Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fda6d83-c966-3cc5-87ab-ed971c457ef8.roa
File: 4fda6d83-c966-3cc5-87ab-ed971c457ef8.roa (raw, json)
Hash identifier: L+62TSZOl/o7cq1AckMJavLfdy0/GGqGWTwEmCiT2R8=
Subject key identifier: 5C:38:4E:47:3A:56:D5:81:B9:CD:E0:46:D3:BB:DF:C4:25:BF:C4:5B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA226D16179754C955D438B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fda6d83-c966-3cc5-87ab-ed971c457ef8.roa
Signing time: Wed 20 Apr 2022 04:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:00:00 +0000
ROA not after: Wed 25 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.48.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a2:26:d1:61:79:75:4c:95:5d:43:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 04:00:00 2022 GMT
Not After : May 25 04:00:00 2022 GMT
Subject: CN=c8d915a6-3dac-45a8-b83e-b9b35340fc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5b:dc:1c:29:57:31:19:5f:ee:69:e5:95:40:
5c:39:b6:f0:f0:b9:40:df:02:80:2a:0f:73:e0:e9:
36:f3:54:ff:93:38:ab:dd:0e:31:4a:be:2c:f5:21:
64:70:85:8b:20:37:cb:70:39:32:92:7c:d8:c9:45:
29:62:28:d5:2b:8a:3f:87:d5:46:75:de:f2:f3:ac:
d9:63:e3:09:b4:f4:a6:61:fc:f6:65:2e:bf:b6:89:
49:a7:72:50:96:b7:fd:b8:25:e0:c5:de:6b:6a:93:
86:92:a4:91:00:51:34:1e:e5:a4:bb:d3:16:23:ed:
7c:4c:93:00:ae:ad:24:d7:c4:17:d4:76:1a:c9:4f:
f3:cf:3d:3e:37:3e:88:31:40:91:43:26:10:a0:88:
b2:eb:c1:8d:7e:57:b4:87:2f:72:03:af:db:2b:2d:
6f:dd:27:cc:f4:bf:5e:77:0b:2a:11:9e:37:ed:e5:
e9:d9:03:a8:24:8a:4f:db:11:b2:12:8e:c0:c3:c8:
66:3e:bf:6a:43:77:f1:29:fc:aa:5c:fc:c6:df:57:
d9:37:0c:12:7e:ad:95:7f:db:2a:32:13:3b:c7:b2:
69:80:6c:2a:a8:e5:54:e9:41:36:75:54:3b:50:7d:
1b:c0:57:1e:c3:65:0d:cf:94:cb:77:86:d5:cb:03:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:38:4E:47:3A:56:D5:81:B9:CD:E0:46:D3:BB:DF:C4:25:BF:C4:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fda6d83-c966-3cc5-87ab-ed971c457ef8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.48.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:08:62:fd:89:0a:c0:86:55:70:35:6c:81:fd:07:37:2d:6b:
27:27:d3:52:7f:7c:75:a9:5e:8c:10:ec:32:dc:4c:e1:32:c9:
46:1d:1d:15:9a:67:15:95:6a:e2:e9:c2:62:ba:a3:c8:b2:2a:
82:10:5e:bb:2b:97:e4:64:86:ad:09:f8:9c:38:3b:a8:64:c5:
cb:30:d9:92:1c:76:99:13:bb:c2:ea:42:9c:08:5f:61:1e:d0:
0c:41:2c:c0:d7:ba:ca:29:cd:41:36:6b:72:34:cb:a5:be:e6:
b8:14:2f:bf:62:77:bc:cf:cd:db:13:98:2d:c9:06:a7:59:a5:
89:66:c8:df:a1:12:e6:8c:1b:8c:0d:56:53:12:1d:54:0a:72:
29:15:97:82:47:b9:45:e7:44:7e:b0:c5:38:e9:ce:fd:dc:6a:
80:42:a1:45:12:78:30:e4:a2:19:1c:8d:8b:fc:2e:ce:8f:d7:
09:53:3e:99:dd:3c:21:14:0e:8e:a8:ca:42:8d:9a:5c:d6:9c:
c7:32:1e:d3:4a:c2:cc:ec:b9:c9:26:4d:b5:b8:47:4d:fd:62:
cf:e2:cf:9c:f9:3d:91:72:08:02:c6:b7:d7:f6:c1:e2:db:28:
10:3b:73:b2:f5:e7:c2:31:bf:d2:0e:03:0f:d7:f2:06:1d:0a:
1b:d0:03:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:46:50 2025 by rpki-client