Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aa50791-c9d6-38d3-9b2c-75601279a626.roa
File: 7aa50791-c9d6-38d3-9b2c-75601279a626.roa (raw, json)
Hash identifier: hfQXcg7MGPQNzTPkKLgEMb2eqwUwAgC0VLgF9x0LUGs=
Subject key identifier: 44:A8:47:02:5D:55:73:41:C8:AA:ED:54:AB:A8:94:20:40:D6:D6:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E3E84CBAFD2010548A872FD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aa50791-c9d6-38d3-9b2c-75601279a626.roa
Signing time: Tue 14 Jun 2022 12:00:00 +0000
ROA not before: Tue 14 Jun 2022 12:00:00 +0000
ROA not after: Wed 20 Jul 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.124.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:3e:84:cb:af:d2:01:05:48:a8:72:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 14 12:00:00 2022 GMT
Not After : Jul 20 04:00:00 2022 GMT
Subject: CN=7c9575c8-50aa-45c8-9edc-fdc2aff8e4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:f9:31:e8:e4:50:f3:c1:f9:53:6a:da:36:
5e:90:a6:ee:ab:9b:e6:1f:0f:40:38:8e:ee:a2:06:
f6:23:83:0f:1a:a5:84:6d:b6:f3:a9:04:c8:76:fe:
69:2c:e5:cc:53:60:08:7b:b8:33:8c:96:a5:ae:b2:
9e:a5:d1:23:d3:1e:73:60:37:f9:a9:d5:cc:49:71:
0b:50:73:68:79:9b:27:fe:c0:8a:6c:f9:93:d7:86:
d8:4d:e4:85:d3:df:7a:c7:36:5d:d8:eb:6d:18:84:
d5:9b:04:b5:19:7f:2b:5c:d0:6a:85:51:41:8f:67:
22:e6:a3:6b:6b:c9:a3:bb:9a:6e:e8:87:26:b9:f8:
49:9c:1a:fd:8c:21:7d:58:35:48:c9:20:bc:b9:d1:
88:e0:57:c0:1e:31:a3:36:50:0d:fa:70:53:34:d6:
25:82:a6:58:55:6d:71:4b:45:6b:33:fc:22:99:54:
af:7b:07:4a:99:be:87:57:a5:16:8a:67:cb:e3:c3:
1c:25:17:25:d8:6e:aa:41:47:32:04:8f:af:9d:d8:
c1:3a:d6:29:52:fd:25:26:44:e2:30:12:5e:ec:83:
ec:96:6e:4f:f9:51:6d:14:48:4c:0a:d9:e0:ee:20:
0d:3b:9b:75:49:1f:28:c6:68:7c:4a:12:d8:e4:43:
cb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:A8:47:02:5D:55:73:41:C8:AA:ED:54:AB:A8:94:20:40:D6:D6:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7aa50791-c9d6-38d3-9b2c-75601279a626.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.124.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:2c:b5:74:93:d5:7a:d4:e0:eb:53:da:67:63:05:0a:13:17:
a9:09:eb:19:5a:77:0d:0f:24:61:6f:54:d7:68:2e:c9:7e:1f:
9b:07:08:ad:f8:ab:5e:da:8b:98:f7:c3:6e:a8:5c:62:37:c9:
3c:97:10:6a:f7:80:8a:e7:f2:4a:45:58:da:09:10:f0:0a:89:
3b:c9:dc:67:01:cd:2d:55:99:29:16:58:d8:e4:11:82:68:34:
4a:ae:eb:d0:5e:00:92:69:87:51:97:ef:d8:37:b5:4e:61:fd:
a0:44:1c:11:c8:d6:05:95:bb:d7:53:1a:1f:7b:a3:76:af:6d:
06:8d:5d:bf:2f:8a:bd:f6:9c:05:bf:20:83:45:26:55:b4:fc:
80:89:5f:94:9b:a6:7b:68:f2:3f:a3:0b:b4:7f:1b:1e:71:49:
2b:15:91:bb:ce:4e:dc:03:8d:4c:21:e8:fd:32:cd:5a:c7:b8:
6f:ec:84:22:35:47:da:1b:25:bf:0d:99:09:69:83:f1:5f:64:
2e:7c:29:17:00:06:34:89:95:d2:9c:5f:71:8d:40:ea:74:47:
03:a3:39:24:93:ac:52:07:cd:e8:06:33:d3:9d:d6:f3:f5:b4:
bb:87:ba:07:56:e1:b8:53:a4:45:9f:10:2e:cc:b0:db:b2:92:
4c:5c:04:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:58 2025 by rpki-client