Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fcd1aa0-4893-3d02-845a-44f056bd42f3.roa
File: 0fcd1aa0-4893-3d02-845a-44f056bd42f3.roa (raw, json)
Hash identifier: z+dt2ch2nWw0S0ZvuYhaoI7WgCBywSxySlg31WRU4Ro=
Subject key identifier: 6B:F1:D8:03:D3:62:48:CB:32:50:C6:01:55:DC:95:F3:E1:FE:C1:51
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DC9352B57DD4313B049FF5280
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fcd1aa0-4893-3d02-845a-44f056bd42f3.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Wed 08 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.40.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c9:35:2b:57:dd:43:13:b0:49:ff:52:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : Jun 8 04:00:00 2022 GMT
Subject: CN=dc35db1c-7b24-4ca8-b5b4-53b33b4ef052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:7a:28:78:a4:55:b8:fe:73:21:b5:0c:53:
da:45:55:a4:8d:64:d5:ef:91:2b:3e:45:ed:28:9c:
bb:30:ee:ec:13:f5:45:43:54:b8:89:25:82:26:1a:
b1:57:1a:92:17:78:23:9f:c9:b4:c7:7d:f1:60:eb:
c6:b5:0e:82:8b:01:c9:b0:ac:32:45:7c:38:1c:8e:
17:41:b1:5b:30:ff:b2:7a:c4:22:31:5c:da:88:91:
d1:7d:7b:ff:65:80:ba:dd:2d:1f:93:35:1c:2a:cf:
2e:f7:85:54:29:6b:bd:e0:8c:92:e8:00:77:3f:25:
7a:c8:47:d6:e3:eb:63:07:06:3a:21:59:79:69:cc:
6f:e9:78:b7:99:a6:3d:04:19:b8:7f:71:8f:12:9b:
7c:f6:57:ee:a2:aa:b5:ed:c5:46:dd:f8:60:ae:74:
8d:26:82:c9:e6:b2:e1:0d:7a:1c:a7:15:d3:b6:6a:
86:25:dc:37:11:10:20:72:70:e8:12:35:e8:22:0e:
ff:a5:ad:b3:e0:82:a2:dc:20:84:88:c4:47:34:5a:
af:2c:8a:af:dc:0e:c4:d2:59:8e:ce:cf:7a:ee:27:
94:b1:6b:b9:f5:ca:b7:63:e9:fe:44:d6:8a:93:85:
17:eb:49:33:61:ea:41:df:02:99:94:5e:5f:4f:1c:
37:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F1:D8:03:D3:62:48:CB:32:50:C6:01:55:DC:95:F3:E1:FE:C1:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0fcd1aa0-4893-3d02-845a-44f056bd42f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.40.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e3:aa:d6:25:53:36:35:6d:24:21:d5:e7:20:68:ad:e0:4d:
53:f6:69:c1:df:d2:63:ea:b2:b1:d5:70:58:2b:4a:78:c3:b7:
52:c2:14:80:0c:7f:a2:01:2e:37:03:c1:02:3f:39:51:6a:b0:
ef:da:ba:a0:ba:59:f4:49:96:54:17:97:5e:d3:b9:dc:4f:54:
3f:6a:7d:c4:79:9f:aa:05:63:30:95:9d:98:31:ff:05:35:f2:
8c:2c:c2:70:96:95:48:04:4b:ca:f6:e0:1c:40:0f:b3:78:35:
52:d8:69:33:c5:7e:00:df:2d:41:31:bb:6d:29:f7:c6:e7:02:
99:c4:fd:33:21:e5:5c:7f:74:76:dc:08:7a:2a:f8:ce:9d:e7:
d7:72:06:5f:a7:3e:88:d0:d1:a0:6f:31:b5:cf:4a:b7:58:24:
81:eb:f9:bc:48:94:67:17:0b:00:ff:a6:79:a8:37:93:15:2f:
d7:b9:c6:1d:4b:32:e2:df:a8:ae:b5:af:b0:f5:52:01:10:09:
81:f3:07:fd:cf:32:be:c5:96:62:dd:50:e4:97:35:14:a9:1c:
15:dc:53:83:d6:0b:3c:e6:16:b3:5e:a8:25:77:61:3b:a1:01:
a4:84:49:d7:1f:2d:a6:71:a3:e4:73:6c:c1:0e:c4:a9:89:d6:
c3:4e:ed:55
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3JNStX3UMTsEn/UoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwMzEyMDAwMFoXDTIyMDYwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZGMzNWRiMWMtN2IyNC00Y2E4LWI1YjQtNTNiMzNiNGVmMDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkF6KHikVbj+cyG1DFPaRVWkjWTV75ErPkXt
KJy7MO7sE/VFQ1S4iSWCJhqxVxqSF3gjn8m0x33xYOvGtQ6CiwHJsKwyRXw4HI4X
QbFbMP+yesQiMVzaiJHRfXv/ZYC63S0fkzUcKs8u94VUKWu94IyS6AB3PyV6yEfW
4+tjBwY6IVl5acxv6Xi3maY9BBm4f3GPEpt89lfuoqq17cVG3fhgrnSNJoLJ5rLh
DXocpxXTtmqGJdw3ERAgcnDoEjXoIg7/pa2z4IKi3CCEiMRHNFqvLIqv3A7E0lmO
zs967ieUsWu59cq3Y+n+RNaKk4UX60kzYepB3wKZlF5fTxw3sQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFGvx2APTYkjLMlDGAVXclfPh/sFRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMGZjZDFhYTAtNDg5My0z
ZDAyLTg0NWEtNDRmMDU2YmQ0MmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDSgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfOOq1iVTNjVtJCHV5yBoreBNU/Zpwd/SY+qysdVwWCtKeMO3UsIUgAx/
ogEuNwPBAj85UWqw79q6oLpZ9EmWVBeXXtO53E9UP2p9xHmfqgVjMJWdmDH/BTXy
jCzCcJaVSARLyvbgHEAPs3g1UthpM8V+AN8tQTG7bSn3xucCmcT9MyHlXH90dtwI
eir4zp3n13IGX6c+iNDRoG8xtc9Kt1gkgev5vEiUZxcLAP+meag3kxUv17nGHUsy
4t+orrWvsPVSARAJgfMH/c8yvsWWYt1Q5Jc1FKkcFdxTg9YLPOYWs16oJXdhO6EB
pIRJ1x8tpnGj5HNswQ7EqYnWw07tVQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:20:49 2025 by rpki-client