Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbb01d80-e853-3d26-be59-87273b7d05ea.roa
File: fbb01d80-e853-3d26-be59-87273b7d05ea.roa (raw, json)
Hash identifier: FY25QqfR8EaSU59k1kpe3/Pws1KH+ACZhQt5kKKX1UY=
Subject key identifier: D3:D9:E4:1A:7A:F6:2F:45:5A:F8:AB:56:CC:D4:8C:C7:EF:70:CC:45
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858409F6F8911EAD687558A8FD280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbb01d80-e853-3d26-be59-87273b7d05ea.roa
Signing time: Wed 18 Jan 2023 12:00:00 +0000
ROA not before: Wed 18 Jan 2023 12:00:00 +0000
ROA not after: Thu 23 Feb 2023 05:00:00 +0000
asID: 7224
IP address blocks: 3.4.2.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:9f:6f:89:11:ea:d6:87:55:8a:8f:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 18 12:00:00 2023 GMT
Not After : Feb 23 05:00:00 2023 GMT
Subject: CN=107a4a26-779f-4951-a1d2-e4bb85882bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:89:88:db:96:26:f0:cf:2c:04:2f:8b:c9:43:
97:df:dc:e8:4b:1d:9c:91:d2:31:75:0b:6a:75:df:
cc:7f:0c:02:b5:a0:0f:85:cc:92:99:31:46:67:1f:
61:b0:e7:ec:51:1c:5c:e1:25:4f:ed:99:c9:d3:e4:
1d:36:8a:0b:d8:b6:ba:84:d7:fd:fd:03:2a:8d:8c:
2f:65:65:c6:26:25:81:6d:8f:df:0b:09:1d:c6:bc:
33:1c:96:7e:22:28:9d:16:cd:87:ca:6d:49:db:1d:
72:2b:48:41:24:8f:58:71:3b:80:fe:49:81:3f:dc:
2f:f8:84:41:55:53:45:6b:1d:29:33:c5:48:4e:c1:
81:56:80:2d:f1:bd:d2:cf:88:3e:04:b2:d4:db:d5:
91:86:0a:6f:b1:3e:c3:1f:47:47:76:94:0f:c5:a2:
36:bb:a9:1c:79:af:5a:a0:25:3d:3f:3c:e1:fa:aa:
84:09:ef:8b:9c:49:d0:41:fe:60:ff:fb:f3:83:cb:
b8:8d:21:3f:eb:2f:7d:6f:05:25:15:2b:cb:ea:b6:
aa:fe:05:74:20:c7:31:57:54:6c:20:4d:3e:ad:d6:
d9:5f:58:a8:f1:04:d8:18:54:3e:b6:d2:47:cf:41:
28:5e:1e:ba:00:9d:e5:8a:a4:d4:a0:39:10:8e:c7:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D9:E4:1A:7A:F6:2F:45:5A:F8:AB:56:CC:D4:8C:C7:EF:70:CC:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fbb01d80-e853-3d26-be59-87273b7d05ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.4.2.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4c:e5:20:fb:08:9a:ce:46:5b:45:35:8b:b9:19:6e:a5:9b:e3:
38:b4:11:f0:c8:e2:29:2b:3a:81:70:be:6b:c7:88:e9:06:26:
06:81:d1:72:82:b2:fd:aa:7a:1e:85:ba:e6:cd:6f:02:8f:32:
04:43:ef:d3:4b:52:1e:f2:7f:66:01:d8:fb:6f:d0:97:3c:37:
8f:4f:58:2d:b8:aa:02:24:e6:42:af:83:e8:77:38:1e:d7:90:
ea:50:68:d7:6a:ba:aa:e5:65:12:6f:3f:b3:94:24:9f:f5:30:
1a:41:a8:f7:07:b5:34:b1:7b:e4:0c:88:6d:7a:95:cb:e0:8f:
fb:86:96:24:02:bb:8e:96:f4:d2:6a:12:03:3b:b4:f7:e3:00:
80:3f:79:ce:45:0b:c3:a8:3f:e7:b2:c8:9c:6e:1c:ae:44:3a:
de:37:83:88:c4:0d:cc:7c:d2:80:75:64:b6:f0:75:25:4b:22:
25:91:2b:1c:e3:c0:58:8b:53:ca:36:fa:47:c7:3e:d4:76:c4:
c2:4e:5e:e3:68:3d:4e:86:96:30:d5:7c:46:4d:25:3a:f7:bf:
51:4b:80:db:d1:0c:ac:6a:88:41:2e:06:ea:a8:28:8f:94:10:
a3:c2:a7:e3:7d:dc:e2:3f:42:3f:0e:34:32:27:f9:e9:c9:f9:
7a:55:c8:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWECfb4kR6taHVYqP0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDExODEyMDAwMFoXDTIzMDIyMzA1MDAwMFowLzEtMCsGA1UEAxMk
MTA3YTRhMjYtNzc5Zi00OTUxLWExZDItZTRiYjg1ODgyYmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YmI25Ym8M8sBC+LyUOX39zoSx2ckdIxdQtq
dd/MfwwCtaAPhcySmTFGZx9hsOfsURxc4SVP7ZnJ0+QdNooL2La6hNf9/QMqjYwv
ZWXGJiWBbY/fCwkdxrwzHJZ+IiidFs2Hym1J2x1yK0hBJI9YcTuA/kmBP9wv+IRB
VVNFax0pM8VITsGBVoAt8b3Sz4g+BLLU29WRhgpvsT7DH0dHdpQPxaI2u6kcea9a
oCU9Pzzh+qqECe+LnEnQQf5g//vzg8u4jSE/6y99bwUlFSvL6raq/gV0IMcxV1Rs
IE0+rdbZX1io8QTYGFQ+ttJHz0EoXh66AJ3liqTUoDkQjsfHnwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPZ5Bp69i9FWvirVszUjMfvcMxFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZmJiMDFkODAtZTg1My0z
ZDI2LWJlNTktODcyNzNiN2QwNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAwQCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzlIPsIms5GW0U1i7kZbqWb4zi0EfDI4ikrOoFwvmvHiOkGJgaB0XKC
sv2qeh6FuubNbwKPMgRD79NLUh7yf2YB2Ptv0Jc8N49PWC24qgIk5kKvg+h3OB7X
kOpQaNdquqrlZRJvP7OUJJ/1MBpBqPcHtTSxe+QMiG16lcvgj/uGliQCu46W9NJq
EgM7tPfjAIA/ec5FC8OoP+eyyJxuHK5EOt43g4jEDcx80oB1ZLbwdSVLIiWRKxzj
wFiLU8o2+kfHPtR2xMJOXuNoPU6GljDVfEZNJTr3v1FLgNvRDKxqiEEuBuqoKI+U
EKPCp+N93OI/Qj8ONDIn+enJ+XpVyF8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:07:42 2025 by rpki-client