Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68e0b2e7-9152-350f-a915-a87269435744.roa
File: 68e0b2e7-9152-350f-a915-a87269435744.roa (raw, json)
Hash identifier: OaFd4DVty8R2H6+pYFoOIgAkuOiAWM0r9GRhusGl6hM=
Subject key identifier: E5:69:5E:7B:B3:8C:00:30:A3:71:D9:59:0A:4C:50:C4:4B:A9:3B:CC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840140DBA31E23B724340A37700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68e0b2e7-9152-350f-a915-a87269435744.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:14:0d:ba:31:e2:3b:72:43:40:a3:77:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=ae241634-1b63-4aef-a3e1-5055f83b01ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:e9:db:50:29:a8:8f:56:99:98:10:1c:3a:
95:d8:1e:43:8a:58:dc:01:e8:97:f4:86:b7:96:6c:
b7:f0:49:a5:a9:db:55:d9:1a:45:b3:e9:b6:08:ae:
ac:c7:2d:4f:1f:5c:3c:ff:22:18:38:14:6a:2f:06:
d7:93:1b:ad:f3:50:e9:15:99:55:d7:2c:4c:b5:a5:
b7:a5:83:39:0f:d5:a2:2d:96:46:0f:db:27:63:32:
cc:68:9d:7b:98:e6:af:6b:9d:16:57:2d:92:37:97:
40:9b:5d:d8:6d:e2:a8:db:3d:ea:da:40:d3:8a:3f:
fb:a3:c7:4c:0d:62:37:e6:64:e6:ea:78:b9:cc:ee:
2f:ed:21:30:76:1d:db:89:bd:26:a3:4e:c1:2c:36:
47:ea:67:60:4d:26:90:0b:94:42:18:60:05:62:ff:
cb:2e:ce:51:64:f8:5b:02:82:3f:ca:49:d8:b6:97:
b0:81:ee:0d:04:56:61:46:88:90:f4:37:f9:1c:94:
d2:2f:76:0f:75:f9:7e:58:2b:d4:e7:2f:d2:9e:b1:
50:c0:0d:6b:71:ba:89:43:4f:35:4c:0d:3f:8c:8b:
9a:a9:fe:13:d9:a9:ab:3e:04:2e:7a:8d:3d:b8:13:
32:40:ef:60:8b:60:49:82:4d:51:f5:73:2e:4c:53:
27:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:69:5E:7B:B3:8C:00:30:A3:71:D9:59:0A:4C:50:C4:4B:A9:3B:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/68e0b2e7-9152-350f-a915-a87269435744.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ba:2e:11:22:31:f3:d5:9f:30:90:36:14:91:2a:2b:a1:16:8e:
95:f7:a8:4c:59:47:52:d2:57:e0:c0:cc:3f:9e:21:10:46:6a:
f1:fc:59:d0:0e:d9:24:a4:23:26:c4:40:91:ec:3a:64:31:1a:
ea:be:3f:00:de:d4:98:7b:03:10:51:4c:93:65:25:97:65:e6:
27:6b:43:27:8d:05:34:2e:48:5a:9b:fb:62:fd:70:c7:76:96:
90:fb:98:4b:08:65:f7:c5:db:6f:47:6b:a4:5c:4d:31:f4:4b:
f8:c3:e4:6d:a1:f3:2a:ab:2c:99:91:bb:12:d5:e0:cf:5c:8d:
cb:7e:58:9d:83:2b:11:61:39:97:9d:21:02:e0:fc:98:00:1c:
bd:86:52:14:35:17:34:08:af:3e:31:c7:5c:18:b5:59:81:4a:
42:07:7e:54:9a:23:cc:7a:75:8e:e2:c1:b3:82:94:17:f6:c7:
e7:0d:7b:d4:5f:31:9d:5b:b2:d9:9d:6a:9b:c8:66:30:9a:c9:
80:9a:35:e6:63:8a:44:32:48:49:8c:0a:cb:c4:54:22:55:16:
91:4d:57:5c:6d:3a:65:a6:5b:a2:a2:1e:20:69:48:e5:0b:a0:
27:fe:30:de:a7:58:66:83:11:b1:e8:3e:5e:a3:30:08:c0:b1:
3f:f4:d3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:38:14 2025 by rpki-client