Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1516df7e-2be4-3f71-9ab8-35ffdbfea338.roa
File: 1516df7e-2be4-3f71-9ab8-35ffdbfea338.roa (raw, json)
Hash identifier: svKf4qCBCZ1Je6XtIG7EbB9H3AEP4/OYcIX5TNJnzsE=
Subject key identifier: 1E:4A:2C:F9:14:80:D8:59:84:B5:6E:BF:73:85:6C:21:A0:66:11:E5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC5E24A01B4A9380F7CEFB380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1516df7e-2be4-3f71-9ab8-35ffdbfea338.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.48.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:e2:4a:01:b4:a9:38:0f:7c:ef:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=0ea1f899-8c4a-44d8-85ea-e58f8b117fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4f:50:52:c7:34:02:97:88:16:48:5d:0b:bc:
ef:db:1e:a6:5a:bd:0a:c6:2b:ce:01:59:40:8c:b1:
75:f2:94:9c:63:15:f9:b0:1e:bb:c5:3b:55:74:f3:
69:e4:6f:a9:33:ae:b7:b8:b7:7b:67:9d:9b:54:90:
0f:03:62:7e:92:b6:f1:94:45:86:45:c9:45:37:8f:
4d:38:32:50:d6:6a:bf:8f:21:11:7a:14:d8:89:e7:
4f:b7:ec:1a:f0:a7:7f:37:6e:26:20:d5:5e:be:9b:
b6:dc:2c:4c:13:fd:5d:2e:99:ef:83:63:9c:8a:dd:
0b:86:3b:b0:ba:35:bb:bf:4a:3c:e9:0c:ff:96:9f:
0f:b4:88:bf:da:dc:ff:47:c5:3c:f4:c3:d8:e7:0c:
7f:bf:77:29:54:7d:6f:ad:eb:1d:b9:de:67:13:b5:
49:12:1b:cf:8c:e9:a0:65:c1:41:dc:6d:1d:19:8a:
f7:1e:a4:17:fd:c4:49:20:d4:dc:b2:78:7d:6f:fb:
d8:d3:0e:13:3a:67:b6:f4:20:c3:d2:e1:ad:c6:01:
ca:2d:9c:76:98:a1:e3:c6:9d:fd:d2:06:c7:5d:e6:
48:ab:b1:78:3a:6d:80:8b:99:00:49:aa:23:d2:ff:
43:3f:d5:be:86:3e:73:2d:1b:0a:da:bc:b6:c6:a0:
93:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4A:2C:F9:14:80:D8:59:84:B5:6E:BF:73:85:6C:21:A0:66:11:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1516df7e-2be4-3f71-9ab8-35ffdbfea338.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.48.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:1f:f3:3c:d3:ae:4e:17:a6:aa:4c:fd:82:26:a1:cf:68:d0:
50:99:39:28:fe:df:f1:ea:eb:1d:2e:90:00:5c:ad:da:9f:ac:
5b:29:53:49:80:59:65:68:13:53:17:58:ec:30:02:b7:39:a0:
cb:2b:1e:5d:79:eb:e7:c2:b2:a7:2a:67:65:6d:d8:a0:e2:c8:
9b:e8:3c:10:09:f0:af:04:0e:28:1b:6e:f8:20:67:eb:e5:7c:
bf:c0:06:60:ae:42:a7:33:fd:35:10:a7:d4:cc:7c:ee:0d:cd:
55:3f:bc:ab:c6:b4:05:4c:c3:cc:98:f4:12:ba:f5:af:de:08:
8e:65:a3:6b:da:58:fc:c3:1b:8b:ff:4b:21:6c:5d:6b:da:e7:
48:15:08:49:76:29:50:d2:26:4b:7b:8f:20:e3:0e:5b:d7:47:
0c:97:c6:88:f9:c0:3a:ed:07:28:38:30:e6:21:e3:4a:88:79:
7e:aa:6b:10:f5:20:83:bd:78:d2:0f:13:05:43:6f:ca:d4:51:
a4:c5:df:53:41:f1:49:56:71:93:9d:b9:14:55:fa:79:c1:02:
21:18:ae:24:44:2c:fe:7a:e7:80:f2:fd:5b:2d:dc:e4:15:c6:
9c:08:4b:b1:bd:8e:9a:8a:4e:20:56:7b:ff:de:27:ff:4d:87:
9b:df:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:14:55 2025 by rpki-client