Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c66fd4f-4e23-3440-b43e-2e6a079a98c0.roa
File: 4c66fd4f-4e23-3440-b43e-2e6a079a98c0.roa (raw, json)
Hash identifier: wFZ587t19IDg/hQfA6JcYlJlNCNm1rOdb9i3u2G+u28=
Subject key identifier: CC:D7:20:F7:4D:A8:9B:30:1C:3B:9F:70:3C:8C:35:71:CA:46:E9:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DF0598A20253E500605A52F80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c66fd4f-4e23-3440-b43e-2e6a079a98c0.roa
Signing time: Tue 17 May 2022 12:00:00 +0000
ROA not before: Tue 17 May 2022 12:00:00 +0000
ROA not after: Wed 22 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:f0:59:8a:20:25:3e:50:06:05:a5:2f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 17 12:00:00 2022 GMT
Not After : Jun 22 04:00:00 2022 GMT
Subject: CN=820175b1-2a1f-416c-93ca-d9d6570632dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9a:d1:93:bc:15:58:9f:39:af:d5:22:10:85:
9e:f6:81:af:58:87:61:ff:e3:79:cc:3a:9b:a5:fe:
27:92:2e:6c:79:20:f2:a4:83:39:fe:fb:1a:b9:b8:
29:af:71:bb:9b:dd:18:c5:2d:0b:93:34:a7:54:f7:
20:dd:11:70:46:89:18:8b:27:dd:62:7a:2d:03:21:
c9:fe:49:a2:7e:0a:04:59:a6:b0:03:f0:7e:ed:e8:
fd:bf:f1:e7:f9:e9:77:3c:53:0d:a8:e5:0f:60:3d:
9b:e0:db:68:8e:44:2b:3d:eb:7c:19:f2:4a:06:b5:
c9:95:96:13:0a:80:80:f4:bb:39:d8:55:ca:3e:e5:
40:ab:cd:f8:7f:d9:4f:41:b2:8b:31:af:61:df:f8:
92:9b:5b:9e:e4:1b:07:cd:02:d9:d5:96:59:33:e9:
bf:e3:43:0e:cf:08:86:94:94:26:27:e7:30:73:ef:
8d:c3:c9:c1:b6:9f:16:4f:2f:b2:5e:7b:60:d5:cf:
3e:a4:98:d7:95:13:2a:a7:0e:70:9f:71:96:17:c3:
e2:4d:d2:69:9c:a8:3f:ed:e9:23:e5:88:48:5a:28:
c3:03:fe:cb:b8:0b:fd:4d:76:9c:a6:99:bc:88:13:
9b:bc:a8:b6:46:bd:6b:19:3f:26:5c:bc:a6:e8:bf:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D7:20:F7:4D:A8:9B:30:1C:3B:9F:70:3C:8C:35:71:CA:46:E9:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c66fd4f-4e23-3440-b43e-2e6a079a98c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:f4:b5:9b:9f:cd:79:55:ec:09:cb:3d:68:9c:1f:b6:cf:ba:
96:2e:01:08:b4:57:b2:14:16:30:88:6b:52:43:b4:d7:78:bf:
4c:71:b3:12:1e:1c:9b:3b:ca:a3:68:d3:4d:4f:e6:12:f4:b9:
6f:43:44:d2:28:31:df:d6:06:12:f3:82:56:3b:00:66:6e:e7:
39:26:e3:e2:39:95:5d:50:e0:7e:98:4d:77:f4:31:58:39:d3:
29:15:dd:4d:f0:c5:90:db:6c:cb:74:b5:01:7e:eb:26:66:a6:
36:74:f6:e2:74:27:d7:9f:8c:d9:c3:68:6b:b5:6d:07:5d:76:
7b:db:b1:b0:15:c2:7d:1a:54:c5:d7:9b:d2:23:a0:c2:c4:04:
0c:38:b7:40:50:f6:cc:a7:aa:8e:0d:3f:78:52:de:ca:5f:9a:
4a:8b:3b:0b:2b:5d:bf:44:ca:88:d1:78:f9:df:26:88:5d:1f:
7d:70:73:cd:a5:b2:f3:a9:47:46:cb:4b:83:06:a4:db:bc:c4:
f7:2e:c1:2e:da:7b:2f:3f:39:84:c5:e2:ce:92:70:00:91:0a:
1e:74:39:81:07:73:c0:95:2d:29:b4:11:8b:51:f9:49:0c:98:
8a:3a:8b:4c:1c:30:d1:5c:b7:fe:21:c6:b0:c5:ba:4f:a5:27:
38:86:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:44:34 2025 by rpki-client