Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/115c3882-87d7-316a-a2d0-c13e99aa6b54.roa
File: 115c3882-87d7-316a-a2d0-c13e99aa6b54.roa (raw, json)
Hash identifier: YczCQlLEBXnG9L+GWFoDeTX0YgSlU8THN8vMIiJFINg=
Subject key identifier: AF:03:99:2B:8F:58:61:41:29:4A:F7:C3:A8:F5:FB:3F:AA:AC:21:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DC917440421E85B2396518000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/115c3882-87d7-316a-a2d0-c13e99aa6b54.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Wed 08 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.232.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c9:17:44:04:21:e8:5b:23:96:51:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : Jun 8 04:00:00 2022 GMT
Subject: CN=2dbe003d-85d3-4033-9e1a-3f8b05ab2914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:00:c1:0c:a4:7d:2b:4e:e1:5f:58:88:75:75:
0a:94:b2:a4:67:cd:b6:4c:69:9d:8e:fe:cc:77:2e:
7e:f7:db:da:f7:22:be:77:2f:03:36:2e:4c:f4:b7:
7f:2d:a7:50:e9:e7:f2:d4:ba:10:66:79:75:56:c9:
3d:80:e0:d8:a2:18:2e:32:35:2d:ae:f5:13:3e:67:
90:15:6f:f6:90:40:d9:35:e7:a1:20:bb:88:2c:44:
15:5c:b7:2a:d3:8c:0a:01:6b:ee:a6:72:b8:b9:4c:
aa:d6:82:06:bc:22:f9:84:ce:99:05:06:41:7f:a1:
66:9f:ce:30:8c:d3:c9:28:aa:ab:d5:c6:42:3b:10:
eb:97:a6:c1:2e:13:e3:64:33:59:a1:d1:69:2a:07:
7c:af:b3:73:a8:3f:b2:51:86:24:13:f0:a5:eb:47:
8e:6b:eb:b3:de:4c:76:04:3a:75:fd:f0:51:35:20:
7d:53:b9:60:b4:5a:01:36:5b:e2:29:87:40:2c:b3:
6a:97:49:d1:68:13:fd:6a:c8:86:ef:c5:07:d1:52:
40:a3:fc:fc:62:63:51:98:be:92:82:f3:31:b3:64:
ce:63:60:ee:e9:33:73:15:e9:95:ec:26:6a:4f:b9:
c5:15:f7:4e:61:6e:bd:73:cc:be:43:6c:c5:0e:a6:
f2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:03:99:2B:8F:58:61:41:29:4A:F7:C3:A8:F5:FB:3F:AA:AC:21:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/115c3882-87d7-316a-a2d0-c13e99aa6b54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.232.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:64:74:81:c9:6f:06:a4:97:25:3d:8e:4b:16:62:66:93:9b:
a8:8b:22:39:1e:5e:ee:eb:a8:b3:29:32:c5:bd:6c:72:94:1a:
b9:bf:15:3e:84:40:23:9e:cf:5b:d7:5b:9b:a7:41:40:6c:9c:
61:ba:cf:1f:73:99:1a:06:7a:ef:f7:6e:63:ff:6c:f4:6f:85:
ee:8b:b7:87:cc:ec:78:a5:0d:7e:44:dd:d1:fc:66:75:eb:23:
8e:56:4b:94:45:ce:fe:12:ad:f3:72:ee:3e:7b:f6:bc:e4:12:
6a:aa:85:44:e3:e5:7d:00:29:91:6f:e8:7f:85:01:6b:8a:a6:
73:f4:21:cb:1b:23:d4:2e:a3:20:9f:6a:09:8f:66:15:80:31:
fd:2b:38:e6:b7:cb:03:5b:1d:92:5c:10:be:be:fd:f1:81:55:
14:7d:55:48:88:d1:89:b1:60:bf:44:15:a2:ea:49:86:91:f8:
73:a0:79:00:26:ab:bf:67:7e:8b:e8:94:0a:04:78:28:9f:4d:
78:5a:a7:0d:e9:26:40:d1:ab:d0:49:20:d2:fa:a8:f3:fc:c9:
a7:3b:82:3c:99:f4:42:cb:fc:41:2a:7a:fc:05:52:85:3e:32:
73:c1:a5:0c:c3:db:5a:56:5c:f7:cd:f3:3a:c0:b3:94:b7:31:
c1:7b:16:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:45 2025 by rpki-client