Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4add9b97-c593-320e-93d1-d77beaa564f5.roa
File: 4add9b97-c593-320e-93d1-d77beaa564f5.roa (raw, json)
Hash identifier: dCkpPtr5zMkkAzOWUsK3DjZx8KZLQMFWDepc99+oGoQ=
Subject key identifier: 30:00:52:6E:30:8E:E5:45:AE:14:A1:54:81:87:B5:90:7E:A8:A0:C1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E17427067DA6D968411806480
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4add9b97-c593-320e-93d1-d77beaa564f5.roa
Signing time: Tue 31 May 2022 12:00:00 +0000
ROA not before: Tue 31 May 2022 12:00:00 +0000
ROA not after: Wed 06 Jul 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.56.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:17:42:70:67:da:6d:96:84:11:80:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 31 12:00:00 2022 GMT
Not After : Jul 6 04:00:00 2022 GMT
Subject: CN=26378e6c-9b8c-41d7-9de1-d68b2a1914f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:9b:ba:2f:b4:5c:ea:9a:67:0f:ad:90:0d:eb:
f0:af:38:42:20:bf:1e:b7:ef:7a:5c:3e:03:c8:36:
ed:ac:cb:fa:fb:84:de:6d:a1:00:79:32:44:4d:c3:
1b:7e:03:51:86:b0:66:f1:25:48:74:a8:ae:95:bd:
3b:16:30:52:27:87:2a:d4:85:b0:9f:a0:cc:c1:03:
6c:cf:25:70:d3:cd:ef:49:f0:46:2f:32:22:39:a5:
d3:b0:c6:9f:d0:b4:4b:c0:94:56:1e:d6:fb:d8:b9:
e8:73:43:1c:3a:6a:cc:90:76:17:e2:76:e9:c4:d3:
a5:5a:2c:ca:14:76:60:43:e5:46:35:e5:33:94:54:
79:2b:b6:78:bb:f5:f3:54:6e:cb:3f:96:e0:73:48:
c7:7d:d8:46:7d:59:35:3d:62:f6:5f:aa:1f:2a:59:
9d:36:a0:ae:7c:c2:7e:3b:89:93:31:c8:5f:0f:52:
0b:d1:57:5f:03:18:0e:7e:ea:fe:6c:20:68:80:ff:
79:f7:62:e0:ae:eb:2e:59:aa:f4:e5:88:29:4c:8d:
e4:5e:a8:56:c9:56:36:d0:fb:b6:79:b0:2a:76:91:
7f:22:bd:fd:c0:b8:61:34:0f:46:13:dc:94:46:82:
08:9c:27:76:22:01:0a:09:8b:87:ce:4c:ea:eb:46:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:00:52:6E:30:8E:E5:45:AE:14:A1:54:81:87:B5:90:7E:A8:A0:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4add9b97-c593-320e-93d1-d77beaa564f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.56.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:37:a3:8b:d3:56:0b:a4:e8:78:4b:e9:d2:05:6a:78:c8:e5:
40:84:b5:97:7e:e5:17:0a:2d:a0:c6:b1:97:4e:d0:38:9c:3a:
37:da:18:dc:81:1c:7f:56:e4:cb:f2:62:8b:62:08:f2:45:67:
62:78:f2:41:b4:9c:fa:ed:61:9b:b4:f0:4b:e8:bf:2b:36:12:
72:b9:bd:4b:6c:9a:8d:9b:f3:81:b6:44:8e:68:72:70:a1:14:
a5:dc:ef:d9:18:e5:36:f7:b3:b6:9d:6f:fa:49:3d:8e:1a:76:
62:58:cd:19:46:b0:ec:5a:27:06:8e:a5:02:30:b7:5d:7e:ba:
72:4e:f5:a7:41:1f:62:24:1e:11:e9:94:dd:0f:1d:6e:01:95:
42:a1:9d:de:45:99:1d:94:55:b3:ed:85:b4:b7:c1:b8:52:5c:
03:8c:8a:7b:74:1a:51:4e:a6:53:28:f7:f9:77:72:ea:05:19:
37:0f:e2:49:c7:82:13:6e:ee:55:a5:0f:29:b5:be:a7:a4:70:
ba:bc:bb:4e:8f:8b:e2:44:54:7b:ff:f8:08:bf:27:de:6e:2b:
c1:5e:91:98:bf:4c:28:8f:66:1b:69:17:8a:32:1a:ab:49:0f:
75:75:c2:70:51:d8:70:fb:e7:0c:c7:9d:15:7b:59:ed:46:a2:
66:a5:68:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:54 2025 by rpki-client