Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f8ac4d2-7981-3792-bdb0-50c0d65b97f4.roa
File: 3f8ac4d2-7981-3792-bdb0-50c0d65b97f4.roa (raw, json)
Hash identifier: ivXS7mTvBmr26aWcS6pNoyOtK/t8TouJ7r1Q0vTMM74=
Subject key identifier: EA:0B:69:40:8A:01:A3:BA:C5:C6:7E:DD:00:8F:F6:E4:20:84:79:DB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F691DF392F8B607BAB9221CC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f8ac4d2-7981-3792-bdb0-50c0d65b97f4.roa
Signing time: Thu 29 Sep 2022 12:00:00 +0000
ROA not before: Thu 29 Sep 2022 12:00:00 +0000
ROA not after: Fri 04 Nov 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:69:1d:f3:92:f8:b6:07:ba:b9:22:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 29 12:00:00 2022 GMT
Not After : Nov 4 04:00:00 2022 GMT
Subject: CN=43a3e56e-70f6-42fe-bdee-e874f2095517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:66:b4:a6:14:36:56:bb:0e:4e:3b:60:46:c0:
c7:58:63:bb:d5:a6:65:a3:e9:3f:f4:cd:f4:ee:f3:
4a:53:82:ff:d6:01:70:a3:33:a4:88:11:75:65:1e:
98:60:b0:d0:71:1e:25:89:1c:d6:5d:7d:7f:ca:06:
93:b5:fc:55:5b:54:f6:d3:97:96:66:22:9f:15:76:
bc:c3:9c:e2:cf:ec:ae:62:1f:a9:a8:4c:a8:0e:e9:
30:50:8a:8a:b1:42:9e:16:68:86:aa:46:f4:0f:2c:
ec:89:1c:90:7c:b1:9d:65:33:2f:a5:4f:98:09:b7:
8b:0b:7e:c3:7c:ec:12:92:2e:ea:8c:78:e5:29:fe:
9f:0d:d9:b8:4a:7b:24:0c:02:cb:be:a6:02:c3:cd:
b7:bd:ef:88:46:c3:7d:15:83:18:34:f5:07:be:e4:
8d:50:4d:f1:1e:86:d2:0e:0f:72:4b:a4:bc:00:76:
36:6b:df:d9:f9:d1:11:15:53:e1:dc:d4:ba:02:cc:
c7:5d:c0:2e:6f:d2:a0:49:20:f2:5d:73:b5:cf:fe:
79:9b:48:81:41:e1:bb:c0:9f:45:5f:05:75:e7:5a:
95:e0:7b:fb:ad:30:04:54:a3:72:2d:b1:27:38:25:
53:42:87:f7:e9:d3:b4:1d:e3:ce:0e:47:0c:9c:07:
08:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0B:69:40:8A:01:A3:BA:C5:C6:7E:DD:00:8F:F6:E4:20:84:79:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3f8ac4d2-7981-3792-bdb0-50c0d65b97f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:e3:62:4e:dd:5e:f3:80:75:ce:ee:66:30:8d:15:62:31:86:
50:4e:f1:c3:ae:22:27:cf:b6:f0:7d:a2:49:45:85:f1:28:bf:
0d:b9:30:9c:25:f8:a7:bf:29:63:0f:78:34:71:e2:0d:49:ba:
4c:d8:d1:5d:13:9a:37:75:cb:9b:fe:38:be:73:f8:17:ba:53:
c8:b4:d8:63:55:09:b0:fe:71:02:1b:e3:f5:ff:28:26:f9:ef:
7c:6f:44:8b:fb:9d:1e:7a:f2:fb:9d:3a:3b:f8:38:d9:c0:17:
89:9e:27:94:93:22:17:00:23:f2:6a:ba:39:d4:c4:97:e6:a4:
ad:60:c8:a9:4f:ad:fe:ed:66:75:5f:55:b0:b5:b7:a5:6c:4e:
6c:59:6b:42:ff:bb:fb:7f:eb:9b:b0:ce:98:16:7b:4a:f2:05:
82:2d:88:7c:23:44:2e:ef:a1:eb:c6:84:52:fa:d3:51:4b:39:
54:2b:94:de:34:ec:c3:c5:93:79:25:cf:99:c9:20:4c:4c:22:
04:75:5e:13:99:d7:c0:61:96:48:6a:a3:a8:d1:0b:9b:53:ae:
7a:58:13:de:ab:a8:dc:aa:88:44:40:ef:c5:22:6d:09:b4:5f:
59:70:db:34:e9:fb:09:87:e2:b9:ab:15:04:68:aa:24:28:da:
91:b5:df:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:25:27 2025 by rpki-client