Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04960241-2439-372f-a358-de54861cb1f2.roa
File: 04960241-2439-372f-a358-de54861cb1f2.roa (raw, json)
Hash identifier: w6rDeNaVdeppb+SV0pNvnAI4JuKupbZeWRh1fSj9W8I=
Subject key identifier: 3D:98:A9:6E:A9:F1:CF:EA:4D:19:58:A5:7C:5D:0A:5C:C6:94:FE:89
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F7704B5B8A174A2D75B98B3C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04960241-2439-372f-a358-de54861cb1f2.roa
Signing time: Tue 04 Oct 2022 12:00:00 +0000
ROA not before: Tue 04 Oct 2022 12:00:00 +0000
ROA not after: Wed 09 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 13.212.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:77:04:b5:b8:a1:74:a2:d7:5b:98:b3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 4 12:00:00 2022 GMT
Not After : Nov 9 05:00:00 2022 GMT
Subject: CN=03c7aba6-f872-4d9d-983f-8ccee80eb75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0f:2d:19:5e:df:3a:c1:58:3a:ed:9c:c5:1c:
63:ac:0c:66:65:b4:ac:ed:90:4d:a6:11:6c:6b:b8:
73:3d:78:c5:08:3c:e5:3b:60:6f:34:95:40:5d:94:
07:d0:a9:e2:61:cb:a8:21:bd:16:b6:25:f3:08:40:
39:2a:d6:9a:f8:6a:fc:fc:f8:c2:cd:a9:cf:56:49:
5d:a5:d6:5d:c4:1f:88:c2:ca:03:c4:be:1d:58:f3:
da:6d:d4:b8:dd:23:58:43:1e:16:09:cd:2a:24:53:
92:96:c8:29:ae:e6:e3:49:5a:0d:3b:c4:0c:b9:79:
8c:45:80:4a:5a:5f:1d:bb:90:87:7e:6f:e0:53:7f:
2d:35:21:b1:71:3f:9a:44:1a:f5:42:df:e0:90:20:
f2:6c:04:a7:99:c1:f3:26:db:b6:95:8b:76:e1:9e:
5f:5f:e4:96:72:0d:93:27:58:6a:d1:2b:eb:ae:3b:
b5:1a:68:63:e3:33:a9:47:4a:cf:4c:27:d4:37:b1:
35:15:94:e4:23:05:86:24:e3:80:d0:ea:bf:55:a5:
42:1a:0a:62:43:aa:08:5d:1a:99:f5:d0:b8:e5:23:
10:59:82:af:84:63:86:3b:9c:44:a2:63:cb:9b:d2:
2c:1f:04:64:19:41:39:08:39:89:30:de:47:f8:b1:
72:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:A9:6E:A9:F1:CF:EA:4D:19:58:A5:7C:5D:0A:5C:C6:94:FE:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/04960241-2439-372f-a358-de54861cb1f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.212.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:0b:bb:f7:74:1b:a3:a0:e8:48:d8:4d:d5:60:02:e2:22:e4:
8f:c1:3f:5d:fa:a1:bc:eb:3f:7a:4e:9d:9d:ea:dc:1f:fa:7c:
02:93:86:39:52:97:3a:f0:5b:05:5a:ab:50:e9:b6:16:5d:a7:
a0:8e:2e:93:7e:45:5d:71:74:e9:d4:21:46:d6:2f:9d:74:70:
99:b9:ce:2d:ae:81:bd:d1:b7:d6:82:02:82:20:86:6d:f3:fa:
6e:02:cf:72:05:12:1b:f6:77:e2:ee:01:52:2f:be:01:e0:17:
d2:46:76:3c:64:70:b9:c6:24:dc:ba:c1:93:91:ef:d7:f6:d7:
7e:fa:22:14:cd:fa:71:f8:fa:84:9c:77:ea:c0:83:44:21:3a:
b2:f0:72:12:83:8f:f4:89:8d:3e:15:24:93:86:95:d5:22:12:
60:61:a5:14:44:76:54:02:49:9c:46:d8:f3:ce:7c:1e:f9:8f:
bf:8f:03:58:e2:6b:53:64:d2:bc:1b:32:4b:11:d8:35:e4:bb:
d8:55:e5:b6:bc:fe:e3:69:71:0c:33:9d:0a:7b:af:0d:da:33:
16:d7:36:ba:d2:29:4f:ca:23:3b:d6:65:26:93:40:5c:e8:aa:
b8:f8:9f:d7:96:a2:30:fd:6b:e5:af:18:4b:19:02:ee:c5:f1:
12:5c:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:55:10 2025 by rpki-client