Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f5fc1fb-850f-3acc-b456-473b2fa8410a.roa
File: 1f5fc1fb-850f-3acc-b456-473b2fa8410a.roa (raw, json)
Hash identifier: saBR4BsJrcvPPXzPw3B+iBlVjZr9yeK0kTjQuuIF1bk=
Subject key identifier: 27:BF:3D:8A:45:7C:E8:D8:26:C4:24:37:53:E8:EA:89:8C:6E:46:F0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA210C2AE1EDB6C56458B5080
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f5fc1fb-850f-3acc-b456-473b2fa8410a.roa
Signing time: Wed 20 Apr 2022 04:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:00:00 +0000
ROA not after: Wed 25 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.124.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a2:10:c2:ae:1e:db:6c:56:45:8b:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 04:00:00 2022 GMT
Not After : May 25 04:00:00 2022 GMT
Subject: CN=5728a71c-60b4-4f0e-9dbe-83cc76254138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a3:38:8f:f0:b5:90:e0:69:de:94:44:2f:21:
a6:07:5e:aa:fe:8a:05:29:f5:52:8a:cd:26:e4:7b:
8d:9a:c2:17:3d:cd:84:23:27:28:c9:f0:f8:f7:17:
ed:6b:aa:70:bf:f0:0f:68:59:c6:38:05:05:86:16:
3a:4d:4a:ba:48:9f:ed:7a:57:da:a5:99:bf:a8:7f:
45:f5:99:8d:71:b4:7f:88:7c:d1:a0:3c:68:3f:c3:
9a:d8:74:79:ae:38:1f:c5:f6:7a:51:05:e8:17:90:
33:49:28:b6:dd:00:22:59:f4:5c:54:ae:d4:17:4c:
24:8d:2d:dc:be:d7:89:0f:e1:b0:74:5b:fe:4e:02:
cc:00:8c:37:25:a1:d1:36:ef:d8:5a:8e:4f:22:a9:
5e:9c:8b:2b:06:42:0b:9e:52:2a:9b:a2:e8:a8:3f:
ee:0a:5b:21:5f:fd:69:f2:f4:94:67:60:94:e9:e7:
c6:a1:89:db:8e:a3:91:4c:af:29:91:d6:71:05:23:
1c:84:92:4c:59:bd:b4:51:e9:c0:e0:92:04:96:cf:
48:59:99:7a:7f:6a:87:c6:76:7b:f3:39:a3:39:18:
d8:cf:69:22:ae:36:6c:6d:64:57:42:cc:22:db:30:
3f:d4:fb:80:13:e5:68:07:5e:0d:45:37:3a:13:c6:
b8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BF:3D:8A:45:7C:E8:D8:26:C4:24:37:53:E8:EA:89:8C:6E:46:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1f5fc1fb-850f-3acc-b456-473b2fa8410a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.124.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:de:b1:c4:08:de:2c:d2:66:ea:58:38:86:2b:10:1c:7b:70:
17:75:03:92:de:53:e7:ae:96:3a:43:d1:5b:58:c2:41:c2:45:
26:10:f8:55:42:74:8c:ed:2a:e8:00:2b:1a:a8:bb:fc:c2:6d:
2e:c5:17:fc:3b:1b:33:75:79:08:5c:dc:23:a0:c5:29:a2:6c:
9e:6e:43:07:e1:a6:72:a6:25:3e:a7:0d:29:8b:d1:1a:4d:68:
b6:72:2e:50:dc:91:69:b3:8f:a1:63:55:17:33:21:89:78:b4:
a1:15:5b:62:1a:92:ac:ff:59:03:0b:0a:0d:9b:55:9f:4e:9b:
8a:ff:94:29:34:d5:72:8f:96:89:e6:9e:ec:9f:fd:30:33:f8:
b3:d0:92:1a:27:5c:02:02:a8:0b:6f:9c:7e:11:1c:bc:e0:e6:
31:d0:7b:3f:1e:82:80:82:0c:33:5c:d2:b2:99:17:3f:a8:6b:
bf:f0:70:85:d3:72:7c:12:61:a7:13:bf:25:8d:9a:4a:50:cc:
b6:23:1f:b8:26:1c:d3:2c:37:56:c0:6c:f3:ba:f5:2b:5a:c4:
8d:dd:58:58:50:bc:8b:27:b4:f1:33:59:1a:74:4f:97:8a:6b:
b5:f3:29:8f:eb:0b:41:26:01:a3:e8:0f:a1:2b:31:fc:92:f1:
72:8e:04:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:06:25 2025 by rpki-client