8c:d9:ae:a5:93:eb:66:5f:d3:04:0c:
f7:3f:fc:e9:b6:2b:fd:c1:7e:9d:e4:c6:32:6e:6c:
bf:45:c9:a4:7b:79:71:d0:b0:c5:49:9c:d8:36:56:
8e:83:4a:bc:b3:97:96:09:9b:2f:51:f7:07:02:21:
a3:05:32:91:3f:dd:90:a5:93:56:88:92:80:de:57:
ab:00:30:bc:25:4d:c5:96:61:9c:00:21:8a:6e:eb:
15:a2:12:96:57:e2:a5:4b:68:ce:77:6c:21:05:de:
d3:ae:30:8e:76:cf:54:16:18:12:d2:61:79:31:a5:
23:f5:f0:45:c5:64:dc:51:9f:cf:fc:94:8a:47:ef:
d6:e3:24:fa:b1:ce:26:4e:f1:db:c2:83:ea:ed:22:
68:4b:56:15:d8:11:f7:0c:95:36:7e:2f:5c:c2:35:
7a:71:d4:ee:9c:94:50:bc:ec:10:ca:97:44:31:47:
ac:70:c8:58:87:06:77:a7:24:0c:d1:f0:db:a4:4f:
36:37:f3:6a:0a:87:98:18:c6:4b:1d:b1:71:29:83:
0d:dc:97:a1:6b:55:0d:19:c7:a5:f5:b8:d4:6a:33:
a3:a9:a1:a7:90:a3:4c:d2:99:71:de:40:ef:4e:d1:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AF:D1:D5:1E:45:43:6C:B3:10:AA:A0:32:1B:58:C2:83:22:E4:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f0e88e4-9ddf-30d5-95f8-f9d474e75441.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:1c:db:6e:8c:ed:90:75:86:f9:05:a0:82:e2:c3:f7:c3:ae:
6f:93:e7:eb:86:c4:bb:06:56:4c:ae:60:36:d8:9b:71:67:64:
25:da:70:e2:cb:09:bf:d7:31:0e:e4:34:bb:9a:80:dd:44:d7:
b7:83:e4:03:2d:b7:30:72:69:d9:9f:54:0e:49:73:db:ea:56:
81:10:3b:a0:8a:f1:89:b6:b9:15:ec:f6:71:a1:66:22:2b:ce:
a4:15:f4:f4:7f:70:96:8c:c5:b4:d3:5b:50:2b:4a:b2:20:d3:
75:e0:dc:59:8c:5b:3a:12:19:a8:08:68:73:58:e7:62:bc:86:
38:8c:6d:20:60:1c:b7:89:73:8a:ee:e5:0c:bd:ca:5d:db:a9:
d8:9b:36:4f:43:9c:90:0a:00:f6:f5:66:b5:68:c3:12:f3:32:
bd:3f:fc:98:b3:f2:cb:9c:93:02:e4:d8:b2:49:6d:e6:e2:60:
34:b5:3b:cf:ef:6f:56:33:51:b1:a6:16:b9:55:8b:29:df:79:
fc:02:82:f6:de:f6:09:7f:d2:ba:ff:de:7b:1f:ab:d9:8e:dd:
82:3d:f4:e8:02:1e:d4:53:54:8f:21:6e:52:15:ac:73:34:a4:
ff:ba:e8:ad:15:cf:98:de:61:a1:bb:c2:11:29:e5:8a:1e:50:
9b:8e:c4:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDx41SRLrYv86/TrVwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEwMzA1MDAwMFoXDTIyMDIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
OWQ2NmM1YjQtMDYzYy00ZTFhLTkwYWItMGE3NmU5NjgyOGYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ4SvcS50T6a7rhFFRV5s/qkjNmupZPrZl/T
BAz3P/zptiv9wX6d5MYybmy/Rcmke3lx0LDFSZzYNlaOg0q8s5eWCZsvUfcHAiGj
BTKRP92QpZNWiJKA3lerADC8JU3FlmGcACGKbusVohKWV+KlS2jOd2whBd7TrjCO
ds9UFhgS0mF5MaUj9fBFxWTcUZ/P/JSKR+/W4yT6sc4mTvHbwoPq7SJoS1YV2BH3
DJU2fi9cwjV6cdTunJRQvOwQypdEMUescMhYhwZ3pyQM0fDbpE82N/NqCoeYGMZL
HbFxKYMN3Jeha1UNGcel9bjUajOjqaGnkKNM0plx3kDvTtFqpQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFASv0dUeRUNssxCqoDIbWMKDIuRaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNWYwZTg4ZTQtOWRkZi0z
MGQ1LTk1ZjgtZjlkNDc0ZTc1NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAwQBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsc226M7ZB1hvkFoILiw/fDrm+T5+uGxLsGVkyuYDbYm3FnZCXacOLL
Cb/XMQ7kNLuagN1E17eD5AMttzByadmfVA5Jc9vqVoEQO6CK8Ym2uRXs9nGhZiIr
zqQV9PR/cJaMxbTTW1ArSrIg03Xg3FmMWzoSGagIaHNY52K8hjiMbSBgHLeJc4ru
5Qy9yl3bqdibNk9DnJAKAPb1ZrVowxLzMr0//Jiz8suckwLk2LJJbebiYDS1O8/v
b1YzUbGmFrlViynfefwCgvbe9gl/0rr/3nsfq9mO3YI99OgCHtRTVI8hblIVrHM0
pP+66K0Vz5jeYaG7whEp5YoeUJuOxII=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:00:21 2025 by rpki-client