Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a3a7b1a-4de5-3bd5-8cae-316e21eed3a0.roa
File: 1a3a7b1a-4de5-3bd5-8cae-316e21eed3a0.roa (raw, json)
Hash identifier: NZlv65WlxzKrAVHb6eBbfdkpn8vzEzYi0tTb02VcC/Q=
Subject key identifier: 65:C7:0E:8F:7D:42:63:B2:6E:79:03:D9:52:A3:AF:27:2F:51:B9:4A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584013ACDB5FC0841ABD94552D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a3a7b1a-4de5-3bd5-8cae-316e21eed3a0.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:ac:db:5f:c0:84:1a:bd:94:55:2d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=992f9dfd-86b3-487d-8e79-a94ea494dd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:e6:4e:3c:72:07:35:35:14:3c:09:af:0c:ec:
f8:dc:3d:b0:b7:f6:d3:b1:e1:02:c1:81:89:8e:44:
2a:94:b7:9b:39:89:a0:4b:1e:93:65:09:7f:ce:d6:
4e:12:6e:e6:b0:26:97:6f:69:0f:27:b4:9c:ea:b5:
10:a7:49:03:9a:d3:f2:ae:01:ea:04:9a:c4:a3:1b:
e5:6e:11:3b:e8:63:33:bf:aa:cd:63:69:0f:0f:a5:
16:7e:0f:27:7e:18:54:2e:7a:a4:0a:c4:12:eb:42:
53:5f:9e:21:ab:05:03:c7:fa:2e:45:97:06:1a:0f:
31:43:26:b8:44:5f:dd:ef:ed:3e:36:21:e0:1f:c5:
72:5d:8a:f1:85:e9:4f:18:55:6f:0f:97:b2:73:1d:
1b:bd:ad:9e:51:b9:4a:2a:bc:db:6b:95:73:65:1b:
77:9e:e3:87:39:c3:19:db:8e:d9:81:9a:2a:cf:d0:
e8:7d:34:2d:ae:8b:45:e4:e3:d6:35:71:bb:bf:39:
ab:06:7f:51:16:da:ef:d6:f4:b3:48:96:38:1d:98:
19:42:61:c9:88:33:98:5e:51:65:3c:e8:6f:87:6c:
7e:08:82:93:35:7e:0b:fe:dc:49:92:9b:a3:be:66:
75:d4:4e:70:50:88:d4:49:88:ac:e8:f3:59:d9:80:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:0E:8F:7D:42:63:B2:6E:79:03:D9:52:A3:AF:27:2F:51:B9:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1a3a7b1a-4de5-3bd5-8cae-316e21eed3a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:e6:43:34:33:0b:83:55:19:1c:e8:1f:01:b9:78:b1:18:d3:
67:07:4e:23:55:58:b5:34:66:34:42:e6:3c:b6:e8:55:a5:7e:
64:3e:18:60:81:89:dd:0b:ce:65:ce:d1:85:f3:ec:78:b2:98:
26:b6:01:1a:65:59:33:03:68:0b:db:b1:25:b1:18:15:51:0e:
76:8c:7d:79:d2:99:d6:cf:dd:4c:5e:25:6f:da:28:08:b4:45:
d8:d2:7d:d6:bf:ca:6b:b1:43:97:02:c6:0e:f1:58:0d:67:6d:
86:1d:6f:13:df:0a:c6:ac:4e:03:1a:99:43:a9:28:17:bc:bf:
2b:a0:58:93:a4:ab:2e:89:39:5a:47:70:61:6f:d4:9a:22:ac:
3a:6d:b2:e1:93:db:4f:fb:3e:ee:75:04:2c:34:39:33:83:0c:
21:02:73:42:a7:80:ee:7c:de:09:99:82:f4:86:08:a4:2f:5d:
a8:fc:8d:2b:ed:2f:ae:46:f5:7f:6d:19:9c:e0:bb:4c:03:5c:
e3:d1:7b:d1:12:13:6d:69:fe:8e:2a:0d:1e:b3:de:cc:c5:77:
59:cc:3e:b0:4d:7a:b7:a8:e0:90:0b:01:54:1d:cb:7b:a5:29:
66:26:e2:54:40:98:11:10:5c:4a:b1:7f:e4:1d:d1:e4:94:06:
2e:ca:8d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:22 2025 by rpki-client