Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5557a6ac-1485-38cd-9b50-faa9e086dcc0.roa
File: 5557a6ac-1485-38cd-9b50-faa9e086dcc0.roa (raw, json)
Hash identifier: WfF3XpbFf4fhwoizx8DjH4KO/s1PeAv1GLSMoP1XeP4=
Subject key identifier: 4F:0B:C4:7D:4E:83:16:B6:EC:84:53:3B:AF:C5:1C:F7:21:DB:30:C4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2C7E55B94D8E83A12A381940
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5557a6ac-1485-38cd-9b50-faa9e086dcc0.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.200.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2c:7e:55:b9:4d:8e:83:a1:2a:38:19:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=4de08b30-7d85-417d-a6ba-1e2ad31488f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e8:e3:65:55:d6:b3:bd:27:bc:2f:ec:4c:d2:
d6:2f:03:80:fc:67:f7:43:90:83:57:5f:dc:d8:16:
59:77:58:69:b3:92:5b:7c:db:97:f9:7a:6d:9a:6e:
a4:b3:c5:02:ab:e3:6d:57:d4:d6:01:bb:5e:c1:0a:
4c:e2:d9:40:e1:01:de:91:f2:3e:01:2b:a8:5a:a5:
60:f5:47:a2:1a:4e:5e:26:35:3b:6d:8a:8b:c6:ea:
52:a7:be:92:94:ee:a6:bc:dd:09:1b:2a:45:00:50:
07:5a:37:ae:e8:5c:8b:48:0e:b2:88:c1:2a:ba:fc:
f5:03:36:48:d2:be:11:cc:b9:6c:41:9d:8e:8d:5b:
37:cc:8f:d9:7a:6f:1d:13:57:2e:23:ea:ae:14:76:
2a:7c:fd:c3:cd:2e:2d:93:e7:57:53:c7:39:c2:8b:
a3:93:0e:23:af:dd:f2:79:82:09:9d:f5:2c:25:eb:
92:97:12:d0:bb:23:9c:af:dd:9d:5a:57:10:c6:03:
a2:49:bb:8d:89:41:1d:0d:e4:f2:44:6b:4d:b3:40:
41:b2:3b:ee:42:d2:2a:e0:cd:c6:61:86:e5:39:3c:
39:bc:37:4e:34:6d:ab:cb:5c:b7:8d:01:04:d4:2e:
23:57:11:ce:ac:0a:7b:e5:1a:76:61:60:72:cf:67:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0B:C4:7D:4E:83:16:B6:EC:84:53:3B:AF:C5:1C:F7:21:DB:30:C4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/5557a6ac-1485-38cd-9b50-faa9e086dcc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.200.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:98:28:58:62:33:93:17:88:bd:d2:06:b4:96:94:8e:8a:b6:
5d:f6:31:30:36:33:04:d7:d5:46:a8:1c:08:de:0d:57:10:56:
65:1f:31:7e:1e:80:54:a2:92:80:92:96:ff:45:1d:43:6f:97:
a0:00:4c:92:d7:91:00:dd:a3:86:99:76:ea:ef:9e:85:d9:13:
5d:fe:fc:40:dc:cd:f1:ad:bd:fa:1a:76:02:7d:7d:7f:2d:f3:
e6:fa:9e:a1:c2:6b:df:a4:a1:1d:81:26:fb:41:78:63:95:d7:
3b:7d:ad:34:72:e6:0f:43:91:81:c0:74:1c:b2:a5:7a:88:6c:
9c:22:e2:25:a5:ed:b2:94:db:9d:f9:6a:f8:f7:6b:dd:c6:0b:
23:bb:87:38:6f:90:a6:8f:e3:04:c9:06:c9:67:4a:33:88:37:
b5:e2:41:5f:c2:3b:8b:54:da:a4:9f:58:ea:44:c8:ba:86:8f:
5f:09:77:6a:1e:46:0d:58:4e:b6:5c:25:aa:86:3f:08:a7:cd:
04:0e:bb:9b:e0:55:df:44:0b:4b:9d:24:c4:28:11:f9:65:f7:
92:0f:09:16:87:c2:20:a1:36:fa:f9:06:66:cc:71:b4:16:8e:
70:b2:32:11:d3:1d:2d:53:bb:87:fb:35:17:94:0e:aa:95:5c:
9e:05:9c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:08:40 2025 by rpki-client