Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5ac3e5c-41d1-3936-9091-5fc89199ff4c.roa
File: e5ac3e5c-41d1-3936-9091-5fc89199ff4c.roa (raw, json)
Hash identifier: HjQt1w9elO+Gn1aXTRL8Mrmz5bz0RAUUxOgiA66cMqE=
Subject key identifier: 19:26:42:A1:03:5B:DF:EB:A0:62:F5:BE:98:CF:17:80:C2:0C:3E:41
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC31F4F86A4905F3D23B90600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5ac3e5c-41d1-3936-9091-5fc89199ff4c.roa
Signing time: Mon 31 Oct 2022 12:00:00 +0000
ROA not before: Mon 31 Oct 2022 12:00:00 +0000
ROA not after: Tue 06 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 3.0.0.0/10 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c3:1f:4f:86:a4:90:5f:3d:23:b9:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 31 12:00:00 2022 GMT
Not After : Dec 6 05:00:00 2022 GMT
Subject: CN=f5b879f0-8d70-4e1f-8c9c-092d36a83ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:a7:55:19:86:5d:4e:80:ba:4c:be:b6:3b:
4d:f0:1a:e5:80:83:c8:cc:0d:62:fb:1d:ba:2a:92:
3c:9e:27:1b:d2:5f:92:73:74:df:d7:8a:0e:c0:c6:
b6:b8:7d:4e:fc:62:a8:b8:64:10:84:54:2b:60:32:
bc:6d:8e:db:78:1b:17:32:5d:b7:47:8e:ed:5f:85:
45:1e:d1:4d:c4:15:b7:04:39:0d:c5:c5:25:2c:67:
18:08:bc:95:0c:fc:ec:fa:43:37:05:1b:b6:6d:78:
55:23:d6:9c:b7:6e:16:24:1d:7e:65:79:aa:e3:28:
6c:97:11:c3:f6:b1:0b:f4:45:fa:08:49:51:84:58:
87:d0:d9:36:ec:5d:c1:60:8f:90:a5:da:38:05:cf:
c8:f9:19:6b:d8:48:ed:fa:df:87:c0:14:bd:e7:c5:
d4:0b:7f:c4:21:3b:43:21:2b:27:04:09:e8:31:a3:
6f:cb:c5:85:a6:82:4f:29:39:d7:99:ad:ca:ba:97:
18:06:2d:4a:ac:25:03:63:48:f4:a3:35:01:2b:5f:
44:e7:0c:b2:bb:8e:7e:8e:57:b9:e9:77:6c:10:3b:
bd:ce:79:c6:b5:5b:9d:3f:b2:16:40:fa:61:59:cc:
c5:b5:76:62:12:df:e8:44:cb:ba:94:d0:f9:52:ce:
29:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:26:42:A1:03:5B:DF:EB:A0:62:F5:BE:98:CF:17:80:C2:0C:3E:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e5ac3e5c-41d1-3936-9091-5fc89199ff4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.0.0.0/10
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:37:60:b2:18:4a:e8:3e:d5:8c:99:b9:20:91:12:d9:71:ae:
5d:fb:38:bf:b7:08:8e:5f:b3:35:d2:d6:41:9f:ac:29:34:7b:
80:31:9f:e2:71:84:c6:36:e8:9b:ba:aa:da:4e:67:38:16:78:
e7:4c:c1:be:5e:58:bc:cf:06:e3:ca:a6:27:e6:33:53:51:3c:
08:f9:9b:60:e8:28:2d:3f:e1:00:e2:16:cb:ba:93:39:a1:3e:
2f:61:cc:96:ab:ef:39:9a:68:6d:80:2d:16:3a:77:11:39:e3:
9b:28:55:54:a6:d7:d0:de:79:49:36:43:8d:57:f0:a7:b4:d6:
7d:cc:53:19:ec:e6:bc:be:0c:24:28:3a:c4:15:ad:29:ea:e4:
93:4a:4e:56:b4:aa:18:64:20:57:40:90:b3:6a:c1:51:d8:42:
05:32:31:c4:49:d2:9f:fa:9e:4f:35:1e:9a:2c:cf:23:b1:59:
ad:f3:6e:47:16:f8:d8:b8:03:9d:2f:e7:9d:a2:bb:82:e4:de:
ec:42:c2:b1:98:ca:cb:01:68:48:df:9a:52:93:65:d4:53:8b:
07:4a:01:82:a7:7e:ae:d0:19:2d:48:d0:22:3b:a6:eb:da:b3:
79:10:a4:05:ba:ef:a8:ae:d8:7c:78:03:90:c7:d3:04:af:3f:
52:a6:f0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:39 2025 by rpki-client