Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2780553c-2888-3c35-849b-4a8a1d6bbdc6.roa
File: 2780553c-2888-3c35-849b-4a8a1d6bbdc6.roa (raw, json)
Hash identifier: 6e2v8jQBAKGTqerMkdn6sdDddUqy4lrmTdvrtTbRh2o=
Subject key identifier: D1:EF:81:2A:9B:77:E6:7D:2C:7F:E2:05:43:B5:97:C6:4B:06:75:B3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA21F4FDD001E42CBFFB2D900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2780553c-2888-3c35-849b-4a8a1d6bbdc6.roa
Signing time: Wed 20 Apr 2022 04:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:00:00 +0000
ROA not after: Wed 25 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a2:1f:4f:dd:00:1e:42:cb:ff:b2:d9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 04:00:00 2022 GMT
Not After : May 25 04:00:00 2022 GMT
Subject: CN=09fe9afc-ac3f-48ba-8bb7-d42834238d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:18:25:1b:60:b2:66:bc:90:7e:d8:32:c3:64:
8a:46:13:e1:0f:c5:d6:f2:a1:5e:aa:8d:09:56:95:
45:6d:50:34:5e:4f:0d:7e:84:e4:b4:44:6d:3b:90:
19:03:b3:1a:cf:b7:63:98:c3:a7:07:d2:59:57:21:
4f:03:a3:38:11:71:2b:09:b6:1b:47:a5:38:88:6e:
43:64:44:59:2b:07:2f:fa:88:e0:a7:d4:df:e2:da:
fe:d4:43:67:a6:0f:f6:01:c8:00:0c:80:8e:c8:c1:
fd:7d:47:56:0e:73:00:f5:72:6b:31:e7:10:46:fa:
58:fe:69:57:79:78:ea:13:16:ab:13:eb:21:7c:84:
1e:5e:8c:53:98:cf:f6:dc:62:3e:1b:f7:78:46:9c:
0b:cb:26:2c:28:cd:af:da:84:be:f9:a2:a3:40:13:
fd:79:64:13:83:66:bc:a4:bd:43:56:09:2b:15:d6:
54:63:8b:90:77:97:5d:a2:ff:2e:7c:5c:c9:e2:11:
df:12:ea:32:2c:8c:0d:f2:79:3d:a6:79:73:15:86:
c7:75:64:d8:a0:86:7e:ee:d4:d2:dc:b5:01:c1:ce:
0d:be:1d:17:54:6e:2b:21:f1:c0:b4:11:38:ea:b4:
d1:d0:23:2e:90:03:c1:5a:45:fb:09:09:eb:2b:96:
18:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EF:81:2A:9B:77:E6:7D:2C:7F:E2:05:43:B5:97:C6:4B:06:75:B3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2780553c-2888-3c35-849b-4a8a1d6bbdc6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:0e:12:6f:a8:62:4b:ae:7a:38:fd:fc:2e:ac:2b:4e:a8:0a:
35:45:47:ad:c6:86:b1:90:6e:47:d6:31:70:54:81:cf:b5:aa:
20:08:7d:84:f2:80:45:4d:0c:81:0a:81:c2:30:f8:8d:52:ea:
e2:93:32:72:3c:d9:68:46:03:bb:1f:69:21:68:cb:07:ed:9c:
9e:d1:24:06:c0:04:ee:5f:20:70:14:e4:2b:a1:41:be:00:67:
d6:02:09:11:8a:ce:ab:b4:0d:b5:88:8b:90:0b:db:a1:41:d8:
fa:ff:be:3e:2c:32:63:61:ef:a5:e0:76:00:1a:64:a9:07:2c:
42:62:03:54:20:4c:13:aa:12:ea:fb:03:88:63:c5:d5:54:4f:
3b:e2:a0:ef:2c:93:23:89:35:4a:ce:0b:84:45:cb:14:c1:31:
7c:09:eb:e0:78:5f:77:a5:2e:69:06:87:9d:48:bc:7c:d4:c1:
cf:86:c8:b7:48:1a:ad:28:62:d0:ef:cd:03:60:6b:d9:29:ea:
78:fe:9d:78:33:38:9b:54:ae:d3:d1:94:af:0b:41:73:3d:be:
72:6f:bc:b7:d8:60:61:d5:26:15:78:c8:a2:2c:8a:17:35:b9:
54:ae:1e:87:fa:c3:60:45:41:1d:42:f2:ae:2a:6d:7f:61:ca:
cb:c3:2e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:27:54 2025 by rpki-client