Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44b3627c-0d9c-3cce-8323-c61ce4c8ab4e.roa
File: 44b3627c-0d9c-3cce-8323-c61ce4c8ab4e.roa (raw, json)
Hash identifier: hJfKOQoc8jhkVBrU7JZso3HIcZ6aqr9NN2bBsk/KgMc=
Subject key identifier: CA:7A:9E:EB:7D:54:ED:AC:0B:0B:17:8B:3E:45:4B:7D:18:F9:27:95
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF007AB739FCBE754874D5D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44b3627c-0d9c-3cce-8323-c61ce4c8ab4e.roa
Signing time: Tue 17 May 2022 12:00:00 +0000
ROA not before: Tue 17 May 2022 12:00:00 +0000
ROA not after: Wed 22 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f0:07:ab:73:9f:cb:e7:54:87:4d:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 17 12:00:00 2022 GMT
Not After : Jun 22 04:00:00 2022 GMT
Subject: CN=defe8283-7667-45ca-bf77-8dbe68c2931c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:8f:c2:18:20:a9:b9:d7:0d:68:f2:8c:83:af:
f8:67:a0:59:fd:1f:a0:e0:56:d6:6f:fa:41:6b:d7:
c1:53:59:a0:f4:a1:5a:b2:90:9e:9b:b1:5d:c0:54:
6c:9c:6b:5a:42:36:cb:2a:ba:00:ea:73:b0:1d:4a:
5f:6d:89:6a:d8:54:81:2c:12:25:02:31:b1:d9:9e:
02:23:a0:31:8b:fb:5e:cd:67:7e:96:d6:fe:24:92:
db:42:a1:27:79:3a:d4:3b:a5:86:c4:23:f9:15:e1:
18:d5:3d:96:8f:60:28:6d:b5:26:92:1e:00:9e:aa:
68:78:16:6a:57:ae:b3:d2:15:3c:ac:9e:6b:01:d9:
15:97:e2:d7:82:2c:6d:16:ca:04:bb:fa:87:1f:10:
1b:17:31:85:2f:b0:2a:36:f5:1e:74:a9:c3:ec:fb:
25:2e:b4:24:20:23:3f:7e:4f:b2:5c:c7:67:21:30:
81:66:f9:88:df:91:cc:ec:d1:85:ee:6e:08:14:99:
fe:46:5a:24:17:fd:ef:23:3f:2f:fc:31:10:09:54:
9e:e9:7b:f9:ff:50:1e:36:23:c4:59:08:c4:b0:a3:
c9:dd:6c:3f:b5:af:e5:b7:53:29:0d:99:6e:a3:d8:
b1:33:14:91:21:12:ce:57:9e:2c:c7:07:de:21:21:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7A:9E:EB:7D:54:ED:AC:0B:0B:17:8B:3E:45:4B:7D:18:F9:27:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/44b3627c-0d9c-3cce-8323-c61ce4c8ab4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8a:3b:b1:d6:97:0a:bb:f7:7c:44:8d:39:4b:66:e7:05:45:43:
8d:fa:3c:cf:14:f2:54:1d:cc:aa:2a:79:31:fb:89:6e:61:99:
1c:c7:c6:77:54:4c:b6:16:d5:4c:b7:62:e6:73:9a:13:39:2f:
d8:2d:3c:48:57:5e:fb:22:21:ba:9b:ba:81:ba:71:1d:d8:72:
82:0d:75:55:21:4b:aa:cb:29:9f:42:71:63:71:d8:c1:22:9f:
c2:72:0d:f2:f3:5d:43:16:b3:34:bc:30:82:42:82:a7:10:ba:
b4:ca:0b:78:cb:36:8b:06:e9:f2:49:00:29:ce:de:fc:89:fe:
ab:d2:20:2f:98:f5:45:ed:9a:e3:69:6a:b6:e3:0b:7c:3c:41:
4e:fa:8a:42:c0:b6:f8:b2:99:d9:3d:3d:37:73:72:b5:05:64:
69:40:83:fe:e9:cb:a0:5c:be:c8:f0:32:7d:3e:0f:34:da:b0:
e9:1d:02:a4:fe:80:4c:9c:2d:ac:e5:d8:61:f2:5b:22:81:8d:
e2:60:05:5c:f2:0d:7a:1c:f8:49:29:1b:a7:be:64:e4:65:e1:
6c:70:68:cd:33:61:43:01:35:3d:eb:54:d3:da:ed:f6:d3:f9:
85:f6:59:3a:09:f7:d7:ab:88:66:db:e9:4e:ee:c3:0b:07:1d:
26:27:de:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 06:06:44 2025 by rpki-client