Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff209ec2-8df7-33f8-8506-6b71612ce57e.roa
File: ff209ec2-8df7-33f8-8506-6b71612ce57e.roa (raw, json)
Hash identifier: rVyrrX9xGqsYR8JNpYuQZTFZGTcqI8hB9ubGMPMlk1k=
Subject key identifier: 0A:55:7C:D8:69:FD:01:48:90:4B:60:88:3F:9D:DA:65:FD:D1:AD:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E2714260EB0832A1017C22A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff209ec2-8df7-33f8-8506-6b71612ce57e.roa
Signing time: Sun 05 Jun 2022 12:00:00 +0000
ROA not before: Sun 05 Jun 2022 12:00:00 +0000
ROA not after: Mon 11 Jul 2022 04:00:00 +0000
asID: 7224
IP address blocks: 3.3.5.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:27:14:26:0e:b0:83:2a:10:17:c2:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 5 12:00:00 2022 GMT
Not After : Jul 11 04:00:00 2022 GMT
Subject: CN=cddc26c8-82a7-40e4-a14a-282d235972e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b1:fb:00:01:2c:9d:f3:a7:6a:88:1c:5f:ea:
38:58:ce:f1:1e:1c:cf:96:36:ce:4e:82:af:49:49:
4d:d4:84:b0:f2:fa:fd:06:55:b7:79:26:77:45:bc:
49:f2:90:73:e1:29:71:a6:c1:f7:9f:10:72:55:da:
87:0d:e5:32:09:df:4c:17:31:b4:37:28:1b:c0:12:
00:05:94:66:00:a3:17:f1:3d:3d:53:69:7f:d6:e8:
7c:8b:cb:e6:f6:04:cc:92:32:88:39:2e:da:ef:23:
a1:54:81:94:31:10:fb:20:43:fb:b3:c4:7e:a9:77:
58:d2:d6:ad:4f:30:6d:7d:85:ef:46:b1:62:7d:39:
a0:71:3c:6a:57:5a:f7:a8:64:51:8b:93:0b:23:6b:
3a:3e:86:12:6b:2f:e6:12:fb:72:bb:69:c4:80:c4:
33:48:9e:43:b7:a4:bc:e2:1e:cb:69:d9:9e:80:9e:
91:69:b5:c0:7a:c2:19:9f:7c:3d:a7:68:86:9c:dd:
44:1b:f8:09:20:6a:0a:f4:99:3e:43:9c:2f:d0:d2:
0f:74:99:fa:35:af:ae:54:df:d6:fd:d1:a2:d0:15:
cc:13:80:48:b6:22:cf:e5:f4:38:e7:d3:4f:3c:07:
5e:67:2d:8b:7a:66:8b:40:45:38:d0:e1:b7:9a:71:
f7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:55:7C:D8:69:FD:01:48:90:4B:60:88:3F:9D:DA:65:FD:D1:AD:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ff209ec2-8df7-33f8-8506-6b71612ce57e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
3.3.5.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:f7:42:77:0f:2c:6c:82:6b:0d:53:cb:dd:fe:75:b5:97:a8:
1b:68:c0:2a:19:d0:b1:a2:43:72:33:3f:47:20:04:f3:7f:95:
ff:e4:46:c8:40:39:ca:0b:df:bf:17:e4:91:69:16:e9:22:41:
82:f7:4e:d8:cf:e0:e4:5a:bb:6b:c9:2e:ac:6f:75:81:b9:10:
46:05:a1:49:d2:33:0b:ba:44:6a:cc:a4:91:62:26:bf:67:12:
05:b6:ec:82:d1:cb:c9:78:be:cc:f2:11:c3:35:5d:28:6b:bc:
fe:76:ac:7f:44:5a:57:e5:06:c7:eb:94:01:46:bf:78:83:0d:
bb:aa:d1:14:96:7a:d0:b7:bb:dc:5c:e6:94:d7:c7:05:dd:29:
4b:70:cc:62:dd:39:59:f1:83:8a:bc:19:ad:0b:67:45:e8:29:
f0:46:aa:f4:4b:80:7e:68:eb:b6:41:7d:1e:f1:e6:77:e7:eb:
bf:03:87:d0:20:cd:66:1d:69:ed:fe:4c:e2:b0:18:a1:fe:72:
69:3e:64:6d:c6:1f:78:66:14:cf:31:e3:98:47:00:93:8d:96:
a7:e0:ff:fe:2f:22:0a:da:8f:25:1a:98:5a:e0:e6:45:22:97:
1b:38:f7:76:aa:30:01:90:41:42:16:2b:43:55:99:87:f6:6f:
4e:f5:d3:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:33:26 2025 by rpki-client