Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f5afdb1-f1fa-3595-ac26-aa9e9837b5c9.roa
File: 3f5afdb1-f1fa-3595-ac26-aa9e9837b5c9.roa (raw, json)
Hash identifier: +KYlN/tWwOvCEETKIVXCAs6NOhcwDNvqMfMMWylZGmw=
Subject key identifier: 6F:09:B2:83:B9:D5:7D:72:6D:32:D5:42:DA:7D:F3:A3:C8:5C:0E:F6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FDE5EE2CC0C3D8B6A1F24B180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f5afdb1-f1fa-3595-ac26-aa9e9837b5c9.roa
Signing time: Thu 10 Nov 2022 12:00:00 +0000
ROA not before: Thu 10 Nov 2022 12:00:00 +0000
ROA not after: Fri 16 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:de:5e:e2:cc:0c:3d:8b:6a:1f:24:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 10 12:00:00 2022 GMT
Not After : Dec 16 05:00:00 2022 GMT
Subject: CN=6440b930-f22f-4603-b4e7-505da64ac0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:97:f9:68:a0:02:3f:08:d0:29:66:a9:67:ec:
11:0c:9d:f3:81:e1:85:21:44:ea:62:a5:14:cc:a8:
a1:fe:4a:a6:f4:12:87:d7:be:67:7f:4a:86:e6:c4:
3e:5b:a8:f6:9b:ad:ae:42:28:ba:5f:46:bd:7d:07:
1e:40:38:d5:2f:c1:00:c3:80:15:de:c7:03:8b:1d:
41:c4:3c:58:4d:71:9d:e4:18:a9:0d:bd:be:eb:3f:
1e:b7:09:d9:db:7d:36:0e:1e:7a:69:d0:0e:7c:cd:
65:ff:da:69:dc:0e:0c:ba:e4:31:2c:1e:29:29:74:
d0:e6:c7:24:a2:af:fc:93:87:c5:b4:6e:5e:f0:7f:
5a:cb:75:63:13:7a:46:9d:9f:c9:c7:b9:47:13:22:
5d:82:ba:55:6c:d5:f7:8c:59:90:33:24:e6:61:49:
ec:64:c3:df:bf:f9:c7:ba:e6:a5:5b:2b:38:be:18:
9d:30:e2:2c:e5:fa:9b:8a:7f:d5:6f:2d:2b:2b:32:
27:f2:c5:23:0e:1a:42:6b:2d:eb:0f:3d:94:e1:14:
74:0f:05:dc:3e:26:79:32:e5:0a:ec:b4:02:18:cf:
f8:b1:b1:1d:4a:35:84:aa:13:8d:5d:41:87:63:81:
55:b0:10:a2:f5:5a:d1:64:71:a3:5a:79:80:51:1d:
0c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:09:B2:83:B9:D5:7D:72:6D:32:D5:42:DA:7D:F3:A3:C8:5C:0E:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f5afdb1-f1fa-3595-ac26-aa9e9837b5c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:3b:f3:71:0b:ab:aa:db:c3:01:3a:72:5d:19:8a:48:65:bc:
7e:6b:49:24:79:62:d5:dd:fd:75:7d:4d:fb:bd:7f:d7:42:b9:
9a:ae:3f:29:ff:1a:c8:a5:41:3e:40:8e:0b:eb:d5:86:e6:42:
34:dc:56:94:76:63:b3:ca:e4:13:b2:01:9e:c4:e5:ba:be:8f:
10:9a:cf:85:f0:b2:a0:77:77:62:9f:0b:56:c9:9d:01:9d:67:
56:d2:54:24:4d:f6:79:c6:70:e8:d0:1b:2b:e2:6d:5f:f6:4b:
e6:bd:f6:e1:01:00:39:68:ef:be:ea:1f:3c:15:6b:bd:7a:73:
14:a7:83:85:6f:ca:03:e5:f0:57:4c:e8:53:05:55:17:ec:b3:
87:72:d4:ef:57:88:6d:62:48:1b:16:35:df:99:8d:f7:71:ea:
7b:b6:42:a2:64:19:83:40:68:30:cf:84:2b:42:19:88:60:6d:
a6:40:e3:5a:ce:a9:a6:57:7d:c9:af:89:f9:c9:ee:0f:e2:85:
b7:ee:74:4d:f0:5d:13:c3:db:08:38:d7:21:d1:54:74:89:78:
ac:54:f8:83:64:63:14:44:a5:d0:b9:e3:01:ea:fd:fd:70:06:
16:84:73:d1:2c:e1:77:9b:e1:aa:04:ee:f5:cf:8a:1b:3e:d2:
0d:fd:10:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:52:05 2025 by rpki-client