Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a318675-e94e-32ca-a25a-e0fe41803908.roa
File: 4a318675-e94e-32ca-a25a-e0fe41803908.roa (raw, json)
Hash identifier: suYN3LlgkF28W/9xkhXcw5VN1+JVuYbE8lJ/W+5Gxi8=
Subject key identifier: C9:7F:A3:B1:B4:C3:41:A0:DE:C3:E8:FB:A1:0D:63:ED:54:C7:54:C9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FB74948695F45862D22A37F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a318675-e94e-32ca-a25a-e0fe41803908.roa
Signing time: Thu 27 Oct 2022 12:00:00 +0000
ROA not before: Thu 27 Oct 2022 12:00:00 +0000
ROA not after: Fri 02 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 13.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:b7:49:48:69:5f:45:86:2d:22:a3:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 27 12:00:00 2022 GMT
Not After : Dec 2 05:00:00 2022 GMT
Subject: CN=7bff6120-caeb-49a5-8a87-30871813c2c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ae:bd:ea:50:02:53:40:2d:1b:2f:26:bd:c7:
25:4e:2c:61:9b:a5:f9:3c:1d:01:4a:95:85:11:55:
e1:59:03:d3:10:f7:82:38:14:62:cb:1a:2b:22:cc:
d2:c1:88:3e:8b:9c:bb:d0:99:ae:59:66:37:fb:50:
d6:9a:08:ec:d5:71:ff:7d:7c:2c:cc:03:4d:54:1c:
10:b7:cb:d7:0f:88:0d:f1:1a:49:14:ff:ed:78:8e:
29:cb:1f:8f:7e:a3:d2:8d:eb:f2:3f:d5:94:b4:40:
bd:a2:30:65:13:78:63:91:d6:f6:ac:eb:28:6b:36:
85:34:a1:f7:8b:dc:50:ed:84:2f:63:a8:04:29:2a:
cb:ca:1b:56:d8:0b:24:35:49:e5:6d:2a:84:14:28:
55:18:27:75:6f:a1:e0:64:69:6c:75:dc:da:a8:d4:
25:f1:f7:26:6a:d6:97:24:5c:ef:5c:c2:84:63:64:
33:bd:ba:db:83:76:95:2f:e8:47:ec:88:21:8e:8f:
6f:88:d8:93:df:8d:ca:54:8c:7f:68:16:b0:69:a4:
e8:81:ba:94:25:e6:57:90:c2:8f:75:ad:6f:40:0e:
ea:ce:7d:d4:bf:4d:44:0f:12:40:77:ee:7a:8b:72:
84:a4:08:e4:47:22:4e:0f:fb:8b:7c:82:ed:7b:ad:
7d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7F:A3:B1:B4:C3:41:A0:DE:C3:E8:FB:A1:0D:63:ED:54:C7:54:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4a318675-e94e-32ca-a25a-e0fe41803908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:b8:af:c0:d2:fd:28:b0:f1:b2:ad:1d:e0:35:c5:30:4a:fd:
c1:aa:38:3e:66:34:1b:43:c5:66:af:27:17:57:98:6c:71:71:
ec:35:5e:93:54:f0:5b:25:b3:59:54:01:cb:19:42:e7:4c:bc:
97:69:c2:9a:1e:52:04:4f:18:39:17:70:30:47:08:6b:e7:4d:
68:47:96:01:39:6f:ae:1f:35:7f:21:3d:b6:cf:03:08:3f:61:
95:ec:49:15:f9:4b:00:d1:c6:3e:46:82:2e:92:b1:de:8b:22:
6d:49:cf:c7:1b:f7:ad:a2:48:42:1d:9c:d9:4b:43:52:4a:0d:
a6:b4:b0:25:b7:de:af:18:43:76:fe:20:f4:18:8c:5d:29:ab:
d2:fb:15:9c:40:1d:3a:08:36:8e:07:0a:39:6b:3e:08:87:e4:
23:fe:14:9f:5b:5a:50:f2:cb:95:59:4b:bd:90:01:e2:a2:cb:
a5:68:36:00:fa:4c:35:89:56:2d:2e:92:40:18:2c:74:7a:42:
5e:92:a2:ea:a0:59:2f:a9:5e:9c:bb:f6:53:59:0c:79:b7:2f:
d6:14:64:6f:dd:c5:10:84:3a:69:92:c9:4b:81:91:1e:18:cb:
20:22:a3:a9:4a:38:c9:ab:aa:e5:b4:81:c1:06:3a:1b:c9:da:
bd:c4:85:d8
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+3SUhpX0WGLSKjf4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAyNzEyMDAwMFoXDTIyMTIwMjA1MDAwMFowLzEtMCsGA1UEAxMk
N2JmZjYxMjAtY2FlYi00OWE1LThhODctMzA4NzE4MTNjMmM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha696lACU0AtGy8mvcclTixhm6X5PB0BSpWF
EVXhWQPTEPeCOBRiyxorIszSwYg+i5y70JmuWWY3+1DWmgjs1XH/fXwszANNVBwQ
t8vXD4gN8RpJFP/teI4pyx+PfqPSjevyP9WUtEC9ojBlE3hjkdb2rOsoazaFNKH3
i9xQ7YQvY6gEKSrLyhtW2AskNUnlbSqEFChVGCd1b6HgZGlsddzaqNQl8fcmataX
JFzvXMKEY2Qzvbrbg3aVL+hH7Ighjo9viNiT343KVIx/aBawaaTogbqUJeZXkMKP
da1vQA7qzn3Uv01EDxJAd+56i3KEpAjkRyJOD/uLfILte619lwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMl/o7G0w0Gg3sPo+6ENY+1Ux1TJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGEzMTg2NzUtZTk0ZS0z
MmNhLWEyNWEtZTBmZTQxODAzOTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDRgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAprivwNL9KLDxsq0d4DXFMEr9wao4PmY0G0PFZq8nF1eYbHFx7DVek1Tw
WyWzWVQByxlC50y8l2nCmh5SBE8YORdwMEcIa+dNaEeWATlvrh81fyE9ts8DCD9h
lexJFflLANHGPkaCLpKx3osibUnPxxv3raJIQh2c2UtDUkoNprSwJbferxhDdv4g
9BiMXSmr0vsVnEAdOgg2jgcKOWs+CIfkI/4Un1taUPLLlVlLvZAB4qLLpWg2APpM
NYlWLS6SQBgsdHpCXpKi6qBZL6lenLv2U1kMebcv1hRkb93FEIQ6aZLJS4GRHhjL
ICKjqUo4yauq5bSBwQY6G8navcSF2A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:37:59 2025 by rpki-client