Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/316794f3-41a6-385c-8a03-a7f21025ad9d.roa
File: 316794f3-41a6-385c-8a03-a7f21025ad9d.roa (raw, json)
Hash identifier: SgyHWoGN5ZRRQ3nU8LC/+iMip/fIMOO5j7L9HQ4riYw=
Subject key identifier: F3:00:4D:97:C5:B6:2D:B9:F6:98:A7:96:D1:87:8B:0D:20:93:1C:0E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9ECCB80C0FE3CB0E74E81680
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/316794f3-41a6-385c-8a03-a7f21025ad9d.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.48.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:cc:b8:0c:0f:e3:cb:0e:74:e8:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=0de12a63-3d01-459b-8c02-c4e4d354d8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:5a:d4:30:7c:7d:ba:1d:08:ae:40:e0:e1:
60:c1:c7:92:ec:41:ff:3f:b3:c1:10:26:70:31:50:
ac:db:47:96:dc:b3:8b:3e:a9:11:b3:81:25:dd:74:
9b:36:ef:b7:13:62:09:96:d2:c6:ac:7b:fd:f6:57:
3c:00:fa:3f:c2:1a:52:c2:da:ef:c1:ef:3d:39:4e:
c3:a3:4a:49:7d:a8:a2:b4:33:01:a3:da:aa:03:49:
d4:3c:4d:25:b5:a8:e1:d4:16:6c:84:cb:f3:f9:a7:
e7:fb:03:22:fa:e6:71:84:e9:1e:d6:fd:4c:f5:1d:
88:7e:83:be:ed:7e:c5:f9:03:b7:67:a7:1a:a5:93:
ff:89:23:dc:1f:b9:0c:ac:ea:f7:c6:78:b6:57:4d:
b9:64:89:d0:51:2a:76:1c:dc:ce:10:60:e4:9a:9a:
65:f2:3c:ae:c5:36:4b:bd:b5:cc:56:55:80:44:a2:
2b:53:2f:1b:27:a7:9c:6e:45:e2:75:15:1b:84:92:
d8:a8:2f:cc:0a:46:61:a8:de:d9:9c:b8:d6:0a:de:
fe:5b:66:67:5f:56:f8:e1:9a:60:ba:5e:7c:e4:4d:
6c:31:09:e1:71:34:42:30:86:89:95:12:f4:60:ac:
15:03:19:b2:d8:6d:d2:df:5c:2e:03:52:11:d0:2d:
a1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:00:4D:97:C5:B6:2D:B9:F6:98:A7:96:D1:87:8B:0D:20:93:1C:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/316794f3-41a6-385c-8a03-a7f21025ad9d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.48.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:18:9d:9b:25:83:0a:b0:a2:9d:ad:32:11:2f:46:c6:fe:d6:
12:06:23:8c:e6:9c:3c:1b:32:42:7f:a0:2a:f5:37:e8:38:22:
9a:12:2c:e1:42:bb:f7:cb:48:81:8e:53:4d:b9:8b:2e:6b:9c:
f6:44:93:50:8e:8d:ab:1e:09:ff:4a:03:7e:8e:95:da:47:3b:
20:31:78:9d:93:eb:34:2e:c1:0e:a9:6f:21:2d:a2:c8:f2:10:
62:54:8b:62:25:66:f9:1a:b8:c4:f8:2b:b6:6b:56:95:0f:e1:
95:a0:14:7d:26:6f:65:d8:96:f0:08:44:6a:cf:71:68:1a:27:
e4:b7:7f:35:13:5b:1c:20:b8:d4:c0:0d:5a:69:08:fb:10:1b:
59:c1:e5:b6:36:b2:af:ff:b1:04:75:6e:46:b4:a2:21:14:3a:
62:05:37:8e:b7:eb:40:56:79:53:48:13:ae:85:53:78:96:47:
c2:01:db:23:8d:b2:2f:40:ea:bc:92:ca:17:16:77:41:bb:fa:
7a:22:5f:3f:0e:b4:ac:ba:a9:1e:45:0f:28:f0:1a:5c:dd:c3:
99:43:21:bc:8e:7c:06:25:93:cd:fe:24:07:8b:6a:a9:65:2d:
02:c9:a7:38:f7:cc:f8:ee:8e:d2:ac:d2:09:9c:5d:9e:80:8f:
15:02:44:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:59:20 2025 by rpki-client