Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24297f40-755f-31e5-8235-6dc1ac0a934b.roa
File: 24297f40-755f-31e5-8235-6dc1ac0a934b.roa (raw, json)
Hash identifier: diiuox02rs2yGiC3wMJYHtcDzzIKXt15E6ZXgMy0K4s=
Subject key identifier: F6:9D:5B:45:F5:0D:4D:D1:EA:67:D5:86:39:A5:82:4A:C6:C6:0D:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EDB0787736D5135AF2F83DE70
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24297f40-755f-31e5-8235-6dc1ac0a934b.roa
Signing time: Tue 09 Aug 2022 12:00:00 +0000
ROA not before: Tue 09 Aug 2022 12:00:00 +0000
ROA not after: Wed 14 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:db:07:87:73:6d:51:35:af:2f:83:de:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 9 12:00:00 2022 GMT
Not After : Sep 14 04:00:00 2022 GMT
Subject: CN=d18ce4a2-e445-40fa-b2e2-a2edd24554c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:96:07:7c:a0:44:4a:4c:8e:b3:cc:c8:6e:
25:32:5a:18:32:0c:dd:c0:2d:be:29:ad:70:96:ef:
b7:3c:8d:4b:ee:3a:c4:d0:20:75:74:bb:43:f4:1c:
26:0e:8b:8e:ab:7b:c5:d9:c1:6f:a5:c2:a5:39:4d:
e8:64:ca:b6:39:56:dd:48:33:8f:a6:98:f8:77:cb:
55:ed:73:da:d2:05:e5:72:54:99:ed:8e:34:34:61:
4a:77:13:b8:a6:a4:b4:d7:5c:9a:26:81:99:e0:70:
13:6c:81:08:94:01:9c:15:e5:59:5d:e1:b6:46:ce:
7f:a4:d4:b8:f9:7a:4c:23:b6:78:91:28:c3:b4:c7:
ae:f8:1d:74:0e:d2:88:fb:6e:de:a5:0d:00:ab:e6:
25:84:f1:bb:5a:f4:c1:08:2a:69:d9:0f:43:12:f6:
34:aa:95:4d:ee:9e:7b:b6:13:49:2f:00:14:6e:9e:
c1:b7:15:e8:ea:35:27:8d:11:db:69:e2:8f:d5:76:
19:6c:57:85:3d:09:af:95:96:d7:66:e2:a9:ac:a8:
20:46:18:6e:b2:6c:3f:87:26:d0:d5:40:37:87:89:
d5:94:e6:d9:89:34:a3:72:8b:e8:11:08:e8:ab:8b:
ce:cc:17:c9:ed:78:a9:16:ab:6a:7f:c2:63:fd:ed:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:9D:5B:45:F5:0D:4D:D1:EA:67:D5:86:39:A5:82:4A:C6:C6:0D:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/24297f40-755f-31e5-8235-6dc1ac0a934b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:a7:24:fc:f3:cf:d0:4e:1d:c2:c3:b3:dd:93:d7:a4:fb:eb:
76:d5:2c:82:c7:82:c2:fd:78:f4:81:5e:ce:67:e7:01:59:0c:
13:e5:04:c5:67:f8:66:84:93:4e:f2:bc:ad:33:94:32:68:29:
7a:e5:7b:52:bd:33:1e:bc:0e:6a:71:ab:9e:b0:bd:d7:ab:e4:
5d:cb:a2:9e:b7:8e:64:86:64:86:67:79:b8:b8:5f:b1:67:e6:
e8:3d:db:a9:8a:e6:4d:d5:61:83:fe:60:57:9c:43:04:0d:9a:
38:b3:0e:f4:6b:81:51:7d:6b:6f:64:e9:35:c0:ea:75:93:b3:
02:bc:a2:d4:8f:7f:e3:ef:23:c7:e2:9a:ae:8f:99:bf:89:af:
3b:89:02:18:c0:72:a3:62:af:c8:e0:41:74:e6:5c:79:1d:3a:
63:2a:85:63:13:11:6a:df:49:99:59:cc:f9:28:f9:97:6c:2f:
82:2b:76:a0:09:8f:da:42:e4:05:48:fb:a3:13:52:95:b8:21:
eb:74:86:25:5a:1d:1a:31:87:21:7a:d3:d8:a7:10:86:a3:1b:
aa:0e:85:0f:bf:b1:26:7c:cb:91:6b:e2:14:9c:77:a1:cc:63:
cb:d1:d4:93:ff:3e:47:cd:ab:32:5f:94:01:ce:77:e1:94:0c:
60:7d:35:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:29:34 2025 by rpki-client