Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01e4fcd3-4d48-317b-89c3-873ef4b67bc3.roa
File: 01e4fcd3-4d48-317b-89c3-873ef4b67bc3.roa (raw, json)
Hash identifier: hZz0+Y7TeUsnIle+vnTuBRaj3ovsgXb9J/1cp8fhh9s=
Subject key identifier: 43:AA:6C:7C:04:9D:76:77:20:40:FD:9B:54:5B:B3:A2:36:04:70:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F775DD428F12272826659A980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01e4fcd3-4d48-317b-89c3-873ef4b67bc3.roa
Signing time: Tue 04 Oct 2022 12:00:00 +0000
ROA not before: Tue 04 Oct 2022 12:00:00 +0000
ROA not after: Wed 09 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 13.232.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:77:5d:d4:28:f1:22:72:82:66:59:a9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 4 12:00:00 2022 GMT
Not After : Nov 9 05:00:00 2022 GMT
Subject: CN=b248e32c-84c2-4add-b597-b2ff8c0879f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:70:97:01:43:87:fe:4f:26:77:9d:1a:34:50:
14:34:70:6b:9d:48:7a:d8:ee:8c:d4:13:06:24:24:
02:2a:21:4e:d6:29:a0:44:de:ec:ab:14:55:d2:94:
12:cc:2b:67:d9:63:e0:5e:15:0b:42:92:c9:3b:83:
b4:17:77:c2:99:98:6e:d1:a0:b0:3d:14:ff:b3:15:
1a:6b:5e:f0:27:56:57:5e:64:a7:d0:a8:be:e0:e4:
f4:e5:96:42:91:c4:54:ab:ab:15:aa:88:8c:96:41:
e5:2a:ca:00:30:0c:81:62:71:08:73:5c:91:48:cb:
48:46:08:13:6c:a6:63:d9:92:8e:54:74:75:dd:2a:
22:a7:78:7c:a0:a9:18:ec:38:23:da:4a:c6:4f:87:
a7:0d:d3:f1:f0:d0:60:07:a8:4b:10:1d:f9:b6:2f:
45:2b:3f:a3:67:31:a3:3d:16:ac:d7:eb:0f:82:57:
70:da:d6:78:a6:cf:5c:59:92:dc:9e:78:e6:69:83:
24:e7:d1:06:cc:e2:1f:30:1a:bf:11:3e:cc:83:51:
9c:28:18:af:4e:7b:3d:a9:e1:3f:7d:d6:20:b5:a4:
52:d6:2f:d3:0a:35:f8:a0:e7:2c:3a:61:48:6c:6c:
d5:b2:20:d1:07:49:a7:c2:8f:97:04:00:c4:82:01:
ad:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AA:6C:7C:04:9D:76:77:20:40:FD:9B:54:5B:B3:A2:36:04:70:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/01e4fcd3-4d48-317b-89c3-873ef4b67bc3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.232.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:92:5b:1d:56:02:e4:91:ca:20:3e:82:44:cb:e9:b1:d9:fc:
29:b6:79:e9:3c:ba:6b:0c:ee:e6:ac:b2:84:f9:72:a9:ac:e5:
17:fb:17:9a:c2:de:7e:8a:d9:38:7b:40:c3:5d:8c:1a:ba:ab:
4e:a1:e1:37:3a:68:43:ab:80:aa:38:2c:cb:09:af:4d:3d:ae:
83:df:90:17:c4:ca:b3:5a:3d:39:3d:8d:a9:5f:cc:cc:33:f6:
86:9a:93:49:13:85:54:6a:cd:9d:d4:77:c2:31:66:cf:42:21:
95:b3:a6:6e:6f:d7:16:05:83:81:9b:9f:be:b6:d6:b2:0d:ac:
35:a0:65:7c:02:04:f5:5d:32:15:7a:59:71:10:10:96:eb:a0:
62:29:74:04:06:fb:ee:95:de:d0:90:3c:2c:1f:65:d9:85:fb:
2b:36:74:8f:55:0e:a3:27:50:90:df:35:d5:00:c4:23:8a:da:
2c:b3:1b:a9:56:c0:a2:a7:1c:de:b6:45:a3:c5:7e:9a:0f:34:
d3:bc:e6:f3:f8:28:63:09:d4:8f:64:de:3c:dc:1f:87:45:da:
04:f2:80:e3:32:32:67:81:66:89:b1:7f:13:3a:26:2e:47:8b:
7c:54:5b:de:19:a1:43:07:57:20:bb:2f:87:94:62:98:00:fe:
af:90:53:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:02:14 2025 by rpki-client