Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f0d529b-719f-3670-8833-c93b56228cd2.roa
File: 6f0d529b-719f-3670-8833-c93b56228cd2.roa (raw, json)
Hash identifier: Sv+SjXxjNE+TYynVSG8btzAFfWLzIKdlrOPxbMo+xq4=
Subject key identifier: E1:CD:5D:9C:0F:CA:BC:B0:7C:26:8C:C9:AF:B0:EE:14:10:65:7A:2F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC5AE37B72E920F92BF586200
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f0d529b-719f-3670-8833-c93b56228cd2.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 13.124.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:ae:37:b7:2e:92:0f:92:bf:58:62:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=2aa38d19-192e-497b-89e9-b1e7475d907b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:10:e8:14:64:b8:8c:87:fe:3c:b0:de:6d:71:
f9:21:5a:cb:a5:d9:da:7b:15:d5:e2:62:d6:88:0d:
0d:c0:da:81:14:c3:4a:7c:6c:53:bc:1a:5f:c3:27:
0c:58:e3:82:3b:50:c6:e5:da:1c:06:7a:67:83:a5:
1a:0f:25:bd:84:d8:45:35:7b:ba:b2:84:01:9d:a6:
25:96:42:97:70:ca:e8:0b:b4:f0:ed:23:fa:53:30:
ca:67:5a:58:4a:e0:28:c2:e6:8e:68:3f:51:50:ab:
b6:f2:7c:ba:d7:eb:f7:38:79:ed:c1:31:70:4b:fd:
fe:e9:b7:27:be:9a:04:1b:4a:8b:3e:2b:84:39:18:
f2:58:41:fd:e0:12:69:fd:19:6f:f5:cb:06:11:df:
60:dd:2b:ac:ed:04:73:ba:66:a2:53:09:80:62:ee:
45:32:c4:9f:ab:d9:5a:fa:0a:6c:09:2c:24:58:61:
f6:35:82:05:c1:4b:b8:98:6a:be:04:01:7b:96:0f:
35:8c:cb:20:dd:25:34:b0:40:a7:2c:4f:fb:cc:93:
55:cb:ff:01:40:a9:7b:3a:62:c5:3b:de:28:22:f3:
f4:df:4e:97:33:28:a3:38:ac:e5:31:ae:20:2a:26:
14:e2:7b:4a:ab:2e:f7:a3:20:ae:18:a4:c6:95:d7:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:CD:5D:9C:0F:CA:BC:B0:7C:26:8C:C9:AF:B0:EE:14:10:65:7A:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f0d529b-719f-3670-8833-c93b56228cd2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.124.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:81:d3:89:ef:a5:cc:6a:9a:da:db:bf:c2:81:ea:bd:b7:0e:
ca:21:ae:9c:f2:c2:4c:59:71:76:99:61:dc:d3:20:a0:da:18:
ed:0d:04:a5:b3:aa:c2:1f:ab:9c:49:d3:59:8c:36:96:6f:8e:
6d:a1:3c:ea:09:73:aa:57:6d:a6:cf:0e:cd:16:e1:d2:1e:4c:
29:40:e0:81:e1:8e:54:17:e9:c0:a4:d5:46:4d:69:b6:4d:70:
84:3f:d0:fb:0f:5f:bf:04:fd:47:53:f6:ff:90:c5:4f:12:96:
d0:9e:04:42:b3:30:03:fb:39:98:40:6e:18:ab:39:0a:e5:92:
62:6e:2a:42:6c:60:11:92:5e:0d:f2:c0:71:66:b4:5c:05:8b:
92:8b:4e:e3:9f:df:34:2c:22:84:f3:83:02:4e:76:36:fb:9f:
b7:79:57:a7:38:d6:92:06:61:d0:f6:67:66:a3:67:50:99:5a:
22:88:a8:aa:71:06:0d:e8:cf:e3:d3:90:53:80:46:29:3b:47:
14:53:d0:c3:77:f5:7b:55:fa:c1:22:3e:91:ca:fa:45:1e:60:
2c:3c:21:82:d4:d5:f5:c6:49:88:19:7a:9c:b3:16:97:8d:28:
87:0f:43:c0:93:5b:0d:11:29:33:d0:69:20:85:56:c5:22:c4:
3f:55:00:4e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD/Frje3LpIPkr9YYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTEwMTEyMDAwMFoXDTIyMTIwNzA1MDAwMFowLzEtMCsGA1UEAxMk
MmFhMzhkMTktMTkyZS00OTdiLTg5ZTktYjFlNzQ3NWQ5MDdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRDoFGS4jIf+PLDebXH5IVrLpdnaexXV4mLW
iA0NwNqBFMNKfGxTvBpfwycMWOOCO1DG5docBnpng6UaDyW9hNhFNXu6soQBnaYl
lkKXcMroC7Tw7SP6UzDKZ1pYSuAowuaOaD9RUKu28ny61+v3OHntwTFwS/3+6bcn
vpoEG0qLPiuEORjyWEH94BJp/Rlv9csGEd9g3Sus7QRzumaiUwmAYu5FMsSfq9la
+gpsCSwkWGH2NYIFwUu4mGq+BAF7lg81jMsg3SU0sECnLE/7zJNVy/8BQKl7OmLF
O94oIvP0306XMyijOKzlMa4gKiYU4ntKqy73oyCuGKTGlddSZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFOHNXZwPyrywfCaMya+w7hQQZXovMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNmYwZDUyOWItNzE5Zi0z
NjcwLTg4MzMtYzkzYjU2MjI4Y2QyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDXwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEANoHTie+lzGqa2tu/woHqvbcOyiGunPLCTFlxdplh3NMgoNoY7Q0EpbOq
wh+rnEnTWYw2lm+ObaE86glzqldtps8OzRbh0h5MKUDggeGOVBfpwKTVRk1ptk1w
hD/Q+w9fvwT9R1P2/5DFTxKW0J4EQrMwA/s5mEBuGKs5CuWSYm4qQmxgEZJeDfLA
cWa0XAWLkotO45/fNCwihPODAk52Nvuft3lXpzjWkgZh0PZnZqNnUJlaIoioqnEG
DejP49OQU4BGKTtHFFPQw3f1e1X6wSI+kcr6RR5gLDwhgtTV9cZJiBl6nLMWl40o
hw9DwJNbDREpM9BpIIVWxSLEP1UATg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:40:52 2025 by rpki-client