Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14fe7ca2-dd59-3fe1-aedf-78f01224c72c.roa
File: 14fe7ca2-dd59-3fe1-aedf-78f01224c72c.roa (raw, json)
Hash identifier: leMvgBECPqGRAjTph5gLrNGiAL3LcU5iQT4VAKZfgUU=
Subject key identifier: 98:46:50:8C:FA:29:57:DE:CF:59:0E:1F:FB:60:63:EC:43:77:0B:19
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA1E3DE476364C3AE175951B8
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14fe7ca2-dd59-3fe1-aedf-78f01224c72c.roa
Signing time: Wed 20 Apr 2022 04:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:00:00 +0000
ROA not after: Wed 25 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.200.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:e3:de:47:63:64:c3:ae:17:59:51:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 04:00:00 2022 GMT
Not After : May 25 04:00:00 2022 GMT
Subject: CN=a4cbd7f1-37f4-4e28-9829-9b55c73d3b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:90:8c:6f:70:fc:ea:9e:b1:dc:c0:cb:86:40:
1a:79:fd:13:bf:cc:fb:34:2a:d9:db:08:05:47:6c:
f2:8c:d6:dc:bc:86:de:66:6a:13:73:bb:66:0d:5c:
68:b7:83:e0:df:fc:94:ca:76:f3:34:1b:34:f1:07:
8c:ab:e2:6a:4f:bd:ba:1d:e3:15:3a:9b:86:d7:e1:
56:6c:ff:9d:50:23:e6:91:22:06:37:2e:d5:ef:3f:
a7:e7:d6:f7:72:ad:7b:99:cb:85:de:7e:c5:c9:fc:
c3:47:c9:6a:29:b6:83:b4:21:c6:ee:2a:be:71:1b:
f2:fc:85:17:75:59:5f:af:f9:7e:13:6a:a6:b7:70:
4a:76:23:b3:f3:84:3e:11:7a:df:5f:2d:ff:6c:48:
f5:29:6c:0b:3a:02:e4:d9:33:d2:09:5d:81:c0:08:
1a:e2:5d:26:94:c5:e1:28:4d:7c:6e:5c:86:9e:c5:
9a:a3:62:34:90:2e:28:57:2c:9b:6d:94:c7:4a:a8:
b9:33:6a:6c:75:ed:77:b8:41:2f:98:64:14:bf:9c:
68:7b:3b:dc:5f:2e:5d:69:94:c0:99:24:16:d8:90:
3c:16:60:0a:d7:87:de:b2:03:7b:31:30:58:0a:8c:
bc:52:14:02:59:34:27:1e:45:25:1e:3a:0f:72:04:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:46:50:8C:FA:29:57:DE:CF:59:0E:1F:FB:60:63:EC:43:77:0B:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/14fe7ca2-dd59-3fe1-aedf-78f01224c72c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.200.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:1d:e7:3e:d7:3e:51:12:30:3f:e7:05:ad:29:7a:99:6f:7c:
ac:50:5d:4d:16:e6:b8:bc:a4:f4:c5:38:ce:ea:74:40:f2:cd:
41:b8:33:f7:9e:19:ad:39:0a:89:10:4b:bf:7d:40:ac:4a:cb:
1d:e9:52:b5:d8:59:e1:a5:22:bb:1e:5c:a9:0a:71:a0:4d:a4:
53:a3:63:97:dc:1d:85:af:d7:bb:6f:c1:00:83:b9:a4:d1:06:
db:fb:3c:d2:a9:c0:63:1d:8c:f3:99:c8:c5:e3:a9:b2:d7:6d:
14:86:9f:13:d5:16:9c:22:43:eb:77:63:bf:16:d3:23:b4:b0:
18:78:f8:73:c6:cf:ca:fc:7a:f5:50:5f:f0:2d:c8:43:ed:e9:
c7:8e:55:49:7f:79:3a:bd:6c:5f:72:08:3b:0d:80:de:1f:39:
4b:02:14:79:33:f6:75:78:56:1f:91:8c:c7:48:8d:8d:cf:7d:
e0:ad:e9:36:cd:e5:1e:b7:f3:60:2f:0f:6a:b0:65:ed:38:76:
15:f7:78:b6:77:08:f3:f8:42:1d:82:bf:f7:64:29:ca:99:5d:
2a:51:45:4b:aa:c4:b7:49:4b:5f:1e:e5:2e:f9:cf:eb:fc:87:
1f:ca:57:df:79:0e:26:12:a8:63:e3:0e:c4:22:2a:de:df:2b:
58:e4:9d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:28:08 2025 by rpki-client