Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/302dd9ff-5ec8-31af-aada-0a3ec130eb28.roa
File: 302dd9ff-5ec8-31af-aada-0a3ec130eb28.roa (raw, json)
Hash identifier: f/t2KlI+jVFwy43ew8oIKTiZHU93QyTfobNbZGdF8/Q=
Subject key identifier: 35:59:2B:5B:B6:A8:74:0B:A5:50:0E:58:12:E3:27:6C:0A:DA:D0:3F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3E93695AF98D66AC8CBA9300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/302dd9ff-5ec8-31af-aada-0a3ec130eb28.roa
Signing time: Tue 14 Jun 2022 12:00:00 +0000
ROA not before: Tue 14 Jun 2022 12:00:00 +0000
ROA not after: Wed 20 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3e:93:69:5a:f9:8d:66:ac:8c:ba:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 14 12:00:00 2022 GMT
Not After : Jul 20 04:00:00 2022 GMT
Subject: CN=a25c2f46-f132-4231-96ed-aa0fe7a13f5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:fc:d1:b7:f1:20:cb:fe:08:09:24:91:a2:7e:
ea:70:2b:ff:89:54:db:74:67:f3:c6:70:fe:c7:63:
ea:26:47:4e:4b:fa:fa:fb:bd:8f:ed:4e:43:73:7f:
75:c6:cc:db:f6:2d:25:e2:bc:13:55:01:32:17:23:
33:88:44:11:7b:f4:da:7c:a1:6c:c9:60:1f:7c:44:
d5:14:1e:0a:16:20:ab:ab:51:72:04:c9:a8:51:70:
6b:42:76:c5:e2:fa:1a:ed:4d:0c:7f:ed:5f:4a:c9:
89:c8:c3:0c:3b:e9:27:97:e9:ad:fe:99:88:28:9f:
12:bc:e0:05:90:d1:1b:53:be:51:10:8e:68:2b:ee:
00:20:18:b3:13:b2:77:8d:b8:f5:20:61:08:e8:a8:
a5:f1:e3:81:9c:8e:11:2b:99:fe:f8:53:21:be:d8:
ca:82:83:a1:37:86:58:0f:1e:2c:fc:22:f0:f8:59:
e3:b0:9c:79:2f:4f:8b:0b:37:4a:fc:fd:84:e5:f6:
ae:bc:6b:f3:4c:03:ec:cb:b0:e5:8b:83:76:62:a5:
7c:c6:12:be:41:14:27:1c:4e:75:72:c1:96:ec:a1:
35:bc:37:09:2e:a4:a3:5c:8b:47:69:38:b7:42:12:
3c:f0:df:a2:d4:68:53:91:ac:78:e9:2f:56:dd:7f:
e7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:59:2B:5B:B6:A8:74:0B:A5:50:0E:58:12:E3:27:6C:0A:DA:D0:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/302dd9ff-5ec8-31af-aada-0a3ec130eb28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:2c:e8:d4:37:71:e2:27:e8:bb:48:95:a6:69:46:f6:c6:94:
ca:10:91:3e:78:7a:2a:7a:d8:30:bf:02:83:fe:c8:a6:f3:65:
e0:50:36:81:97:89:b6:e7:23:18:e4:df:ae:29:5b:7d:9a:30:
e0:b1:d7:02:3b:d2:2a:0d:41:be:31:0f:1b:3c:c6:17:61:d9:
31:a8:23:62:29:a9:11:7d:75:5e:11:ae:cb:18:fc:f3:9f:d4:
92:91:5e:3a:49:fb:5c:9e:84:32:1f:a8:ed:31:1d:89:f8:f0:
42:c7:dd:23:ae:2e:ad:d8:c1:95:90:83:f6:c8:f3:7a:b5:ee:
4b:f2:3d:b2:de:56:5d:9a:b8:f7:41:4d:1a:a7:b4:b8:4a:4c:
92:ec:d0:ac:1b:d0:cc:29:12:4a:9f:3f:a0:80:75:8c:82:6c:
24:fa:65:56:23:cd:77:e6:04:fc:31:02:34:7a:a7:a6:10:c9:
3b:bc:b1:04:dd:d9:5c:f3:83:1a:8a:ba:4e:3c:1e:7a:53:51:
51:23:5a:33:3b:11:2b:12:2d:be:40:b6:b2:bc:42:1d:bf:d7:
ea:70:77:c2:57:eb:dc:c7:6a:83:65:4e:f3:e7:4c:24:c3:a5:
be:17:be:2d:ce:22:fc:60:94:c3:46:ef:56:9b:c8:74:27:2e:
ec:1a:d7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:34 2025 by rpki-client