Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6797bc0b-1589-364b-9ed7-33177cea8964.roa
File: 6797bc0b-1589-364b-9ed7-33177cea8964.roa (raw, json)
Hash identifier: kSYl3Sz4ZzK74BRSlbD5pkfPlC86b6aSnynMCJmYXDc=
Subject key identifier: B1:03:73:02:3A:F0:22:DD:2A:B2:70:FA:CD:E6:43:EF:D0:91:45:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F668005DBFA9B63FE23D8C180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6797bc0b-1589-364b-9ed7-33177cea8964.roa
Signing time: Wed 28 Sep 2022 12:00:00 +0000
ROA not before: Wed 28 Sep 2022 12:00:00 +0000
ROA not after: Thu 03 Nov 2022 04:00:00 +0000
asID: 7224
IP address blocks: 3.4.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:66:80:05:db:fa:9b:63:fe:23:d8:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 28 12:00:00 2022 GMT
Not After : Nov 3 04:00:00 2022 GMT
Subject: CN=9e90ae04-fa93-4785-9197-14832b8a4762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ca:a8:16:a1:67:13:47:f4:d9:e8:01:6b:80:
bc:54:e7:6f:fa:cc:55:c6:d4:4f:d9:bb:26:30:38:
7a:c7:7d:72:5d:ea:eb:dd:eb:64:33:8c:d0:3d:2f:
de:a1:c6:df:0d:a3:04:71:15:52:8e:e6:38:de:5b:
10:ab:ed:e3:d7:49:92:db:ff:c9:ba:9b:69:53:ff:
1c:5a:84:35:d4:5a:78:3e:c0:fc:c7:41:7f:73:7e:
91:db:28:3c:b2:1c:84:67:38:2d:b2:a3:93:a8:24:
3a:16:8e:d7:43:8b:db:05:c6:18:a9:74:6e:95:14:
e6:ac:54:19:db:f4:5b:b3:91:40:6e:56:9e:f1:08:
86:1f:74:4d:2d:4e:d0:ca:7b:da:86:f6:0c:48:30:
35:e8:ca:f0:69:3d:5e:be:6e:13:0a:f6:cf:2f:dd:
6f:41:39:37:95:f2:2f:4e:54:2e:85:11:a8:29:ff:
16:8b:0b:fd:e2:16:9c:78:ef:31:8b:2d:04:63:38:
b6:31:ab:ad:18:e8:09:90:c1:49:f5:32:81:84:d8:
a3:af:c2:da:5c:eb:90:d8:14:53:79:f1:dd:2d:bf:
9f:6e:c3:a6:cd:9f:16:ce:49:c8:3e:95:e8:c7:82:
64:98:a0:74:de:15:45:a5:05:40:1d:d2:7d:da:93:
09:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:03:73:02:3A:F0:22:DD:2A:B2:70:FA:CD:E6:43:EF:D0:91:45:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6797bc0b-1589-364b-9ed7-33177cea8964.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:7b:73:bc:15:a0:36:ed:86:24:7b:43:0d:33:4b:70:35:b8:
a6:21:88:44:ee:51:32:e8:07:a8:5c:68:13:42:6c:1c:a7:1e:
63:7b:d1:db:b9:56:bd:88:05:c6:57:01:ad:c5:32:49:d9:48:
8a:c6:25:c4:3f:e7:c1:36:07:6a:0c:f5:14:79:7f:1e:87:62:
d2:cc:e2:31:2d:51:e2:54:35:91:30:d3:e7:c8:c1:b6:07:2a:
cc:66:76:f9:ae:10:ba:61:86:60:ec:57:74:2c:60:7d:8c:30:
e3:e1:80:86:c2:28:7f:5f:d9:e6:8d:e8:59:2d:71:9a:5c:e6:
e3:e6:84:6d:68:bf:19:ed:ed:98:0b:2e:03:f8:fc:c4:72:10:
3f:74:ab:47:7a:81:1e:2b:10:90:bf:59:f0:1e:9c:2e:c9:0a:
3c:73:9b:3e:5f:f1:6a:45:e9:af:a9:b1:ef:0e:e6:e7:33:ad:
3d:a4:1a:61:ac:a6:21:5a:8f:83:e3:18:26:de:96:91:de:4f:
a6:4e:0a:4c:06:65:31:fb:cf:9e:a0:dd:5b:39:4d:28:f7:20:
4a:52:3b:0d:66:8b:cb:53:61:73:0e:6b:22:f2:8f:54:d0:9c:
55:a7:65:10:f6:d0:31:35:42:17:fa:9d:95:ef:79:dc:4f:05:
58:de:ed:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9mgAXb+ptj/iPYwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDkyODEyMDAwMFoXDTIyMTEwMzA0MDAwMFowLzEtMCsGA1UEAxMk
OWU5MGFlMDQtZmE5My00Nzg1LTkxOTctMTQ4MzJiOGE0NzYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusqoFqFnE0f02egBa4C8VOdv+sxVxtRP2bsm
MDh6x31yXerr3etkM4zQPS/eocbfDaMEcRVSjuY43lsQq+3j10mS2//JuptpU/8c
WoQ11Fp4PsD8x0F/c36R2yg8shyEZzgtsqOTqCQ6Fo7XQ4vbBcYYqXRulRTmrFQZ
2/Rbs5FAblae8QiGH3RNLU7QynvahvYMSDA16MrwaT1evm4TCvbPL91vQTk3lfIv
TlQuhRGoKf8Wiwv94haceO8xiy0EYzi2MautGOgJkMFJ9TKBhNijr8LaXOuQ2BRT
efHdLb+fbsOmzZ8WzknIPpXox4JkmKB03hVFpQVAHdJ92pMJIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLEDcwI68CLdKrJw+s3mQ+/QkUWnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNjc5N2JjMGItMTU4OS0z
NjRiLTllZDctMzMxNzdjZWE4OTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAwQCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADx7c7wVoDbthiR7Qw0zS3A1uKYhiETuUTLoB6hcaBNCbBynHmN70du5
Vr2IBcZXAa3FMknZSIrGJcQ/58E2B2oM9RR5fx6HYtLM4jEtUeJUNZEw0+fIwbYH
KsxmdvmuELphhmDsV3QsYH2MMOPhgIbCKH9f2eaN6FktcZpc5uPmhG1ovxnt7ZgL
LgP4/MRyED90q0d6gR4rEJC/WfAenC7JCjxzmz5f8WpF6a+pse8O5uczrT2kGmGs
piFaj4PjGCbelpHeT6ZOCkwGZTH7z56g3Vs5TSj3IEpSOw1mi8tTYXMOayLyj1TQ
nFWnZRD20DE1Qhf6nZXvedxPBVje7Yw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 16:03:49 2025 by rpki-client