Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3422b3e2-e3c6-3684-bae7-b1b569521312.roa
File: 3422b3e2-e3c6-3684-bae7-b1b569521312.roa (raw, json)
Hash identifier: Q9sJbGU0Fy/ftANWmUxjGudkqHH5hsmvegQboITekd8=
Subject key identifier: 31:8E:BB:B8:09:A4:1B:F7:A0:26:03:FE:BB:9F:C4:E6:51:74:E4:14
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EDAE9B4DA5E92C16E1021C980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3422b3e2-e3c6-3684-bae7-b1b569521312.roa
Signing time: Tue 09 Aug 2022 12:00:00 +0000
ROA not before: Tue 09 Aug 2022 12:00:00 +0000
ROA not after: Wed 14 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.36.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:da:e9:b4:da:5e:92:c1:6e:10:21:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 9 12:00:00 2022 GMT
Not After : Sep 14 04:00:00 2022 GMT
Subject: CN=faeac169-8f75-4343-b5d4-7d0a9ad83f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:1c:7f:8f:df:07:24:53:c0:2c:32:3c:c5:
19:44:05:77:ee:f5:2e:e1:13:4a:cc:08:ca:7f:47:
24:fc:da:8a:58:f5:a2:ad:bb:96:5c:88:95:5b:8e:
b8:5d:96:1c:fe:55:38:3f:02:fb:dd:cd:0f:3e:20:
d1:d2:dc:7f:db:f5:6c:76:97:07:3b:1f:fb:b3:cb:
5c:41:8c:95:da:c1:1d:83:89:b7:d6:f8:cf:ba:03:
14:ef:ef:6d:b1:21:3a:f1:dd:13:d1:86:70:ef:25:
7d:31:42:c3:2a:95:79:4d:ae:25:33:ef:c7:93:b0:
d9:77:40:cc:6b:69:6e:96:28:ff:20:11:64:d8:61:
17:9b:4b:07:46:61:9f:12:30:20:25:ca:d2:36:37:
fb:4b:cb:d5:9f:58:08:94:8c:15:d5:47:d1:ff:33:
cc:e6:ca:8a:e9:c7:94:a0:d9:64:7a:6e:ce:bb:b6:
9a:4d:2b:28:a3:7a:aa:0b:57:d8:7b:ed:f5:c1:cb:
32:9b:80:0d:08:18:04:a1:52:c1:ac:6c:5a:b7:8b:
61:62:8b:2d:1c:76:fc:78:28:b1:36:be:19:12:81:
64:4f:3f:46:20:91:50:0b:06:8b:3c:b8:71:07:c8:
43:b6:2b:1d:88:3d:40:9a:f5:74:99:56:45:d9:e4:
01:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8E:BB:B8:09:A4:1B:F7:A0:26:03:FE:BB:9F:C4:E6:51:74:E4:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3422b3e2-e3c6-3684-bae7-b1b569521312.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.36.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:b6:66:f4:a5:77:02:33:83:38:cf:f2:04:51:95:d1:14:10:
1a:1e:db:ed:82:e1:66:9b:6d:ae:0c:d3:19:d6:28:56:a2:ba:
9e:d5:20:70:57:e7:9a:1e:06:70:4b:2f:af:fc:18:7b:97:f7:
b4:fc:d2:cb:42:14:bd:3a:76:47:f3:76:bd:ce:c9:0f:b7:be:
01:01:33:4f:cd:65:04:ce:27:7d:b4:96:db:6d:7e:97:38:f6:
d3:df:db:1f:27:67:81:91:3d:6d:0e:0f:29:42:d4:6e:f6:26:
85:be:55:59:d2:41:75:5f:49:c0:b6:71:71:4f:e7:78:b3:70:
71:10:3d:84:43:35:91:c4:41:49:10:9d:77:7f:e4:76:1e:04:
ba:ef:b5:e4:22:8d:6b:76:9e:21:f2:c4:e8:25:cb:4a:aa:c7:
e4:27:24:a4:f5:df:57:e4:b7:0f:9b:b9:bf:e4:80:53:81:9a:
47:3e:57:83:e5:a0:13:22:00:b6:7a:1e:d0:c6:4a:0c:07:12:
9e:82:db:e9:bc:ac:5a:63:ea:ab:70:f9:f7:96:c4:70:e4:2c:
52:7f:9a:cb:b0:f8:22:07:7b:b6:76:61:44:c0:47:dc:ff:57:
63:8f:4b:0f:f0:39:cf:4b:bf:a5:4d:f1:6b:38:a1:5a:8c:f7:
81:0c:5b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:42 2025 by rpki-client