Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23cf1311-c72e-37b0-bd0f-c3e157c8f957.roa
File: 23cf1311-c72e-37b0-bd0f-c3e157c8f957.roa (raw, json)
Hash identifier: JUW5GzEafZtr0beHcYRJXm1fGp+8Y9oAyNfpI8lPFYA=
Subject key identifier: 13:43:36:D0:8E:82:04:BE:8B:F1:04:EA:45:F6:FD:F3:FE:E6:04:C4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CF781BB3DD12120F3B441D300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23cf1311-c72e-37b0-bd0f-c3e157c8f957.roa
Signing time: Fri 18 Feb 2022 05:00:00 +0000
ROA not before: Fri 18 Feb 2022 05:00:00 +0000
ROA not after: Fri 25 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:f7:81:bb:3d:d1:21:20:f3:b4:41:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 18 05:00:00 2022 GMT
Not After : Mar 25 04:00:00 2022 GMT
Subject: CN=3ea14ce2-6b4f-46b7-98a8-7f3bd08979a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:12:08:1a:de:91:34:f0:20:85:34:9b:45:5e:
99:35:5b:28:e0:fb:98:95:73:ca:d1:a8:07:4a:d8:
5e:6b:24:77:ad:7d:2f:b4:8f:f1:17:59:2d:29:eb:
b4:19:10:24:2e:3b:5e:ee:ca:99:da:72:8a:bf:22:
3c:71:74:ad:f7:9c:ea:0d:43:03:8f:e1:2e:39:bb:
89:9a:6c:7b:e2:c2:e9:8c:9d:ae:8e:a3:0c:b3:9f:
0a:9c:bc:40:e3:cb:10:09:a7:99:55:c4:2a:76:93:
96:be:6b:62:55:34:4f:25:9f:f3:33:50:3f:ca:cb:
a0:ea:1d:b8:30:72:58:62:b0:83:6d:62:07:e9:2f:
08:a3:53:cf:d9:3d:71:58:1f:53:72:8e:d2:dd:95:
46:8d:d5:d6:c7:cd:c4:e7:59:3f:80:d6:9a:40:40:
60:d5:6d:53:3d:e5:97:b1:2f:a2:be:82:ec:79:af:
f8:8c:92:40:24:ca:cf:ef:ba:8f:45:4b:91:66:4e:
af:32:00:4b:7e:69:51:de:3b:b3:3c:5b:fc:c3:3a:
6a:da:57:8f:53:dc:00:38:61:12:df:c9:9d:98:9a:
ef:cb:4c:a7:9d:e3:5e:8f:f0:bd:40:c5:03:a2:9f:
dd:ef:ca:a7:67:76:02:72:45:90:5c:f3:c8:c0:1e:
e0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:43:36:D0:8E:82:04:BE:8B:F1:04:EA:45:F6:FD:F3:FE:E6:04:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/23cf1311-c72e-37b0-bd0f-c3e157c8f957.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:5e:4c:6d:29:a3:1e:72:44:0c:b6:e0:3a:86:41:57:10:bc:
73:d0:a6:97:46:f8:9a:2a:6b:b2:05:9b:76:a4:fe:ac:8b:68:
8e:2e:76:a7:fa:d1:58:e5:54:f0:a0:46:fe:3b:b3:cb:10:01:
34:0d:e6:75:47:6b:0d:78:63:56:10:23:5a:dc:97:1c:82:f9:
75:ef:06:34:3a:11:53:b7:ad:0e:9d:f8:50:b9:02:6a:6b:69:
c7:b0:ee:0e:34:60:fa:2a:7f:7c:40:54:f8:1f:62:35:c1:53:
0e:88:12:89:ca:ee:8a:14:48:db:9e:67:58:9a:e8:a7:50:10:
be:c5:d6:76:6d:64:e3:a5:e4:6b:ad:f2:ff:cd:d7:bf:39:9a:
2d:21:3a:a6:ed:9e:17:a0:50:cc:74:d5:d8:e7:b3:67:93:b7:
c7:06:e6:fe:20:83:5b:97:3f:c5:44:c5:73:d0:79:1f:54:a5:
50:4e:cc:4a:c2:0d:82:8c:f5:79:4d:c1:20:e9:34:05:37:bb:
61:77:df:33:15:40:6e:4c:e3:aa:74:4c:d9:a2:32:71:b4:dc:
5d:20:c9:86:55:6b:0b:e4:69:a7:88:8d:6e:0b:01:fb:c8:ce:
71:e8:f2:f5:95:75:46:bb:16:6d:c0:b2:4f:b3:f9:5d:e0:2c:
4d:01:4d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:34:42 2025 by rpki-client