Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ac48632-cd7c-358f-93e6-5eccdf8592bb.roa
File: 3ac48632-cd7c-358f-93e6-5eccdf8592bb.roa (raw, json)
Hash identifier: c8pCEG3cqqyW0Nh8KFD7wkDw94qWsbaGOWeb23YgAm4=
Subject key identifier: 63:C7:B3:13:3E:82:59:45:D8:5B:D9:34:B3:FE:AF:BF:22:82:73:C2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E8C7B8D711BE35C522965DE00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ac48632-cd7c-358f-93e6-5eccdf8592bb.roa
Signing time: Tue 12 Jul 2022 12:00:00 +0000
ROA not before: Tue 12 Jul 2022 12:00:00 +0000
ROA not after: Wed 17 Aug 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.112.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:8c:7b:8d:71:1b:e3:5c:52:29:65:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 12 12:00:00 2022 GMT
Not After : Aug 17 04:00:00 2022 GMT
Subject: CN=fd2d7fa9-67c5-43c4-89f5-5563109967dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ff:ba:0f:be:48:09:6e:60:97:8e:2d:e2:3d:
44:65:2a:6b:ef:85:6a:f7:89:c8:86:ae:e9:35:9b:
a7:93:cb:d1:97:d5:1d:9d:86:b1:c5:3d:c9:55:be:
c2:0d:bf:69:da:ef:b2:5f:af:6d:d6:5d:04:c4:2e:
71:b8:d5:79:83:71:12:33:d3:16:de:28:ad:57:7b:
4c:a5:00:9f:3e:51:47:a3:78:71:81:7d:64:39:fc:
ca:e8:85:75:6b:a6:f8:30:bd:43:42:1f:95:cb:f6:
fb:41:50:ff:3d:d7:79:67:dd:f9:c0:66:71:7f:d5:
21:b9:42:fd:4d:08:95:cc:0d:27:19:bd:13:9d:a2:
5f:f4:f2:1b:98:db:8b:36:90:88:06:d9:2e:f0:2e:
03:a7:e4:53:67:68:c9:50:a5:ed:df:be:3a:5d:b6:
bd:d1:0b:77:55:d1:2c:60:c9:66:74:f8:f2:f0:29:
44:f2:b3:97:7a:9b:37:b6:fd:06:ff:10:e8:89:54:
02:10:ff:87:a3:4d:6f:2a:87:aa:b3:ab:9d:1a:f7:
d3:08:75:5b:d8:20:e2:6d:8e:cb:e8:f9:7b:b3:c0:
e4:c2:2d:a9:d6:8c:88:60:b8:55:6a:10:ac:ba:ef:
97:d5:b8:79:66:9c:92:cd:a5:88:20:c6:59:53:33:
5c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C7:B3:13:3E:82:59:45:D8:5B:D9:34:B3:FE:AF:BF:22:82:73:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3ac48632-cd7c-358f-93e6-5eccdf8592bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.112.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:dc:2c:c5:06:86:89:62:26:4c:a4:f9:33:ab:67:a1:09:bd:
dc:c5:00:67:d5:a1:65:e0:aa:ab:c1:df:94:73:bb:e5:70:9d:
8f:a6:55:ef:8a:32:67:d5:9d:cf:f4:11:bc:e2:fc:87:4b:5d:
cb:0d:32:88:b4:cb:05:35:2d:86:b0:80:ed:82:c1:0f:a9:0f:
e1:ea:a2:86:53:55:82:5b:ae:21:88:8f:c7:9e:ee:ba:84:13:
d9:a1:b7:23:fc:d1:6a:cf:6c:64:e0:2a:51:b5:eb:91:22:38:
a1:fd:c8:e1:d5:b4:b6:a7:37:c1:e4:29:79:3c:06:c6:83:f8:
d2:bb:85:b6:e1:68:70:83:7d:bd:01:44:7c:df:f0:47:a2:c3:
08:2f:3c:b1:68:f4:f3:45:77:27:4e:f9:d0:6d:d6:ee:23:5e:
bf:55:5c:53:cc:a2:73:82:88:c9:33:05:13:a8:14:b9:e0:50:
86:17:2a:25:16:b3:1d:5a:e3:05:67:81:4b:8f:af:db:fb:64:
d1:e2:14:3f:7e:2b:86:96:5a:1c:61:4b:d7:e0:31:b9:37:bb:
ae:d2:e5:26:fb:92:dd:de:b0:5f:e2:55:1b:44:fd:7f:34:a4:
d3:d5:be:e7:1a:2e:1e:e1:31:3f:c2:fb:77:aa:4f:66:2e:84:
e9:61:56:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:16:20 2025 by rpki-client