Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1247e4de-2494-39cb-a703-579abb82bbdf.roa
File: 1247e4de-2494-39cb-a703-579abb82bbdf.roa (raw, json)
Hash identifier: 9NUxwOAcdfX3ybB5g6ugcaog2GECRZCHG/LueKuxIrA=
Subject key identifier: 94:06:CB:22:16:DF:26:3E:0F:00:8F:E8:5B:53:75:51:2C:5D:DC:80
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9E6BEBB92C136486E0471180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1247e4de-2494-39cb-a703-579abb82bbdf.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:6b:eb:b9:2c:13:64:86:e0:47:11:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=4255aa5d-6cd4-43f3-90df-9ea8a09d39a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:cd:c7:f9:db:ab:f4:dc:91:83:09:e9:9f:62:
f1:e4:6f:b1:a6:75:7a:2b:72:4d:f3:8a:0c:fb:6e:
df:6c:3b:99:64:57:86:0a:31:b4:11:5a:0a:a6:17:
ea:49:6d:79:6a:ea:51:62:f4:64:0d:e1:ec:c9:70:
e9:ab:88:22:50:7e:57:8a:3e:2c:45:51:23:98:29:
09:e0:b2:2a:7e:ab:04:eb:95:df:3f:98:70:95:c2:
85:4b:6b:d7:2f:0e:3b:e8:8c:c0:63:54:d9:74:61:
27:cc:4b:ab:da:da:17:58:01:b4:83:16:ea:86:3b:
48:73:e7:ab:9a:52:81:31:ad:ea:71:87:b0:fe:fa:
50:32:b4:e5:b0:9b:25:fc:33:6c:54:19:50:ab:86:
b3:9b:73:dd:84:80:d6:3e:b5:2d:c5:e5:2c:30:e2:
6b:74:16:3b:09:af:5d:e1:6e:13:69:99:e5:91:3b:
0d:db:f5:52:be:b9:4d:63:54:fd:39:59:44:d2:8b:
f9:08:c6:5d:a9:dc:22:73:03:09:1c:32:35:c2:0e:
d6:b8:a6:e6:18:10:b9:60:e7:c7:f0:ac:b3:e0:23:
f7:11:71:03:03:6d:63:57:9f:5c:2c:0a:a2:c2:bd:
96:74:84:24:b5:25:01:a7:ce:ae:af:21:45:27:a0:
4a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:06:CB:22:16:DF:26:3E:0F:00:8F:E8:5B:53:75:51:2C:5D:DC:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1247e4de-2494-39cb-a703-579abb82bbdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:56:fc:0f:5f:d1:24:a7:3a:e9:3a:e4:82:f0:df:33:12:b8:
6f:c6:5b:e4:3a:c5:d0:47:18:69:83:9b:c4:ce:e2:bd:b0:d9:
cd:7c:85:99:85:fc:b0:ad:2a:5c:f1:5f:64:b5:53:01:a9:01:
b0:78:54:e7:1c:f8:62:e2:a9:d5:22:da:88:26:58:53:77:eb:
c6:59:f0:89:12:77:8d:af:dd:30:d5:c7:22:26:f1:41:e8:f4:
19:f2:43:a9:80:5e:20:fb:2d:d7:ee:5a:ad:82:bb:6f:5e:e4:
5a:b5:56:17:77:1f:76:eb:7a:b8:7e:6b:1b:fe:52:72:88:00:
2a:3d:ff:9b:74:17:2a:c0:1b:99:51:c2:a5:bb:b4:69:68:16:
ba:6e:e3:62:c4:ed:66:be:16:d5:2c:90:8b:a2:e2:d1:09:7b:
32:8a:7e:43:02:89:25:6f:8b:dd:80:36:62:75:52:5c:75:8f:
cc:90:ce:71:f6:f7:2c:04:34:f1:ba:79:a2:43:ec:8e:e1:d5:
97:82:1e:ba:5c:36:72:3c:fb:9a:85:ac:21:df:be:ae:3f:48:
53:f4:f1:62:f3:87:7d:e6:cc:76:53:0a:78:59:fc:9f:83:1f:
72:dd:43:d9:a8:e1:4e:5e:11:15:62:c0:2d:0a:a0:45:40:44:
36:3e:c2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:33 2025 by rpki-client