Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67cd7703-7514-3e39-9f21-f11c09371028.roa
File: 67cd7703-7514-3e39-9f21-f11c09371028.roa (raw, json)
Hash identifier: zSwpr9+F/zkLu/nwqtMWa+xIoXu1mS/fP+vsSWD7QYU=
Subject key identifier: 0B:7D:35:3A:6D:DE:5F:F6:CC:E9:DF:45:EE:AA:5F:4F:FC:DC:53:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F502314AFA06AAD436E9E3400
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67cd7703-7514-3e39-9f21-f11c09371028.roa
Signing time: Tue 20 Sep 2022 12:00:00 +0000
ROA not before: Tue 20 Sep 2022 12:00:00 +0000
ROA not after: Wed 26 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.112.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:50:23:14:af:a0:6a:ad:43:6e:9e:34:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 20 12:00:00 2022 GMT
Not After : Oct 26 04:00:00 2022 GMT
Subject: CN=1a11bc5e-ec72-4cb7-aca2-5a803a2904fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:47:aa:66:74:79:9f:de:7d:b3:d0:a2:b7:17:
52:18:12:6a:63:13:e9:a6:aa:6a:45:40:f9:46:31:
ee:ce:e9:9a:75:40:65:e2:5c:a8:6d:7a:69:54:31:
ad:48:48:f6:8d:24:e8:8b:82:ad:a8:67:80:b0:44:
4f:32:9b:34:31:d1:92:64:ef:09:e9:a8:4e:cd:c9:
65:5a:d6:be:bc:da:c4:e8:08:65:ac:a6:42:c5:1e:
e5:02:4a:e1:07:6b:75:5d:46:2a:48:7e:3f:cd:eb:
5a:db:4d:db:ed:2e:93:f0:d7:5c:46:ff:2a:28:1b:
16:f0:e2:70:50:93:c2:1d:a1:b9:56:f5:1d:96:7e:
67:a3:40:34:5a:76:52:d2:cd:4b:49:6c:c7:62:c2:
04:6b:75:80:cd:3c:5a:76:58:d0:c5:57:fb:63:12:
55:f5:98:79:2b:40:44:1e:46:64:a9:d4:f8:95:42:
bb:dd:cb:0d:1f:d3:48:7d:3c:f2:01:05:31:d6:c4:
be:b9:a9:b5:87:d2:b0:47:3e:3b:a1:88:93:ca:d9:
df:9a:e6:b5:64:6a:84:2f:4f:20:5c:4b:e4:75:42:
82:35:7f:91:ee:a7:b9:a3:48:f5:95:26:ba:7e:d5:
f2:f1:61:e8:92:43:66:35:0d:32:7f:d5:51:87:ba:
20:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7D:35:3A:6D:DE:5F:F6:CC:E9:DF:45:EE:AA:5F:4F:FC:DC:53:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/67cd7703-7514-3e39-9f21-f11c09371028.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.112.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f1:bb:b0:03:77:bd:62:84:aa:a2:2a:0b:3c:cc:dd:3b:89:
82:2b:46:7e:b0:7e:5a:1c:52:1b:4a:9a:bd:08:27:3a:89:5d:
1c:d4:f6:ab:25:ee:dd:1c:f8:65:11:44:d7:17:a4:3f:9a:d5:
ad:b8:83:9c:ce:07:4b:6e:15:10:30:a8:4e:b8:2c:c8:ba:97:
64:6f:3b:bf:6d:bf:07:43:d6:4a:ae:34:80:6e:7f:c0:88:71:
32:0b:d8:ed:8b:ab:59:b1:00:97:d7:35:40:73:f8:37:6a:e9:
57:51:6f:55:a8:14:3e:6a:9f:e2:7c:0c:ca:f1:37:c8:e2:39:
90:68:4b:14:22:d7:d0:8d:c2:35:4d:e8:ee:e4:be:61:98:82:
29:9c:af:fa:e4:e2:62:fc:8d:1a:54:af:ba:3e:ce:02:5e:85:
2f:37:6c:2c:2c:87:7c:fe:77:23:af:18:42:46:15:0c:28:85:
fb:cc:06:eb:f1:c3:25:f4:38:db:36:16:94:46:66:5a:43:4e:
58:c8:52:83:e5:eb:42:ae:21:31:7c:ce:52:47:0b:fe:9b:6b:
7b:b7:d4:6d:42:22:de:51:31:34:6b:99:db:e6:81:48:c7:e7:
6c:1e:59:85:9f:5a:d4:40:1e:7c:83:fb:26:ed:f5:3e:d4:7f:
eb:c5:b5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:30:28 2025 by rpki-client