Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79450f0d-2d00-3984-9328-083e244d3bcc.roa
File: 79450f0d-2d00-3984-9328-083e244d3bcc.roa (raw, json)
Hash identifier: Ctt6WNqKgJ4zokMBrF4UVZtBQywDyBeugUgAiHb+hfI=
Subject key identifier: 35:E9:F9:D9:3A:B6:F2:DC:9D:9B:E2:D5:8B:7B:4E:64:DD:73:DC:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C68ED25456E649012AE939880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79450f0d-2d00-3984-9328-083e244d3bcc.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 3.128.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:68:ed:25:45:6e:64:90:12:ae:93:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=086ad113-af67-4982-ae9b-a41d892e9196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:81:28:47:d5:22:03:37:17:8e:71:96:1a:60:
e0:7d:39:8c:0d:54:92:07:63:8e:f7:55:41:f8:5f:
59:01:3f:66:e0:be:85:a5:10:df:b1:cf:f2:55:10:
84:ab:f7:5d:88:14:0c:e2:37:6e:7b:ef:f7:e6:30:
70:93:05:c2:72:d6:ca:a5:11:c1:b3:d1:fa:f0:8c:
d7:3e:e3:9d:ca:f8:1c:23:36:cd:09:60:b3:bb:74:
26:98:df:b4:93:bd:68:b3:79:e4:28:c6:83:b1:2b:
f6:6f:76:b2:c4:4c:c2:3a:1a:71:35:81:b3:a9:6a:
3b:c4:d0:8e:bb:4e:63:27:46:92:1c:c5:ff:1c:28:
e1:ba:9e:83:4c:40:bd:02:06:35:14:6f:15:ab:0c:
4d:cf:54:f8:d3:be:72:dc:ce:51:12:4f:31:42:3a:
1c:a6:bc:e7:fe:d1:d0:1b:33:e5:8d:c4:08:ea:a6:
02:02:7c:3f:fc:83:67:74:6c:9d:be:2a:d7:39:92:
f3:a2:25:43:b6:f5:8c:b1:75:9f:0b:cc:32:54:c9:
c9:36:db:b8:f1:c3:c7:4a:dd:e1:5b:dd:15:e1:38:
01:f4:c4:3a:61:3c:84:8e:66:d0:d7:16:32:ec:c6:
cf:d2:3d:b9:2a:c0:db:32:3f:90:11:7f:f8:75:05:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E9:F9:D9:3A:B6:F2:DC:9D:9B:E2:D5:8B:7B:4E:64:DD:73:DC:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/79450f0d-2d00-3984-9328-083e244d3bcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.128.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:2d:ef:2a:87:61:73:e3:83:bb:5c:5d:b5:3d:2c:a0:23:7b:
7c:39:25:20:41:77:4d:8f:aa:8c:1f:4c:52:79:cf:51:49:17:
80:9c:fd:c8:44:1e:10:6e:79:68:6e:07:34:66:08:d7:d5:72:
bd:48:01:06:8f:d2:4b:da:fa:e5:71:12:e4:26:33:00:cd:66:
f7:a2:8f:66:1e:0f:fb:b2:9d:c7:8f:5c:07:b5:20:7e:af:cc:
4e:9b:cb:2e:af:a3:c2:0f:b0:7c:5c:b9:c0:f4:53:d4:11:49:
aa:8f:e5:5e:c3:11:f4:02:5f:6b:d4:a3:e8:23:87:cf:62:64:
94:99:88:d2:be:d3:37:aa:96:f6:98:88:90:32:0e:5a:2f:1c:
f3:21:d0:d8:9e:7a:c5:6d:32:92:14:85:52:3e:7f:34:f7:f6:
3f:99:72:9e:44:8c:7b:ba:2a:57:f3:fa:54:5e:00:8e:ff:66:
fb:dd:2a:08:1c:96:91:c0:c7:4e:27:2b:97:77:b5:2b:23:ac:
58:87:3f:68:6a:d9:8c:ee:4b:61:f2:5c:3b:a8:ce:0f:8c:60:
12:d1:12:c1:05:34:62:cd:94:13:05:b2:e6:30:62:57:09:57:
c0:b0:72:b6:1b:3c:67:11:dc:31:b4:23:d6:cb:da:3f:57:ef:
b8:3f:05:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:30:44 2025 by rpki-client