Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/814fd34f-57ea-3e4c-b001-7cb3ed382d77.roa
File: 814fd34f-57ea-3e4c-b001-7cb3ed382d77.roa (raw, json)
Hash identifier: 8XPrkEv21UXR8zQmx01xV2XjOKFe/+JQBnNuVFZ9j+k=
Subject key identifier: 75:B5:3D:E8:13:B5:19:EC:CD:50:64:94:8E:67:07:8A:06:EE:C0:FB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFDD5BD86B181548E579F9280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/814fd34f-57ea-3e4c-b001-7cb3ed382d77.roa
Signing time: Mon 21 Nov 2022 12:00:00 +0000
ROA not before: Mon 21 Nov 2022 12:00:00 +0000
ROA not after: Tue 27 Dec 2022 05:00:00 +0000
asID: 7224
IP address blocks: 3.33.48.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fd:d5:bd:86:b1:81:54:8e:57:9f:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 21 12:00:00 2022 GMT
Not After : Dec 27 05:00:00 2022 GMT
Subject: CN=8d9e63ca-6578-4d38-8bb2-1c5dd2b542d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:be:6c:cf:4a:a2:e0:9c:1a:79:66:10:f8:
3f:c5:78:d3:06:f6:64:1d:ca:f3:cd:6b:a2:69:1e:
8d:b5:01:4a:2b:1a:f6:51:a5:b1:64:4c:4a:b6:9e:
8c:40:45:28:29:92:3e:82:bd:08:f3:a3:38:f7:77:
dc:3d:b8:ea:03:ea:ef:16:6e:95:f1:13:6f:ba:cb:
e6:23:52:1f:1a:4c:47:99:6d:46:6b:67:9b:80:cd:
fc:17:f6:a8:a7:6c:bc:9c:d0:46:7a:f7:a5:a7:e1:
49:ef:a4:49:01:a3:97:ad:13:c3:5d:71:e0:c3:5e:
f3:a4:20:d6:ee:cf:cb:65:c7:2c:13:87:f0:ce:e0:
97:f3:8d:36:72:95:27:c0:34:f1:8c:aa:30:a4:43:
66:1d:1e:8e:da:16:a0:7b:09:02:9a:7c:2e:55:7e:
02:0e:67:21:af:44:e2:32:ac:06:93:1b:3b:cb:ad:
f8:bd:c2:dd:1f:ab:70:eb:e5:17:00:af:59:95:37:
c5:eb:1a:43:00:66:2d:0d:f1:e6:63:09:10:d9:6d:
3e:e4:e9:82:82:04:63:32:f5:08:38:9a:0a:bc:37:
ae:6e:27:64:55:cf:71:95:14:73:bf:88:fe:8b:f0:
54:05:96:4e:1a:39:71:37:f9:44:5f:57:c1:3e:1c:
23:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B5:3D:E8:13:B5:19:EC:CD:50:64:94:8E:67:07:8A:06:EE:C0:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/814fd34f-57ea-3e4c-b001-7cb3ed382d77.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.33.48.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:13:a6:a4:c1:cd:60:01:66:fc:94:c8:ba:e9:48:2b:61:11:
b3:bd:d6:13:fa:8c:69:01:d5:ff:f3:9d:d9:0e:e3:cd:e8:73:
a5:5d:51:52:a8:ee:81:67:e1:a5:57:c9:be:c1:3d:89:2c:10:
25:ab:ea:27:fb:04:aa:66:7c:4a:22:f3:41:7b:27:96:b8:f3:
25:8c:84:2a:59:3a:42:32:8f:76:e3:3e:9e:88:a6:c2:d6:c2:
00:b4:e1:b3:0c:0d:f5:19:4d:93:3a:88:eb:b5:81:30:cd:ca:
ff:1b:4b:5b:62:9e:64:f3:95:40:34:9d:01:57:14:cc:a7:06:
43:8c:05:bc:32:23:70:48:d0:ee:a3:ec:00:6c:9c:a5:91:f7:
7e:7a:8d:a8:9f:30:a6:77:aa:a1:ef:96:3b:fc:9b:5e:32:60:
ad:f8:03:a1:ca:3e:0b:4a:76:b3:23:f3:e4:bf:d3:45:3c:03:
7a:5c:11:f5:e9:f1:6f:63:ef:96:5d:e4:84:d1:dd:b2:0a:ec:
61:a0:2c:46:1e:58:ec:5b:e2:e9:d2:ea:56:56:a3:6f:05:27:
97:08:ae:d1:26:56:f2:50:d5:06:16:31:d5:37:d8:87:d6:1d:
13:c4:ae:ff:f6:c1:f6:18:0c:2d:ae:80:40:bd:aa:9b:dc:d7:
8e:8f:2c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:44:36 2025 by rpki-client