Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01c6c3a3-795d-3312-974e-40f462364895.roa
File: 01c6c3a3-795d-3312-974e-40f462364895.roa (raw, json)
Hash identifier: oHOKnSSPZZcu6rZpXCHc0exRdMDATgxXDjVJyn5m4RA=
Subject key identifier: 78:E6:84:27:F7:04:A7:44:F7:62:51:28:2A:9C:02:E5:6E:55:94:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D45BBC79C8E32ECF9A9926F40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01c6c3a3-795d-3312-974e-40f462364895.roa
Signing time: Fri 18 Mar 2022 04:00:00 +0000
ROA not before: Fri 18 Mar 2022 04:00:00 +0000
ROA not after: Fri 22 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:45:bb:c7:9c:8e:32:ec:f9:a9:92:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 18 04:00:00 2022 GMT
Not After : Apr 22 04:00:00 2022 GMT
Subject: CN=df687196-bec1-49d1-803f-93d4a57b50f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:12:b3:0c:6c:c8:a4:cf:0c:4e:9d:d8:9a:d7:
75:a2:ff:8d:36:ed:a2:60:60:af:3f:ac:04:2f:0d:
00:fe:53:fd:dc:99:1a:01:d9:48:2d:4f:3a:27:97:
5f:65:1a:4a:08:07:21:ea:3d:c7:f9:27:35:06:c7:
a7:c8:ef:de:d1:2c:7c:56:1e:81:e8:55:d4:35:be:
20:0a:56:72:29:27:9c:11:51:e3:64:60:5e:9b:5f:
d6:41:e1:e0:a6:5a:1c:e8:cc:b3:72:dd:0f:87:b6:
e3:07:80:e2:a0:7a:3f:63:e8:13:9c:f7:1a:d7:7a:
3f:06:20:7b:c4:94:fe:69:0f:06:b9:de:72:4b:fc:
fd:1d:03:b7:ba:3f:d9:a2:63:4a:cd:7b:16:88:85:
5b:5c:a0:b1:9d:6c:3f:50:1b:32:8e:89:c7:a9:f5:
cd:d8:38:13:68:aa:8c:82:64:04:6c:04:c9:53:4f:
1d:9a:cc:e5:eb:73:0f:42:c8:37:e7:a5:df:0c:4e:
71:2a:41:db:7a:a5:b7:e9:08:ce:4c:7b:3b:c9:9e:
4c:fc:55:1e:ae:99:8e:d2:2b:b9:3a:c5:4a:5b:20:
ee:a0:f4:f0:c4:f7:01:25:8d:98:24:97:3a:9e:83:
a3:19:b2:78:95:50:4c:10:4d:9f:12:29:c0:47:8f:
1e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E6:84:27:F7:04:A7:44:F7:62:51:28:2A:9C:02:E5:6E:55:94:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01c6c3a3-795d-3312-974e-40f462364895.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:1b:91:ac:1a:78:c5:e4:8a:a9:75:7e:bb:42:2c:07:8a:e6:
1e:28:01:e4:8d:40:d0:96:2e:3d:60:bc:78:8a:c8:c9:ac:d6:
45:0b:55:32:47:51:f0:b1:be:69:30:6b:fa:46:b5:bb:d5:6b:
29:3a:6d:54:bf:bf:c4:dc:05:0a:b0:bf:81:99:aa:c1:bb:ca:
fa:3e:2f:5e:3a:2e:f6:ab:bb:8d:22:29:67:8c:21:2d:75:c7:
e1:74:45:2b:4e:dc:40:7c:54:96:c9:76:62:90:f6:78:83:89:
e4:e5:6f:86:c5:f7:45:60:e8:cd:9b:06:14:00:bc:39:f1:9d:
f4:2e:4c:6c:4f:85:d0:ae:c6:a0:3f:b0:e5:1a:dc:cd:33:42:
ed:88:b5:09:0e:3c:ab:5c:da:e2:eb:c5:d3:e0:f1:50:11:10:
e5:3d:25:7b:a9:61:d8:24:fb:ff:40:90:9a:9d:06:fb:11:5d:
70:e6:c1:44:c7:f2:8a:ba:af:15:21:88:b5:a0:de:5d:63:48:
6b:b8:bd:be:ff:26:97:62:be:52:71:40:ef:37:11:cb:f8:ae:
7f:ed:aa:bf:4e:a8:cf:a9:57:c8:dc:fa:0f:14:74:ff:39:a1:
75:33:62:cd:ef:6a:7d:3a:e5:95:bf:af:3a:6c:af:0e:9e:cf:
42:4b:33:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:10 2025 by rpki-client