Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f1bb304-80ba-377e-934d-50a043b4e21f.roa
File: 5f1bb304-80ba-377e-934d-50a043b4e21f.roa (raw, json)
Hash identifier: FjVqqR+tP0e3YbB0joKkjLOSfr8Gvp7O1kN/gt6rZ70=
Subject key identifier: DF:B7:3A:25:D1:AE:98:02:49:C7:B7:7C:73:65:C4:40:B8:86:B8:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FEA34E1BCD35176B441859880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f1bb304-80ba-377e-934d-50a043b4e21f.roa
Signing time: Mon 14 Nov 2022 12:00:00 +0000
ROA not before: Mon 14 Nov 2022 12:00:00 +0000
ROA not after: Tue 20 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 3.0.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ea:34:e1:bc:d3:51:76:b4:41:85:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 14 12:00:00 2022 GMT
Not After : Dec 20 05:00:00 2022 GMT
Subject: CN=5c63ded1-08fe-4fdc-8e80-d80e19df785d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9a:7b:35:b6:af:c0:fa:fe:e1:01:2b:c4:56:
4a:31:30:91:24:c6:c6:c8:4a:55:cf:95:34:91:4e:
2d:de:8a:f2:75:61:ee:44:d9:61:6d:e3:28:53:07:
14:1a:bf:24:c7:c3:fe:0b:0b:c2:b5:78:92:37:bc:
c3:85:4d:8c:98:f5:47:03:30:91:0f:46:7d:7c:38:
dc:64:10:a9:a5:d6:8c:f4:76:09:e0:81:ef:9a:e2:
a8:41:fe:24:26:d7:59:cf:9d:25:17:7f:f3:ff:2b:
2c:f0:bd:f2:ec:49:47:e6:1f:d6:87:b5:71:41:1e:
06:da:a5:b2:99:71:59:31:dd:1f:5e:e1:0d:90:f9:
83:ce:89:e8:cb:d8:a5:c3:d1:19:af:3a:b1:a3:0d:
54:ec:fd:eb:54:51:16:23:4e:80:24:12:b8:a7:7f:
28:9c:35:f5:a5:4f:93:4c:82:a6:c1:0a:91:6e:74:
c7:74:7c:08:29:ad:61:62:20:04:be:04:a3:55:59:
f6:4a:ab:fe:e3:f7:e1:13:99:a7:34:01:a1:26:e9:
3f:60:89:d7:8e:60:e6:62:2f:c4:91:f0:f4:80:72:
74:7e:28:40:91:42:ea:25:6e:f2:ab:06:32:5c:f4:
3f:e0:1f:54:c9:7e:20:49:aa:b9:81:eb:ec:48:be:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B7:3A:25:D1:AE:98:02:49:C7:B7:7C:73:65:C4:40:B8:86:B8:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5f1bb304-80ba-377e-934d-50a043b4e21f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.0.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:48:b8:76:bc:6f:44:2d:83:d7:6f:16:c9:00:c1:a9:da:46:
71:50:31:fd:21:4b:2d:95:ff:a2:54:7d:e6:15:56:d4:15:d0:
69:4b:c5:5c:01:f1:ba:eb:9d:c5:e8:d0:87:38:fa:cd:8b:a8:
df:7f:86:d6:5f:54:4b:9c:31:13:46:a1:09:c6:d6:35:dd:17:
2b:c8:ce:e2:01:1c:4e:8f:88:ba:99:70:7e:9d:31:b1:82:f4:
71:09:b0:dc:d0:61:f7:37:c1:50:71:2f:06:38:b4:8d:0a:ed:
50:68:63:5a:90:64:e1:c5:df:7f:11:7c:5c:75:90:94:81:3b:
eb:c6:a8:8b:1a:80:ef:18:16:e1:d7:5c:c2:e0:94:0f:59:d6:
04:2e:ff:1e:e1:bd:c1:28:ac:fd:14:76:a4:54:dc:06:20:76:
5f:9a:d4:7c:fb:fa:a2:7e:51:d1:31:85:f4:e0:55:e6:bf:82:
1a:a8:67:a5:85:7c:21:55:e5:f1:9f:46:98:ec:03:56:57:ad:
7f:15:21:8e:63:ac:34:c9:fd:d2:7e:35:46:40:ee:ea:a8:0e:
57:11:b6:57:50:ef:10:66:a8:4f:64:54:74:68:a9:31:4b:10:
39:39:c6:9d:ea:df:0d:11:dc:3e:45:dd:c6:1f:98:c6:0a:ac:
21:55:b0:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:13:47 2025 by rpki-client