Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1efd3c81-7a05-36aa-9483-6d96b411eb2b.roa
File: 1efd3c81-7a05-36aa-9483-6d96b411eb2b.roa (raw, json)
Hash identifier: mFI+2Yz+A0puYhXjL0f5t7w769vx6VVSckav8+L0kIc=
Subject key identifier: 5D:60:88:AE:63:ED:67:8A:72:A1:23:C4:AD:6B:6C:B0:FC:75:AC:5E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E658B50DEDA2CE6D01B6F5400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1efd3c81-7a05-36aa-9483-6d96b411eb2b.roa
Signing time: Tue 28 Jun 2022 12:00:00 +0000
ROA not before: Tue 28 Jun 2022 12:00:00 +0000
ROA not after: Wed 03 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.232.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:65:8b:50:de:da:2c:e6:d0:1b:6f:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 28 12:00:00 2022 GMT
Not After : Aug 3 04:00:00 2022 GMT
Subject: CN=577c8744-7d70-44e7-8d28-c0c37eaccb35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:7f:bc:da:0f:e0:4b:80:51:0c:25:42:d5:6c:
02:32:ec:09:4b:35:cf:bd:a2:03:b9:2a:46:20:63:
dc:fe:45:ee:45:af:18:6a:5e:40:1d:c8:e0:f1:96:
61:8c:b1:6c:f1:42:5f:ca:bf:d5:e5:f9:6a:63:23:
19:a3:f6:01:23:0a:0a:53:aa:13:36:ab:be:c7:20:
f2:ee:de:d2:7d:b2:02:69:24:dc:1e:42:40:f7:2c:
2a:e4:af:fb:45:5c:75:9c:b1:42:a4:f0:95:ce:d8:
9c:63:97:1a:3f:2b:4c:86:ac:fb:fd:03:3e:78:75:
fa:6e:87:a4:2d:c3:dc:d6:79:c6:88:5b:83:11:eb:
fe:49:45:ef:95:7f:11:df:56:49:24:d6:ac:35:05:
cc:5a:b9:34:e2:06:a2:1e:bd:92:fb:80:9f:9c:6a:
bd:f3:a6:40:32:7f:9b:ce:f2:c2:e3:fc:63:01:f3:
6d:90:68:d4:b4:9a:26:e4:04:9a:2c:13:65:6f:a4:
72:39:5c:5d:32:de:3e:e2:97:69:30:16:70:95:e6:
d1:ff:23:ac:49:e6:78:36:56:b5:b5:20:7e:f6:7a:
48:53:c2:03:50:9c:26:f3:46:fd:2a:d1:f9:bf:d8:
c2:39:4b:3d:a3:84:4d:b7:44:ab:5c:94:e7:e8:3e:
3c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:60:88:AE:63:ED:67:8A:72:A1:23:C4:AD:6B:6C:B0:FC:75:AC:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1efd3c81-7a05-36aa-9483-6d96b411eb2b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.232.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:5c:e7:d4:77:11:70:ac:15:fb:ee:00:80:e7:c7:0a:72:07:
a4:1c:e6:ff:17:d1:15:7c:49:94:a7:24:4d:e2:42:a9:f7:c7:
02:32:8e:9a:de:a0:3f:65:63:13:b2:02:4f:ba:ad:07:38:8a:
f2:d4:42:47:05:9c:53:15:53:41:a4:f1:6b:fd:50:13:6a:bd:
a4:ed:65:5a:cf:23:b5:6f:41:72:5a:80:b1:cb:01:46:71:91:
96:61:0f:3f:b8:d5:3a:ad:ee:39:6a:fc:25:9b:da:9a:f4:92:
2f:fa:54:e0:b2:5c:5c:52:84:80:ec:e2:1a:30:5a:86:8b:54:
46:59:f8:f6:5c:7a:07:0d:d9:d7:55:07:c6:53:34:8d:77:0b:
ec:a7:65:54:f2:46:23:e4:8e:6e:49:c4:b1:a6:5c:34:40:8e:
98:21:aa:ff:cc:32:41:e1:38:ad:24:4c:9e:b4:d2:81:50:b4:
84:ef:04:c8:ac:e3:5f:55:af:dc:4d:f8:ac:1b:7c:79:42:da:
8b:01:d2:f1:f5:0d:56:26:d4:31:ae:15:e1:cc:7f:07:1e:0b:
62:5a:0d:e2:51:3d:5d:44:10:15:bc:e6:78:e0:9d:33:da:36:
5a:a7:f0:12:02:4d:05:3e:46:be:48:fe:7e:12:e1:10:66:ea:
bb:d8:af:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:03 2025 by rpki-client