Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ac199e7-6354-357c-bde6-bbbd304678e4.roa
File: 4ac199e7-6354-357c-bde6-bbbd304678e4.roa (raw, json)
Hash identifier: XLzxnzJG3lFMGtwCqm543t0v7RU1POFjDXr0wyfQcUU=
Subject key identifier: 1B:AD:5A:5D:E5:64:73:53:23:93:25:DD:A6:A3:69:39:F8:E8:89:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840138EE165BC5831AC93DDBF40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ac199e7-6354-357c-bde6-bbbd304678e4.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.200.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:8e:e1:65:bc:58:31:ac:93:dd:bf:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=f195fac9-5051-4c1e-a9c0-605db4f43cc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:b7:95:59:a1:a4:8a:29:30:48:af:4f:ea:
46:e0:92:ad:cc:ff:63:d2:0f:1e:fe:50:fc:e5:e6:
56:24:07:1f:79:13:8c:35:a6:a4:37:4c:84:0b:a8:
67:ee:a7:01:b1:3e:20:7e:d6:3d:3b:a5:02:db:08:
e8:d0:1d:e8:65:d4:e3:67:d8:7c:38:b1:4c:a6:ad:
19:c3:27:82:50:b8:90:6b:4e:24:20:bd:27:b0:6a:
66:71:01:33:e6:8a:f3:a2:92:9c:d4:43:ef:4c:7e:
29:93:86:25:f4:24:cf:22:36:7f:7e:f6:aa:8c:ba:
63:26:c0:ff:4a:e7:dc:ab:df:7f:4c:99:20:a7:b0:
a1:c0:11:ff:85:05:10:be:a9:03:48:6e:4f:87:f4:
4a:e3:62:04:f3:f0:3d:6b:35:e6:ed:04:43:a2:28:
64:ea:0a:4d:33:63:3b:cc:8f:b2:2b:13:17:cb:d6:
4f:84:b5:3e:0f:a1:fc:1a:33:8f:91:99:20:09:1c:
7b:d0:42:86:c7:e0:bf:0c:62:3a:50:5e:77:55:1c:
2d:59:fe:ed:2e:08:52:9e:32:7c:2d:b0:09:16:6a:
43:81:27:c8:eb:fa:9c:c2:05:8c:a2:fc:56:57:3f:
7f:e8:41:a7:f0:54:b0:63:b2:21:60:eb:29:c5:4b:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AD:5A:5D:E5:64:73:53:23:93:25:DD:A6:A3:69:39:F8:E8:89:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4ac199e7-6354-357c-bde6-bbbd304678e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.200.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
af:4c:1f:de:7d:ce:e2:2c:33:1a:e0:96:62:59:b2:2c:33:6f:
b1:f9:00:c2:b3:57:fb:07:13:55:72:7b:e2:15:a3:6a:fa:4e:
51:35:ae:09:7f:8a:0f:4d:c3:b3:a0:38:8a:cf:b3:15:89:b5:
f0:ab:ce:07:ec:1e:4e:cf:b2:7e:7b:bc:29:a7:5e:84:e9:d0:
d0:7b:ff:d6:6a:ba:3e:a6:a8:42:ee:2e:17:24:c6:8a:93:1e:
98:b6:c9:5b:70:79:86:9a:79:c2:02:35:62:0c:f5:5c:a4:88:
8c:79:8a:cf:5f:4b:1b:6f:1e:bb:33:2e:1d:ae:e3:ac:c5:8e:
e8:16:f6:d3:cf:35:d3:e8:b0:17:93:f6:04:b5:66:15:f2:17:
71:a0:e4:49:c0:fd:b3:1c:62:24:f6:e7:f3:0a:25:d4:d3:f1:
68:d6:a0:60:29:5c:e7:d6:18:80:97:53:44:f1:66:dd:90:2b:
1d:cf:27:c6:43:11:84:1c:31:93:06:16:8a:51:cb:6e:f3:54:
b3:ac:0f:64:91:81:b9:7d:ca:13:e3:9d:e0:47:d2:4e:71:a5:
90:d5:21:f3:10:97:4d:7b:1b:1c:31:1e:17:48:d0:9d:df:ce:
7f:d0:78:5b:46:4e:33:59:3f:62:42:6c:16:3d:76:7c:20:a8:
98:88:39:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:32:22 2025 by rpki-client