Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/473bb7aa-0b84-381f-abfb-5c638fc84f55.roa
File: 473bb7aa-0b84-381f-abfb-5c638fc84f55.roa (raw, json)
Hash identifier: S5Cb/n2Tv1NSQpzsuYzGunDwCS5DXXFkg8V8OabIPqU=
Subject key identifier: 87:32:3F:18:42:32:63:E3:20:E9:F0:EF:5D:92:27:AB:06:04:69:A0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840140DA68D525C14AEA6F3B9C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/473bb7aa-0b84-381f-abfb-5c638fc84f55.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:14:0d:a6:8d:52:5c:14:ae:a6:f3:b9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=fd8af141-f269-4410-a238-f31a792e1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1d:c9:0f:00:62:4b:04:23:ec:9f:a7:fc:cf:
92:f3:6b:ef:c1:ad:ad:1d:3c:93:f4:16:05:b4:fd:
b3:8b:60:a1:06:c4:f4:a9:69:7c:42:f8:00:da:d3:
04:3f:93:02:f6:93:55:c2:ba:58:e6:71:de:c4:07:
d7:72:3b:af:bd:1f:1d:2d:0e:87:2b:36:fb:74:89:
17:5e:43:d8:c1:d5:8b:36:6f:51:ab:dc:73:99:73:
fb:af:93:8c:b2:83:3d:d7:31:37:fb:76:df:76:a4:
44:4b:d1:16:c3:58:14:e2:b7:a2:60:67:3b:94:1d:
a5:34:cf:66:cd:f5:1d:34:55:b9:55:e3:5b:76:a8:
7c:77:bd:5d:15:c5:12:c9:17:b8:83:5f:76:76:de:
6f:f9:1c:22:af:33:e4:c2:df:d3:ee:5a:4f:c0:6c:
2d:3a:8e:e6:87:62:29:0e:84:9e:bf:c0:d5:aa:5e:
50:c0:aa:23:81:0f:84:5e:bf:de:83:cb:da:82:0d:
dd:0d:51:47:b2:39:7a:bb:20:4c:3f:a6:cb:73:90:
86:58:06:21:8d:d3:f8:82:e6:99:82:45:7b:fb:a0:
43:f0:59:48:b6:90:c7:34:18:88:6c:87:6f:c5:bf:
6a:ab:7a:fc:e8:9d:6c:e8:c0:ca:c9:3b:b3:e3:a5:
a8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:3F:18:42:32:63:E3:20:E9:F0:EF:5D:92:27:AB:06:04:69:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/473bb7aa-0b84-381f-abfb-5c638fc84f55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:21:6b:87:e9:31:06:ee:c5:ff:b8:d6:bb:d7:75:fa:23:a6:
c9:ba:d9:ef:0d:23:b1:a2:25:dd:a7:45:9b:c3:76:7b:6f:9d:
9d:12:bd:20:f9:d0:61:ba:09:f1:c6:9b:e6:99:ac:59:a0:19:
8d:9f:48:3f:a5:2d:a9:28:67:91:19:93:8f:d9:9a:0d:6f:40:
2c:2a:4d:48:1f:39:da:68:ee:01:6f:9c:46:67:d0:3e:73:dd:
0d:a9:64:8d:c7:f7:5f:26:4d:df:12:53:41:be:a8:a2:4d:45:
4f:a4:3d:32:30:3d:d1:68:13:4a:52:26:4b:11:51:0d:f6:62:
07:8f:01:84:c2:a4:d0:dd:43:f1:0a:f5:a0:67:ab:39:8c:77:
c1:11:a5:28:e0:33:d9:d6:1c:9b:3f:9c:2a:42:78:e7:17:c1:
56:f4:0e:15:f9:b8:a3:1f:ce:95:58:d8:8b:e8:f7:10:2a:0a:
7d:34:fe:bf:f9:ac:7d:7b:72:31:f4:92:c1:ba:78:fd:06:e3:
f5:d1:97:62:8b:ff:75:38:b2:c3:56:34:56:ea:49:7f:f7:28:
56:2e:44:01:6e:92:26:9d:7c:40:8c:8f:a5:37:bd:b6:39:2b:
8c:d9:27:66:fb:ac:00:03:5a:93:bf:c4:a2:b2:da:b5:34:2a:
bb:8d:e2:ca
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEAUDaaNUlwUrqbzucAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEyOTEyMDAwMFoXDTIzMDEwNDA1MDAwMFowLzEtMCsGA1UEAxMk
ZmQ4YWYxNDEtZjI2OS00NDEwLWEyMzgtZjMxYTc5MmUxNTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR3JDwBiSwQj7J+n/M+S82vvwa2tHTyT9BYF
tP2zi2ChBsT0qWl8QvgA2tMEP5MC9pNVwrpY5nHexAfXcjuvvR8dLQ6HKzb7dIkX
XkPYwdWLNm9Rq9xzmXP7r5OMsoM91zE3+3bfdqRES9EWw1gU4reiYGc7lB2lNM9m
zfUdNFW5VeNbdqh8d71dFcUSyRe4g192dt5v+RwirzPkwt/T7lpPwGwtOo7mh2Ip
DoSev8DVql5QwKojgQ+EXr/eg8vagg3dDVFHsjl6uyBMP6bLc5CGWAYhjdP4guaZ
gkV7+6BD8FlItpDHNBiIbIdvxb9qq3r86J1s6MDKyTuz46Wo7QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIcyPxhCMmPjIOnw712SJ6sGBGmgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDczYmI3YWEtMGI4NC0z
ODFmLWFiZmItNWM2MzhmYzg0ZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDTQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApSFrh+kxBu7F/7jWu9d1+iOmybrZ7w0jsaIl3adFm8N2e2+dnRK9IPnQ
YboJ8cab5pmsWaAZjZ9IP6UtqShnkRmTj9maDW9ALCpNSB852mjuAW+cRmfQPnPd
Dalkjcf3XyZN3xJTQb6ook1FT6Q9MjA90WgTSlImSxFRDfZiB48BhMKk0N1D8Qr1
oGerOYx3wRGlKOAz2dYcmz+cKkJ45xfBVvQOFfm4ox/OlVjYi+j3ECoKfTT+v/ms
fXtyMfSSwbp4/Qbj9dGXYov/dTiyw1Y0VupJf/coVi5EAW6SJp18QIyPpTe9tjkr
jNknZvusAANak7/EorLatTQqu43iyg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:11:04 2025 by rpki-client