Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9ae6b8d-6e7b-36c5-a475-48c86e1da91e.roa
File: f9ae6b8d-6e7b-36c5-a475-48c86e1da91e.roa (raw, json)
Hash identifier: 6dUJp5SZ3lcbM4oHeIIl9zrPKVMghOCPYYfEoCX0VBk=
Subject key identifier: 6B:41:62:43:E9:1D:C4:9B:03:B0:B9:26:20:E8:2D:E1:F0:10:DA:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FFA424075643742FA0C15A8C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9ae6b8d-6e7b-36c5-a475-48c86e1da91e.roa
Signing time: Sun 20 Nov 2022 12:00:00 +0000
ROA not before: Sun 20 Nov 2022 12:00:00 +0000
ROA not after: Mon 26 Dec 2022 05:00:00 +0000
asID: 7224
IP address blocks: 3.3.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:fa:42:40:75:64:37:42:fa:0c:15:a8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 20 12:00:00 2022 GMT
Not After : Dec 26 05:00:00 2022 GMT
Subject: CN=53c6a6d5-0ed0-42d8-a2c4-55a3e341e58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:34:1f:54:fc:29:69:da:bc:50:55:e0:68:a3:
c7:b7:8b:11:33:6f:29:4b:eb:12:0b:b1:02:b4:90:
25:23:32:9f:99:be:02:6c:7e:f1:7e:63:b8:a8:eb:
ae:62:1a:49:86:3f:a1:ee:20:61:8f:8d:d0:04:78:
99:ad:27:6b:d1:0c:71:7c:5d:5d:cf:84:5b:14:ee:
a7:c6:e1:47:54:40:28:ef:f5:71:e3:a0:6b:45:c7:
73:2d:06:d6:57:35:97:c1:a8:0f:ed:3f:79:a7:29:
e7:99:9b:b9:e3:ac:90:5d:3a:0e:68:26:a4:23:82:
42:65:0e:f2:c2:aa:1f:14:1d:25:fa:99:4a:33:3b:
77:9a:de:0e:d5:d4:3c:43:7e:7f:b1:f8:e3:13:1c:
c7:a3:3b:ee:b8:09:d7:2b:59:8a:60:06:2e:42:45:
a8:6b:ab:7e:67:61:80:8c:b3:87:ed:d0:33:76:87:
c1:0b:8c:55:da:27:2f:6b:1c:db:fb:02:64:18:cd:
c7:5d:c8:c4:98:ae:81:c4:57:0f:a2:37:1e:8e:4d:
ed:45:99:3c:f1:5f:06:f2:e2:e8:1c:76:2c:d1:3d:
3e:fa:30:22:36:6f:7e:5a:ea:34:65:4f:9e:cf:04:
ef:31:9a:c4:5d:69:e6:61:51:ca:f3:60:55:b8:cf:
53:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:41:62:43:E9:1D:C4:9B:03:B0:B9:26:20:E8:2D:E1:F0:10:DA:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f9ae6b8d-6e7b-36c5-a475-48c86e1da91e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.3.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:e2:78:41:b2:68:ff:c0:ce:30:95:2b:e7:ae:95:fa:87:74:
c8:69:84:4f:ef:6b:5a:0a:21:5f:ae:24:af:fc:50:d1:cb:b6:
81:66:8e:3b:39:f9:c2:d9:01:f4:7e:2e:72:52:48:0c:42:78:
69:51:64:e3:4e:3a:a2:ae:23:89:9e:80:fd:1c:fc:62:06:96:
39:8d:5f:91:91:f1:06:a9:52:ec:fc:29:97:4e:e6:df:af:28:
27:d8:a1:65:b8:d5:94:8f:08:e1:11:09:75:75:05:c7:d2:52:
4c:7d:8b:79:a9:29:b7:e4:bc:4c:a9:8e:73:9e:ec:c5:db:14:
91:23:7c:90:19:1b:14:29:89:31:83:3b:71:d3:2e:f0:38:ae:
de:70:20:fc:63:b1:e8:aa:d8:c8:03:ad:46:b7:33:19:ea:98:
dc:7c:8b:31:fd:48:87:1f:29:7b:7d:14:e0:55:67:dd:8d:d5:
03:1c:c2:25:1b:8a:05:c9:07:53:e5:26:da:47:04:d2:cc:92:
2e:e0:d5:fd:f4:27:23:65:dc:6e:80:3c:dd:42:37:42:f8:23:
4e:cc:64:df:3f:a9:d0:8e:4e:26:da:2b:bf:0c:0d:82:40:12:
dd:09:15:99:47:ed:1b:2c:48:a5:4b:af:d9:bc:46:d7:95:82:
09:d6:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:25:30 2025 by rpki-client