Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70497d2e-0e8e-3418-a1ff-5aa8547a4433.roa
File: 70497d2e-0e8e-3418-a1ff-5aa8547a4433.roa (raw, json)
Hash identifier: 7WZ02+uzgUvAawuNUOuHflpsQ0Ijxb3C2RL3xde5DXA=
Subject key identifier: A7:C5:B3:2D:28:F8:58:49:2E:9D:2F:FE:95:59:B4:DF:E8:22:6C:76
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2757818DD3C515F70A95B500
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70497d2e-0e8e-3418-a1ff-5aa8547a4433.roa
Signing time: Sun 05 Jun 2022 12:00:00 +0000
ROA not before: Sun 05 Jun 2022 12:00:00 +0000
ROA not after: Mon 11 Jul 2022 04:00:00 +0000
asID: 7224
IP address blocks: 3.33.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:27:57:81:8d:d3:c5:15:f7:0a:95:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 5 12:00:00 2022 GMT
Not After : Jul 11 04:00:00 2022 GMT
Subject: CN=58be5317-1995-4845-9068-001b6332a848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:d7:ef:b9:8c:81:36:ca:55:09:c9:2b:9c:
08:dd:db:84:c3:ce:4a:1e:4a:9d:f1:83:f5:46:93:
c1:22:06:12:bd:0a:81:b0:0d:89:25:7f:98:2e:18:
ea:70:6c:e9:ca:e0:39:9a:e2:e0:8b:6b:cc:18:4a:
d0:2d:05:bc:83:95:56:72:e2:b9:6a:20:bd:3f:5a:
df:60:3c:30:25:73:48:71:80:f9:c8:58:93:a1:e5:
a8:eb:64:0e:4d:b0:d9:8b:38:dd:90:5b:04:77:92:
4e:e5:85:29:46:cc:6a:d4:08:b9:47:10:f7:c8:7b:
c9:5d:8d:41:75:a8:22:b1:39:bc:33:f8:1c:d4:66:
a5:42:d5:6c:9b:ba:66:ef:92:37:ac:03:8c:d0:e8:
c8:ba:8f:c7:20:dd:f1:1b:24:68:69:90:da:86:6c:
9c:a7:76:30:dd:38:13:ad:48:06:8b:64:fe:b0:68:
a7:a6:3d:20:6d:19:b7:9f:ee:af:47:25:4b:22:62:
e2:29:86:d5:8c:2d:53:78:f3:8f:2a:8b:cc:b1:03:
18:08:a1:be:79:d7:fa:8c:ac:f7:a5:4b:af:58:61:
c2:81:96:5d:59:6a:74:e0:70:57:52:9b:56:58:a6:
c8:2e:fb:24:bf:b0:02:d4:a5:f0:54:21:a2:96:d4:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:B3:2D:28:F8:58:49:2E:9D:2F:FE:95:59:B4:DF:E8:22:6C:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/70497d2e-0e8e-3418-a1ff-5aa8547a4433.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.33.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:85:0d:4d:e3:6f:ef:c9:34:65:e0:4b:d1:7d:df:4f:0c:c8:
e3:34:4a:08:31:95:b9:21:06:08:1d:7e:96:e1:74:7b:88:b7:
18:07:e6:46:af:c9:10:5f:5e:eb:59:08:78:5d:60:00:d3:f8:
3c:18:a2:db:42:1e:ac:03:de:f0:c6:73:dd:69:e8:57:94:92:
d2:e0:83:83:c1:69:86:4a:f7:94:d7:6c:a5:ad:98:56:35:14:
1e:d9:c1:48:26:bd:b3:5e:22:88:29:2e:c8:90:96:46:9e:da:
ab:b8:da:ca:d1:be:35:6a:3f:c1:1e:98:a9:54:3d:13:45:49:
61:fb:a9:a9:e4:23:ae:a3:be:26:9f:b4:5c:65:33:83:17:5a:
f1:1b:bc:ad:c1:19:4b:01:ab:f4:fb:3f:fd:a7:39:d6:82:09:
06:5e:e0:82:46:e5:5d:bf:bc:59:f6:bf:e9:98:1b:19:56:7a:
3a:80:22:12:4f:1b:fc:3b:8b:98:af:06:f2:c2:11:20:35:19:
c1:82:2b:71:3a:b2:88:09:7a:17:89:1b:2d:dc:d8:c3:db:78:
b7:0a:89:c6:27:04:64:25:ad:de:53:53:2e:6c:1c:7b:c2:c2:
75:62:d6:cd:92:87:bc:9b:39:74:f3:ee:7b:9a:b1:bf:af:c2:
b2:6b:75:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:53 2025 by rpki-client