Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/efcd3154-ba1e-3e2f-b6ca-3a7f278ef7d5.roa
File: efcd3154-ba1e-3e2f-b6ca-3a7f278ef7d5.roa (raw, json)
Hash identifier: LV4RvQHtvjc9q3ibF8tiS9HLpuMG9VUJeW+z0EDovC8=
Subject key identifier: 9E:F9:FB:7F:65:FA:DA:CF:52:F5:82:47:96:B9:8D:2F:65:74:99:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C9FF20B695302A8B9A00A0200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/efcd3154-ba1e-3e2f-b6ca-3a7f278ef7d5.roa
Signing time: Mon 17 Jan 2022 05:00:00 +0000
ROA not before: Mon 17 Jan 2022 05:00:00 +0000
ROA not after: Mon 21 Feb 2022 05:00:00 +0000
asID: 7224
IP address blocks: 3.4.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:9f:f2:0b:69:53:02:a8:b9:a0:0a:02:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 17 05:00:00 2022 GMT
Not After : Feb 21 05:00:00 2022 GMT
Subject: CN=700ce421-3174-477a-a0d9-1c77b517cf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:bf:91:da:fe:94:cf:4c:80:8f:58:da:67:4d:
ba:b7:f7:11:6b:cd:66:be:e5:b2:27:46:b5:b6:19:
f4:59:46:69:8a:27:0b:56:9c:bd:10:67:93:f5:d5:
00:42:79:1d:af:13:e9:7b:9a:8a:8e:a1:ca:0b:96:
3a:b4:39:1c:d6:fc:50:47:69:24:27:8f:49:6a:44:
06:73:10:dd:34:80:f9:d2:9a:bb:24:95:7a:83:0b:
f6:16:03:3d:77:a3:57:68:a4:f0:bb:1d:5f:d6:f1:
bb:58:2d:77:3b:f5:74:da:ad:a3:32:fb:23:b0:5e:
ba:cf:3a:47:c2:b7:fa:b5:71:cc:8b:aa:3f:4a:02:
2c:ed:f3:be:9c:f2:4c:f8:6f:ae:01:45:d9:d1:45:
c9:95:02:e0:f7:ee:7d:2e:29:3a:ff:aa:72:55:3f:
bd:6b:4c:25:e4:b3:58:7a:e0:dc:3b:ce:e7:de:eb:
05:7d:1c:f6:e0:6c:87:9b:55:76:e8:f5:11:0e:bc:
f2:08:b7:4d:c7:52:bf:ff:98:8c:41:9e:94:eb:97:
c7:66:4b:7f:a0:4b:99:e5:e3:a7:2f:75:dd:0f:c5:
0e:47:fa:c4:6d:9c:97:fb:23:a0:f5:43:6d:e5:4d:
b6:2e:f9:84:f2:e9:44:57:ca:49:a8:70:d5:06:89:
df:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F9:FB:7F:65:FA:DA:CF:52:F5:82:47:96:B9:8D:2F:65:74:99:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/efcd3154-ba1e-3e2f-b6ca-3a7f278ef7d5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:9a:27:19:c7:cd:e8:7e:5c:ca:27:09:17:b4:da:4b:c9:91:
ad:b8:ce:b1:ec:f3:d1:ac:4d:bc:f1:48:0c:6c:85:be:b2:6d:
d8:1d:11:a3:15:c5:3d:51:6b:4e:60:f5:5e:2e:b3:cb:a7:d6:
a5:02:b3:2f:96:3e:d4:73:2b:c6:e7:da:5f:87:c8:ab:f3:97:
62:f2:a0:56:e1:9c:df:df:fb:c1:ed:ed:09:10:c3:dc:a9:91:
c6:a1:be:aa:fc:dd:74:9d:18:82:da:53:8f:54:d2:69:ed:e4:
75:b8:2d:67:58:96:07:dc:72:ae:5f:3b:3e:bb:30:06:d6:5b:
81:c8:36:21:da:9a:17:2a:b3:98:f3:7d:bf:13:f6:ea:1f:04:
b7:e5:8f:90:fc:ca:3c:76:41:69:1f:22:6f:07:76:86:85:8b:
49:4a:97:84:2a:b8:09:65:05:df:11:27:15:02:d6:6a:69:a7:
80:e3:f6:01:d4:f9:ca:06:70:27:f6:ce:ce:3e:96:13:c0:78:
4d:6b:d3:79:90:1b:ba:25:a8:85:12:20:77:c3:83:2f:b0:95:
19:96:27:f3:50:42:9d:ba:d0:c1:c8:f0:1b:04:26:6b:90:6a:
76:3d:da:fc:c7:3f:3a:88:b6:7b:60:d8:3c:82:43:de:95:42:
11:64:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:17:43 2025 by rpki-client