Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1f21e3c-76e4-3bc0-b922-57970f8d04c3.roa
File: a1f21e3c-76e4-3bc0-b922-57970f8d04c3.roa (raw, json)
Hash identifier: UOkTgcKQUuhEkjBAl3re0TZ0lFaU2q5kCvYbs8pmaEs=
Subject key identifier: 9F:8F:49:A5:20:3F:B1:01:B4:D4:69:90:F2:90:1C:9C:4F:22:9F:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E9C6B3FF820FA1BDB92821F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1f21e3c-76e4-3bc0-b922-57970f8d04c3.roa
Signing time: Sun 17 Jul 2022 12:00:00 +0000
ROA not before: Sun 17 Jul 2022 12:00:00 +0000
ROA not after: Mon 22 Aug 2022 04:00:00 +0000
asID: 7224
IP address blocks: 3.4.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:9c:6b:3f:f8:20:fa:1b:db:92:82:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 17 12:00:00 2022 GMT
Not After : Aug 22 04:00:00 2022 GMT
Subject: CN=bc0fe0fa-bf42-482c-9209-338c095b1025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:fe:61:46:db:33:23:e2:5b:7d:1b:b1:c3:
66:ad:6f:37:d6:f6:43:a8:3b:ac:87:5d:cf:ad:81:
13:6d:2b:17:c5:ad:17:6e:45:93:0d:75:52:d6:fd:
72:80:c0:a7:ac:d8:1f:a5:d1:ac:4b:e5:d4:81:51:
cb:a4:ea:b8:d2:20:2b:46:d9:ba:1d:8f:07:6f:9e:
46:e3:5b:1d:7c:75:0a:85:49:d8:a6:ad:4c:51:7d:
d7:21:fb:f2:8e:db:96:8c:ec:f5:54:7a:95:89:29:
d5:5f:a0:b0:b6:99:ba:2e:8e:23:63:7d:d6:eb:74:
76:05:19:b8:e0:e9:a0:cf:db:fc:0c:21:27:78:73:
85:82:37:b0:c0:f1:7f:f6:61:63:ab:45:e9:45:35:
b7:30:01:d6:0d:ca:39:08:13:02:02:28:2f:cf:dd:
81:cc:6b:28:1e:a3:16:37:06:87:fc:37:5d:da:5b:
9a:34:5c:01:1e:cd:33:86:b7:54:8d:b6:d3:3d:b7:
f1:55:2b:aa:a0:e7:51:3e:cb:69:c1:f6:1c:3d:a0:
dd:e7:d5:2b:1e:59:2c:6d:cc:c4:5c:96:87:7c:54:
e5:88:f4:e0:86:84:ed:fd:f9:e3:50:39:35:76:ac:
52:41:d7:83:83:d5:71:84:7e:f2:b0:65:be:1b:f1:
97:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8F:49:A5:20:3F:B1:01:B4:D4:69:90:F2:90:1C:9C:4F:22:9F:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a1f21e3c-76e4-3bc0-b922-57970f8d04c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:98:6f:4d:eb:ff:9a:8b:2c:06:8a:9e:85:aa:96:55:6f:30:
be:8b:79:ab:40:5d:fb:ae:c0:63:7f:b2:87:e8:9e:09:6e:9c:
d9:16:25:f5:ef:5e:6b:5f:92:32:ac:8b:f6:a2:b7:c2:8e:ac:
b5:21:da:56:30:9d:28:a1:d6:1b:64:ff:30:2c:d5:c1:7f:89:
fa:d3:d8:cd:38:ec:38:2c:43:98:ec:9d:b2:c8:2f:b8:66:04:
9f:22:c3:a3:2d:3a:35:0e:6f:40:28:dc:bc:7c:3f:37:dc:d5:
9b:f6:fa:50:e2:1f:2c:8f:93:9f:96:97:45:e4:5a:30:62:2c:
4c:4c:24:0d:98:b7:d9:3e:2d:b8:98:00:9e:ba:47:6c:1f:d2:
a2:6d:a0:01:2d:ef:66:58:f0:63:b3:8f:7e:74:3b:a0:a3:e8:
b2:ad:a6:b0:9d:6a:15:6d:c7:73:6c:3d:2e:26:74:83:3b:90:
bb:85:08:a0:10:4f:67:a9:77:01:69:8c:28:68:08:68:bd:5e:
eb:81:84:e2:07:80:23:77:e9:68:1d:e2:a3:07:ff:30:8b:95:
2f:10:49:ff:d9:5a:e1:c4:9b:ad:d4:65:f2:e5:ea:bb:3b:d4:
05:bd:2d:84:ed:da:4f:61:6e:90:f2:fc:51:1b:86:69:30:99:
45:1d:e9:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD6caz/4IPob25KCHwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDcxNzEyMDAwMFoXDTIyMDgyMjA0MDAwMFowLzEtMCsGA1UEAxMk
YmMwZmUwZmEtYmY0Mi00ODJjLTkyMDktMzM4YzA5NWIxMDI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMH+YUbbMyPiW30bscNmrW831vZDqDush13P
rYETbSsXxa0XbkWTDXVS1v1ygMCnrNgfpdGsS+XUgVHLpOq40iArRtm6HY8Hb55G
41sdfHUKhUnYpq1MUX3XIfvyjtuWjOz1VHqViSnVX6Cwtpm6Lo4jY33W63R2BRm4
4Omgz9v8DCEneHOFgjewwPF/9mFjq0XpRTW3MAHWDco5CBMCAigvz92BzGsoHqMW
NwaH/Ddd2luaNFwBHs0zhrdUjbbTPbfxVSuqoOdRPstpwfYcPaDd59UrHlksbczE
XJaHfFTliPTghoTt/fnjUDk1dqxSQdeDg9VxhH7ysGW+G/GXNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ+PSaUgP7EBtNRpkPKQHJxPIp+VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYTFmMjFlM2MtNzZlNC0z
YmMwLWI5MjItNTc5NzBmOGQwNGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAwQEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHaYb03r/5qLLAaKnoWqllVvML6LeatAXfuuwGN/sofonglunNkWJfXv
XmtfkjKsi/ait8KOrLUh2lYwnSih1htk/zAs1cF/ifrT2M047DgsQ5jsnbLIL7hm
BJ8iw6MtOjUOb0Ao3Lx8Pzfc1Zv2+lDiHyyPk5+Wl0XkWjBiLExMJA2Yt9k+LbiY
AJ66R2wf0qJtoAEt72ZY8GOzj350O6Cj6LKtprCdahVtx3NsPS4mdIM7kLuFCKAQ
T2epdwFpjChoCGi9XuuBhOIHgCN36Wgd4qMH/zCLlS8QSf/ZWuHEm63UZfLl6rs7
1AW9LYTt2k9hbpDy/FEbhmkwmUUd6UA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:09:54 2025 by rpki-client