Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/797ab09f-e567-34af-a6b2-5aa632e094f1.roa
File: 797ab09f-e567-34af-a6b2-5aa632e094f1.roa (raw, json)
Hash identifier: er5zisgtipy6KueH6RWy7jNjtA0ro0nP9zv8pX1t/go=
Subject key identifier: 41:9B:F7:AD:26:15:2E:A2:EB:38:FD:C5:9A:2A:BE:62:83:80:9C:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584048B0354E5513310F92E90EF0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/797ab09f-e567-34af-a6b2-5aa632e094f1.roa
Signing time: Sun 18 Dec 2022 12:00:00 +0000
ROA not before: Sun 18 Dec 2022 12:00:00 +0000
ROA not after: Mon 23 Jan 2023 05:00:00 +0000
asID: 7224
IP address blocks: 3.4.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:48:b0:35:4e:55:13:31:0f:92:e9:0e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 18 12:00:00 2022 GMT
Not After : Jan 23 05:00:00 2023 GMT
Subject: CN=6084fe6f-873c-42a4-9c56-cc9529dce30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:48:b5:9b:4f:da:72:3e:b9:e4:41:41:de:05:
83:86:09:c7:14:bd:fc:f7:72:6a:2a:4c:ea:29:f5:
c1:fc:32:8d:59:54:d4:84:14:10:37:31:07:05:49:
69:da:b6:a9:ab:31:6c:87:dc:00:cb:22:57:c3:db:
a7:87:1c:f7:19:ca:ba:da:f7:4c:8a:f1:dc:51:98:
a4:49:4d:f6:9b:98:f2:d7:34:04:ba:12:28:89:58:
10:e4:4a:9d:fc:31:ed:f3:5d:96:1a:76:15:86:66:
d0:da:49:08:40:2d:b0:17:01:e8:f0:fc:5c:3f:48:
51:4a:35:cb:36:32:7f:23:69:50:7f:08:8a:29:9f:
dc:e9:35:79:ff:36:42:2f:bd:e1:72:9f:4f:47:28:
b0:26:dd:3b:10:b2:01:4b:9e:da:a3:bc:7d:3d:34:
a8:c7:c2:a0:2c:6f:a2:6c:f0:0b:9f:36:ed:2d:da:
3e:37:dd:ac:8d:f2:df:72:80:ff:5f:d3:d2:ed:0c:
11:76:c3:0e:91:61:2f:ef:c6:1c:ce:63:c9:f4:38:
7e:4b:c5:50:08:63:ca:a1:94:1d:53:57:57:5b:f6:
71:66:df:38:24:2a:17:4a:d6:04:8e:1e:e0:a1:78:
6d:79:8f:58:10:7e:9b:16:85:42:e9:eb:f3:6f:35:
6e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9B:F7:AD:26:15:2E:A2:EB:38:FD:C5:9A:2A:BE:62:83:80:9C:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/797ab09f-e567-34af-a6b2-5aa632e094f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:1b:29:be:d6:4b:50:e7:47:5e:8b:cf:bc:38:8e:e2:86:05:
9a:62:8a:aa:c6:ec:a7:ee:ed:c1:fb:d8:3e:7a:cd:ba:3d:83:
88:67:a8:80:e3:28:40:06:2e:ac:80:d8:6c:36:77:02:45:cc:
e2:ba:23:a8:ca:0b:c1:b0:3e:1e:9e:67:f4:10:45:08:fe:1d:
2e:27:cf:b3:26:6b:45:f2:cf:61:46:46:fd:ad:d0:36:cc:11:
47:aa:fb:24:86:17:21:a7:32:92:c9:30:41:c4:bc:1f:07:e2:
50:28:a8:15:67:f9:88:fe:2e:79:7f:b3:a8:41:48:8e:70:96:
8c:a9:2c:2f:5c:bc:d5:c0:e0:93:2c:49:ed:e6:17:89:ff:15:
b2:80:bd:bf:37:a0:b2:c0:1e:1a:a2:8f:99:cb:df:3e:4b:d2:
5a:0b:7e:29:72:ae:1d:7e:75:a5:72:27:19:d9:32:9a:19:34:
41:fb:50:7f:14:f1:77:46:c6:ef:eb:39:12:a4:e6:c1:d7:84:
9a:4f:31:0a:3d:c3:70:45:77:2f:17:74:07:38:d7:e2:38:2c:
56:bf:c7:5d:14:c9:d0:ab:e0:f4:72:b1:ca:33:60:cb:49:ee:
28:27:44:cf:9c:9f:42:c4:bf:a7:95:bd:77:8b:20:e1:78:f8:
ca:0e:8c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:00 2025 by rpki-client