Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0044d495-884d-36cc-9c89-48e205499335.roa
File: 0044d495-884d-36cc-9c89-48e205499335.roa (raw, json)
Hash identifier: DYwnKqnbt5NXPHGbtOS3d5fxnMnNCRk6C40bHxYzWSs=
Subject key identifier: 5F:A7:7B:9F:A0:C2:AB:89:98:81:90:00:DB:88:40:0B:E0:E3:E1:DA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403B232D0D1FB387B6E9561A38
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0044d495-884d-36cc-9c89-48e205499335.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3b:23:2d:0d:1f:b3:87:b6:e9:56:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=71968d6c-1cb5-4cb7-826f-aa029bd36166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:c1:d1:61:a7:47:0f:9c:c9:c8:a7:de:a2:
52:42:e8:d3:ce:c8:62:9b:56:51:e5:ed:e0:dc:da:
db:cf:4b:fa:72:37:ec:2a:f8:61:83:2b:12:fc:7f:
42:95:d2:6c:3a:ce:ea:18:42:29:3a:74:17:e2:82:
ca:3c:3e:5b:80:cc:d4:b0:ed:72:3c:3a:dd:02:13:
e4:5a:66:0b:79:33:e4:36:a6:5d:fc:e4:17:bb:85:
f6:23:4a:f4:b0:03:e9:f7:cf:dd:d6:d5:7e:42:93:
cd:4a:8f:a2:e6:3d:f5:9d:26:1f:fb:a7:b2:a2:c6:
da:2a:64:8f:61:70:c7:14:e6:7c:54:34:ce:5b:d5:
d4:9f:6a:7d:12:b8:b2:65:5d:58:3e:19:ce:c6:ff:
8a:b6:ff:ae:0c:33:74:fe:3c:ce:fc:76:38:ee:76:
cc:78:62:38:05:70:93:30:0c:7f:c9:fe:26:74:d2:
91:64:1c:e9:2e:17:79:71:1b:0a:34:35:dd:82:f8:
7f:ac:bc:f5:aa:ac:fc:26:bd:4b:c5:71:fd:c0:03:
60:1e:e7:46:f9:1a:a8:81:60:7b:da:dc:a1:94:8b:
50:f3:ff:64:57:d3:08:f1:09:b5:8c:87:de:f3:dc:
dd:52:2e:13:a2:fb:d3:e8:9f:ed:9b:6e:ba:ee:71:
85:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A7:7B:9F:A0:C2:AB:89:98:81:90:00:DB:88:40:0B:E0:E3:E1:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0044d495-884d-36cc-9c89-48e205499335.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:63:84:03:90:7b:6f:9a:24:8f:7a:50:88:eb:f9:48:3d:fa:
f5:d7:c9:78:33:01:ed:ac:a1:dc:fe:c1:00:49:2b:44:85:a4:
a6:33:43:70:e3:81:cf:59:1a:53:fa:56:64:e8:ab:3b:6b:9d:
3d:95:1d:ff:aa:28:22:f0:0b:e9:e3:9f:ab:54:e9:2c:b3:fc:
50:a0:61:83:ce:26:56:54:4f:0f:df:96:65:1f:ec:26:9e:3b:
d5:7f:e6:1a:3b:22:5b:54:c2:3f:d0:20:58:c7:01:98:20:f2:
a8:92:bd:7b:5d:cc:21:3e:84:50:f3:f4:57:ff:3a:16:9e:79:
06:e7:0e:77:d7:be:6d:05:98:1d:2b:bd:c9:e9:61:67:77:51:
5f:e1:0d:90:60:3b:a5:e6:3b:78:ff:24:7f:b4:6d:76:51:8d:
b6:97:2c:09:85:aa:59:9f:ff:4c:1a:98:f1:a1:c3:ee:9b:68:
db:69:3b:0b:76:9c:2f:4c:f8:50:8d:8d:39:ba:66:d0:fc:8f:
c1:66:d4:5a:50:52:18:df:b4:30:e9:94:fb:af:88:a6:ef:43:
59:5a:f0:16:f0:f9:9b:79:a8:33:e5:44:01:90:87:15:0e:56:
92:0b:a5:7f:28:5e:18:34:50:c1:98:dd:06:36:d3:a5:ea:34:
b0:6d:b7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:48 2025 by rpki-client