Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/787c637a-ae1a-31d8-a8fa-d672a10ca495.roa
File: 787c637a-ae1a-31d8-a8fa-d672a10ca495.roa (raw, json)
Hash identifier: lG5TGvqnJnNFnlHVxm/EWVK2E/3JfUB1TYyEmYNPEdA=
Subject key identifier: CE:6A:9D:01:1E:BC:5D:05:EB:55:D7:E4:59:27:03:31:F6:AD:71:FA
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FECA65B9947A5320861BDA780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/787c637a-ae1a-31d8-a8fa-d672a10ca495.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.232.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:a6:5b:99:47:a5:32:08:61:bd:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=2e4bdf09-bf0c-4d48-b5c7-e57d46ed4206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:56:f7:b8:4e:0e:5f:85:8d:0f:4e:da:dd:06:
1d:ff:4e:b7:89:05:d4:53:88:81:45:a9:0b:fb:09:
29:e4:11:3e:93:ea:7e:82:86:89:9c:7b:45:b6:e6:
8f:17:d9:7b:11:3d:5a:94:fb:5f:32:69:6f:7d:5f:
b3:fe:45:53:f2:54:8b:0a:15:9a:cd:6e:98:d4:62:
97:2f:7c:a1:8f:11:12:51:74:fe:66:6f:cf:33:00:
43:13:07:80:94:dc:9b:d5:0a:3d:c4:8f:50:cd:67:
8f:f1:e3:47:e0:d4:f1:fb:e2:15:70:56:36:80:0f:
e0:52:fd:1f:ca:83:1d:dc:c2:c0:27:c5:0d:06:e7:
d6:0f:44:bb:96:d4:a5:34:67:a1:a8:4f:48:91:89:
ae:c0:4e:ce:dd:3e:7c:c1:2a:ea:fa:17:36:74:9e:
20:75:25:b4:af:0b:c1:6c:4f:f7:7f:42:a6:ea:be:
b1:6f:59:73:b3:08:f3:b9:e6:a2:b9:06:fb:85:be:
5b:c2:ef:b0:3a:1c:c4:5a:16:a1:c2:df:5e:53:2f:
f7:59:6c:a1:b4:bf:2c:5b:9e:0d:4c:99:7c:33:6c:
43:c5:c6:24:4e:05:f2:cb:a3:c6:15:28:43:ee:25:
68:ca:35:14:ca:c1:9c:1b:bb:7b:ce:19:8e:2d:e1:
12:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6A:9D:01:1E:BC:5D:05:EB:55:D7:E4:59:27:03:31:F6:AD:71:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/787c637a-ae1a-31d8-a8fa-d672a10ca495.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.232.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:d3:16:61:53:a3:dd:2d:07:32:0d:af:63:06:5a:cc:75:c9:
84:06:f3:b8:68:ed:59:11:ea:b3:e8:f6:7d:f0:50:27:f0:b5:
29:f9:65:2a:2c:8d:3a:a1:65:88:67:d0:74:8e:e6:75:7a:a4:
9f:c7:bf:ec:f2:c1:6b:a7:31:84:af:84:c2:80:90:58:4f:0a:
8a:10:e4:48:01:f1:2d:44:35:e9:c9:5e:42:3f:46:e8:df:c9:
37:ba:80:c1:6e:ef:27:ef:92:28:86:0a:02:7e:0a:cd:a8:ca:
90:43:52:b9:7b:b6:a1:53:40:66:a8:8f:ad:4d:4f:6f:ed:69:
52:c9:75:28:53:45:ba:12:03:e2:9b:25:de:6e:85:d3:78:b5:
3e:6b:6a:3b:2b:87:4b:54:6d:62:7e:b6:5e:4a:6e:f7:6f:5c:
fc:36:4f:5e:22:c9:a5:b1:df:4f:66:29:b1:ae:b4:e2:e8:e2:
75:67:44:b0:f6:ff:6a:d3:50:43:ca:ad:43:fa:32:4b:ff:4e:
de:c9:91:68:c6:37:61:3b:d2:2c:74:a8:ab:59:dc:f5:ac:87:
48:2a:a6:0d:25:8b:5e:55:04:b0:69:11:77:87:3c:ca:54:6a:
84:44:c5:dc:6a:de:ac:45:9c:d5:dd:68:39:7f:d4:c5:5d:d9:
7e:d7:87:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:04 2025 by rpki-client