Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a783346-0add-3db7-8d83-1ca138cfff88.roa
File: 3a783346-0add-3db7-8d83-1ca138cfff88.roa (raw, json)
Hash identifier: t5G8PbY3NIB3IWrELJJrBC+dQU0P+/jgXKRph6Wbt3U=
Subject key identifier: A4:C0:55:62:18:92:17:A6:AB:D7:8D:0A:F8:FF:EB:83:BA:16:3A:D9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FEC797E534ED0151F26927E80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a783346-0add-3db7-8d83-1ca138cfff88.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:79:7e:53:4e:d0:15:1f:26:92:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=f9250769-1426-4844-8739-e90dd3efd654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:cc:43:ea:80:4a:9a:b7:24:a2:1d:8a:49:
41:ac:3f:a6:74:e1:e0:42:98:ad:96:9c:73:b2:74:
42:06:7a:0a:2e:26:ff:8c:2c:bd:e9:ad:f4:72:ba:
85:f1:91:c4:a1:23:26:1a:d2:4a:42:61:71:fe:9d:
f1:31:1b:8b:6a:90:7e:48:d2:5c:c2:aa:9f:fe:30:
ea:4c:16:66:26:cc:54:f7:fb:cc:da:12:4c:a4:e1:
4a:6c:97:10:53:8e:25:31:df:5c:10:46:11:8b:94:
92:8d:9c:c7:b6:a8:df:ee:63:e6:ef:10:d2:90:12:
03:23:ee:92:59:89:6c:5e:4f:9a:d5:69:0c:2e:21:
b2:0b:15:da:41:72:ec:06:66:ee:9d:fc:01:a9:d2:
06:d6:51:ff:07:aa:21:af:46:84:c5:8d:c5:c9:81:
a6:6c:10:4a:ac:e5:54:3e:b4:d6:f4:2b:df:42:fa:
98:cf:56:df:3a:5f:f5:b2:49:39:18:00:35:08:86:
32:65:39:90:3d:0d:02:ab:8c:f9:23:5d:1c:3c:ee:
04:5e:f6:a5:dc:f9:aa:09:cd:c3:ea:18:d8:00:c6:
7e:60:2d:d2:5d:93:fb:f2:9f:23:9f:76:58:75:05:
9b:f7:4e:af:47:43:5b:f8:cc:e0:73:1a:eb:2b:65:
bc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:C0:55:62:18:92:17:A6:AB:D7:8D:0A:F8:FF:EB:83:BA:16:3A:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3a783346-0add-3db7-8d83-1ca138cfff88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:0c:d5:bf:27:39:4c:63:8d:97:35:34:42:ac:00:03:f0:42:
62:69:63:d6:36:d5:03:5a:9b:06:34:2e:2c:ab:ba:d1:fb:07:
f2:74:20:bd:4b:51:9e:30:5a:fd:8c:95:9d:8d:62:02:b7:c1:
a2:ef:fe:28:22:67:76:05:be:3d:77:50:02:41:62:bb:4a:97:
dc:53:3e:e8:a1:2d:76:8e:6a:68:55:65:fd:09:3e:9e:35:10:
a0:a3:df:cd:2d:dc:8a:1b:82:ab:53:41:be:2c:15:72:54:29:
a2:b3:4a:02:e8:fc:75:69:66:33:7a:16:6e:28:f0:fc:7e:36:
30:97:8c:dc:83:7a:b0:0b:93:8a:25:e4:c5:4d:27:14:c3:04:
b8:68:f0:c4:51:6d:bd:a7:9b:c4:d6:4d:86:cd:21:95:19:a6:
96:68:9b:68:4c:e7:32:9c:7c:6d:c5:39:10:79:98:48:ef:17:
2d:3f:18:d0:29:47:2e:67:df:f9:40:50:9d:e3:2f:ef:94:a4:
9e:8b:8b:af:57:ba:44:3b:1d:eb:cb:81:d3:67:4f:fd:e5:6a:
89:f9:c7:fd:2a:7a:c8:60:f1:9b:99:06:e2:be:d6:38:1b:69:
71:0e:07:a3:d9:30:aa:19:18:a3:46:73:13:07:50:08:e7:99:
2e:7b:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:18:02 2025 by rpki-client