Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dfa0d89-62b1-3e8b-991f-a42c4c12ee1b.roa
File: 3dfa0d89-62b1-3e8b-991f-a42c4c12ee1b.roa (raw, json)
Hash identifier: 6k1pLHniSaPaVAG1KAEaFsvqcMYJ3UXLjiW+U4+yMMg=
Subject key identifier: 1D:C7:C4:F9:97:5F:81:ED:2B:B3:77:77:DD:82:FC:44:CC:AA:5D:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F020E6ADD6BF2724F5E4BE000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dfa0d89-62b1-3e8b-991f-a42c4c12ee1b.roa
Signing time: Tue 23 Aug 2022 12:00:00 +0000
ROA not before: Tue 23 Aug 2022 12:00:00 +0000
ROA not after: Wed 28 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.124.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:02:0e:6a:dd:6b:f2:72:4f:5e:4b:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 23 12:00:00 2022 GMT
Not After : Sep 28 04:00:00 2022 GMT
Subject: CN=ea9eccf7-c34d-4bbd-ae32-8ae5ad9d200b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:7a:76:79:a5:f1:82:13:56:86:dd:20:b5:45:
b3:63:a2:b2:89:d0:10:a9:39:be:0b:c2:2d:4f:c9:
14:24:94:78:c7:a4:61:2b:21:b2:81:ad:63:10:8b:
e9:68:d1:6b:bf:e5:2f:e6:d3:5b:29:c1:33:3c:65:
ce:7e:30:3b:5e:0a:71:88:68:80:29:2c:1e:d4:f6:
2c:a0:4c:8d:03:cc:00:ab:9b:7d:fb:24:82:c4:e0:
89:df:9d:71:36:5f:a1:38:d9:4a:e5:18:61:09:a8:
84:dd:28:23:23:57:db:fe:85:2b:8b:57:75:68:cb:
e6:4a:ac:21:42:ae:71:e2:c4:77:b6:7a:1b:91:7f:
4c:1e:31:2c:fa:39:86:b6:db:f0:36:be:0e:da:ea:
15:46:a7:53:e8:21:7a:7f:8c:48:c2:a5:08:78:73:
69:d2:62:36:53:8f:f5:24:aa:80:58:35:09:61:ee:
d7:0a:9e:18:2d:4c:a3:9b:0d:55:57:40:c5:d8:17:
25:b8:bd:f3:22:b7:72:e2:04:7b:aa:90:eb:8a:e0:
61:46:e7:85:89:c4:8f:fc:21:df:c9:6c:62:44:d6:
1d:65:c8:d5:0e:c6:14:ae:a3:58:e6:cd:ce:19:55:
39:2e:98:c5:9f:34:c9:35:20:b5:e9:d5:d8:29:26:
60:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C7:C4:F9:97:5F:81:ED:2B:B3:77:77:DD:82:FC:44:CC:AA:5D:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3dfa0d89-62b1-3e8b-991f-a42c4c12ee1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.124.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:11:b9:c3:03:e8:45:0a:53:9e:18:a3:74:ab:0b:b5:6e:fd:
eb:e3:1c:24:72:44:0b:2c:2b:31:1f:96:ce:bf:6c:fd:62:b9:
3d:a3:14:6c:58:38:94:11:88:31:10:13:14:16:ce:be:51:68:
fa:5f:3c:4d:b1:0e:f8:2c:de:3f:ce:cb:bf:dc:75:b5:85:d6:
90:f7:0f:65:d1:7f:89:72:51:00:82:af:47:0d:85:58:41:90:
28:b0:1d:ae:07:82:51:8a:29:8d:e9:c6:af:52:86:7d:5c:aa:
e8:0f:40:34:be:4f:b3:e9:cb:a5:b2:88:7a:b2:e5:bb:ed:08:
10:11:53:6f:4a:d7:b4:66:83:54:80:7e:23:cd:ab:1b:a1:1d:
58:70:2a:a0:a8:6c:b5:ac:ef:3b:f9:e5:4b:15:54:d9:36:b8:
17:7a:3d:3b:cb:8d:a4:a8:d7:23:fb:65:83:65:4d:ba:3b:23:
a1:6d:2f:1b:d0:5d:0a:32:b8:42:73:ef:77:d3:b7:ef:09:e5:
c2:0b:49:54:ce:38:b3:b0:4f:47:ab:19:cb:29:40:4b:cf:05:
7b:10:10:8f:cc:fd:68:93:7f:1e:67:53:97:36:77:ff:02:3d:
aa:ac:bd:40:97:af:5b:41:9b:dc:bd:cf:c5:b4:0f:fb:51:73:
82:18:bf:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:57:01 2025 by rpki-client