Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db98f4b0-2358-38b1-931b-a72a41b30fe8.roa
File: db98f4b0-2358-38b1-931b-a72a41b30fe8.roa (raw, json)
Hash identifier: ik5cgNtKEKsS6M75jvKXcgoZL9MjjZvmhrhWDVIgf/k=
Subject key identifier: 0B:1B:3E:52:7B:33:45:76:3E:65:F4:6D:75:D3:EB:6E:8F:FD:A8:42
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F11C9B8285E836F1D685A9200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db98f4b0-2358-38b1-931b-a72a41b30fe8.roa
Signing time: Sun 28 Aug 2022 12:00:00 +0000
ROA not before: Sun 28 Aug 2022 12:00:00 +0000
ROA not after: Mon 03 Oct 2022 04:00:00 +0000
asID: 7224
IP address blocks: 3.4.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:11:c9:b8:28:5e:83:6f:1d:68:5a:92:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 28 12:00:00 2022 GMT
Not After : Oct 3 04:00:00 2022 GMT
Subject: CN=3d87a18c-7958-4187-9f44-5d3b6c1d0ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:1b:0e:fe:c7:02:47:f1:5e:d3:26:9c:5a:62:
c0:3c:01:25:03:12:5b:f6:29:bf:5e:ef:46:3b:48:
0c:a4:cd:95:ea:ce:23:47:bc:aa:65:53:dc:8f:d7:
76:52:78:58:7a:cf:7b:4c:ae:d9:04:91:83:68:91:
b2:65:00:e7:fa:ee:31:11:d1:8a:25:5a:6e:03:9d:
5c:8d:64:78:61:9e:3f:e4:7f:da:fc:d8:5a:9d:0c:
be:62:21:98:bd:14:2d:5b:06:3f:8d:50:94:6c:85:
7f:c9:a7:fc:7a:8d:92:55:2b:9c:7e:75:1f:f9:2d:
f9:39:e6:5f:fc:63:bc:a6:f1:21:ce:47:58:a1:9e:
33:70:d1:2c:f7:6f:83:9f:b3:33:d9:27:64:8f:a9:
88:68:14:dd:25:aa:af:ba:64:99:84:e6:8e:44:a1:
16:23:63:ef:ee:69:0d:e7:0f:90:16:70:78:06:4a:
74:96:4a:01:b7:14:1a:cb:43:78:de:89:4f:9c:a5:
6e:2b:df:2f:1d:2a:94:3e:e6:4b:4a:90:d7:2b:59:
a7:d4:1b:b0:04:81:92:75:3f:99:50:a6:34:ee:c0:
0d:a2:08:96:2f:84:b5:3a:11:94:de:ed:b8:95:1e:
53:4b:5e:a9:7a:d8:9e:e7:b6:bc:72:63:57:3f:df:
d7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1B:3E:52:7B:33:45:76:3E:65:F4:6D:75:D3:EB:6E:8F:FD:A8:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db98f4b0-2358-38b1-931b-a72a41b30fe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:f9:c3:94:5e:48:71:4f:e0:45:81:fa:d8:1b:42:76:2b:6a:
91:55:f0:f4:cf:df:7e:d2:2b:38:a0:77:bb:f0:11:9f:0d:c9:
68:ca:75:a9:a8:b7:c7:4d:d7:48:62:ea:55:57:c7:af:5e:87:
b2:9a:a4:f8:ea:e2:99:3a:6e:5b:5e:f4:65:7a:f1:d2:35:80:
56:52:34:6e:ef:74:8e:0d:45:74:55:e5:10:8f:a0:22:24:f4:
b4:73:36:a1:5c:e5:8b:ff:18:72:78:d6:e6:d8:b3:63:0e:d3:
41:5c:90:0f:4c:ee:71:ff:42:7e:2c:45:66:e7:d6:3c:bc:0d:
b8:47:4a:2c:32:14:bd:de:10:d0:6e:6c:8f:ff:61:ea:ff:de:
2d:76:7a:0b:a9:a4:a8:ab:c3:e4:9e:f3:1f:78:33:0a:72:14:
fb:7c:6d:0b:3a:22:74:ff:f0:2c:f5:0b:4c:6f:df:f0:09:ba:
22:f1:e3:9d:ee:c7:98:e7:dd:ee:32:1d:03:8f:30:ae:07:5b:
95:12:68:fd:3e:5f:db:07:78:93:40:66:80:ef:6f:4c:fa:da:
eb:ce:95:c1:21:ff:40:74:03:ed:a4:a8:a9:53:ab:92:9b:32:
b1:02:24:5e:22:48:67:32:b6:ce:c8:06:33:1c:9e:98:56:57:
67:f5:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:46 2025 by rpki-client