Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/710124a8-ab5d-3954-a4a7-91681cbcdea4.roa
File: 710124a8-ab5d-3954-a4a7-91681cbcdea4.roa (raw, json)
Hash identifier: 53NrLJNNK5Hp7TUpnS9xosGcIfMoh5Wr03ssfxvLHLw=
Subject key identifier: AE:30:A8:A2:A9:80:88:02:19:F9:97:B4:96:7E:E4:E1:BC:8D:97:B9
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584013CA7869808A4F734A621F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/710124a8-ab5d-3954-a4a7-91681cbcdea4.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:ca:78:69:80:8a:4f:73:4a:62:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=da0bc9bf-f9c7-44f0-96fd-bae91d38f0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:1e:ab:0f:e2:58:bf:69:e9:ac:f0:e5:cb:
12:54:b2:30:23:9a:c3:0e:dc:ac:67:e6:35:5b:08:
8f:3e:5d:72:e0:d1:5f:25:53:ee:15:01:f3:87:ae:
8d:e8:c1:8f:a7:d1:07:d0:2d:b0:2a:44:e3:85:16:
bc:6b:c2:b3:c2:ac:6d:e9:44:41:41:e1:43:1c:a3:
dc:8a:dd:d6:21:cf:c5:ba:19:e9:58:e9:cd:72:22:
22:4a:8e:a2:c5:e5:28:04:03:15:05:23:cf:bf:bc:
93:67:67:55:98:3a:03:8c:af:47:db:1c:fa:e9:c8:
69:70:89:f4:a6:f1:85:25:97:d1:79:5c:1a:a6:6a:
a2:15:5c:e3:9e:ef:ad:68:65:e5:77:f3:aa:cd:b2:
7c:9f:42:1a:ee:c2:50:8a:83:2b:79:a2:e6:1f:3b:
68:27:95:94:88:fb:c1:3e:e9:f7:1e:3d:a7:de:fd:
dc:a0:75:9c:3f:20:20:1c:3b:06:97:07:a8:68:aa:
d4:bb:15:7d:61:40:48:86:af:39:61:4e:17:d3:fb:
00:24:8a:93:59:e3:21:26:3e:50:31:77:04:0d:c4:
29:26:49:d1:fd:74:a4:c4:76:fb:4e:c7:3c:10:39:
56:f0:2c:11:a7:7c:5d:87:da:78:ae:12:0c:68:b4:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:30:A8:A2:A9:80:88:02:19:F9:97:B4:96:7E:E4:E1:BC:8D:97:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/710124a8-ab5d-3954-a4a7-91681cbcdea4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:15:ed:f8:0f:e6:fa:05:12:a6:b3:25:aa:36:f8:01:4f:84:
8c:e2:ef:77:f6:2b:29:be:9c:02:66:e2:9b:e0:61:9e:a1:86:
71:bb:82:ac:a6:cf:24:1a:7b:b2:8b:43:3d:fa:14:8e:fd:61:
77:48:69:ac:b1:c1:34:c3:aa:ea:32:ea:d8:4f:c8:7d:b6:17:
fb:e4:0c:e6:8f:9b:d6:43:69:f2:ff:6f:7c:43:c3:35:71:1d:
79:a5:77:e4:23:c2:46:72:85:20:9b:0e:ec:1b:9a:6c:92:dd:
29:b6:e1:b8:26:23:43:b0:45:96:ee:45:07:63:b0:32:87:bc:
06:78:62:19:c1:49:6c:fb:ec:32:4a:7a:cc:e5:96:1c:da:31:
60:04:53:40:4c:6c:ce:8a:90:3c:39:a9:39:bc:e4:42:38:b6:
88:65:c0:fe:36:26:93:86:0d:7d:d9:8b:74:36:53:48:b5:5f:
72:d0:e7:57:1e:7c:1f:52:da:16:8e:99:f9:3a:40:6f:68:77:
ff:a9:34:9c:6e:61:42:0f:4b:4b:bf:cd:1e:b2:62:5f:cb:53:
dd:6f:96:aa:d9:47:dd:05:2c:a3:7d:7e:bd:ff:7f:53:e8:c9:
c3:61:83:07:53:f0:36:72:dd:12:6d:8c:a2:94:77:19:ea:64:
66:96:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:53 2025 by rpki-client