Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f0e7044-9aa6-3135-9de1-27cc327808bf.roa
File: 7f0e7044-9aa6-3135-9de1-27cc327808bf.roa (raw, json)
Hash identifier: fDELTZGTIRfADO+O66BdVInTnhTdn0G411SHiNNH0bk=
Subject key identifier: 88:C3:C9:5C:29:03:ED:37:89:63:0A:09:07:25:25:1E:D2:CD:C6:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584013E0FF09241B160C4817BD00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f0e7044-9aa6-3135-9de1-27cc327808bf.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.36.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:e0:ff:09:24:1b:16:0c:48:17:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=f8cd12b8-aefe-4771-a994-33ee7502735d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:df:ba:42:c7:02:71:77:b0:ee:8a:8e:82:d9:
2a:37:98:bb:5c:73:2f:dc:3b:52:2a:f8:e6:40:b5:
de:a9:e0:2d:f7:55:1f:9e:34:f1:3c:01:bb:68:61:
30:03:db:7f:b8:2d:c6:77:f3:26:ac:74:42:20:67:
40:53:05:ea:ef:f3:76:08:22:6d:8b:1d:08:a1:27:
3c:63:b7:df:91:7a:85:3b:65:f6:2b:fa:3a:c0:86:
d7:43:e9:d9:0e:17:33:94:0d:d6:7a:08:6b:95:b5:
77:d5:ab:1e:e8:da:5f:c8:86:57:96:9c:81:17:9b:
9a:22:a3:e2:55:bf:6c:31:42:66:ac:59:be:10:14:
41:99:ef:9b:1e:34:f1:76:6e:1a:5f:e4:d0:5e:80:
84:32:66:cc:ce:fb:29:e2:b7:66:4c:f0:91:93:bf:
b0:52:91:71:0a:8b:41:e3:f6:61:1f:f0:74:7f:2c:
33:c0:17:58:62:9f:b2:2e:0a:07:46:85:02:f4:ec:
8b:58:df:b2:56:00:c0:8d:6b:25:98:31:e2:97:66:
84:bc:3b:86:2d:5f:6d:27:ac:32:8b:c3:95:36:04:
a9:0d:6a:7f:56:df:45:8a:fd:43:bd:60:a5:aa:d5:
78:45:3f:1c:4a:f5:e0:8a:d8:7c:d0:4d:89:95:54:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C3:C9:5C:29:03:ED:37:89:63:0A:09:07:25:25:1E:D2:CD:C6:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f0e7044-9aa6-3135-9de1-27cc327808bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.36.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:0d:85:8c:72:06:70:65:40:a6:39:ad:b0:14:5f:6b:5f:32:
b8:d7:8e:df:d1:f8:e5:f5:42:41:2c:c7:12:0a:2d:4e:e7:fe:
e3:06:84:ae:54:2f:ff:34:96:62:68:5c:a7:f0:e4:df:d3:40:
98:46:77:b1:a2:b9:41:b4:cd:9f:8b:f2:f1:81:86:70:b0:27:
69:09:4c:eb:26:85:cf:96:0a:d1:d1:65:97:b5:d4:90:5f:a8:
bd:e9:d8:6b:3b:be:b8:95:a3:cc:bc:03:d2:b5:70:64:c1:08:
20:63:29:21:ac:5d:58:b3:f0:e2:01:5b:76:2b:0f:a0:95:43:
65:18:e3:8c:b8:5e:4e:04:d6:1a:42:9c:4e:da:e4:6a:6e:4e:
a0:97:83:e3:9e:89:7c:68:30:dd:d5:05:dc:cd:30:0a:57:b5:
ed:38:f7:c1:b0:44:9b:08:e8:5f:89:30:95:a1:83:ee:f6:bc:
b7:6d:ef:f1:ad:2a:ae:0e:43:02:38:3c:22:ed:50:20:9a:ed:
98:02:e9:31:c2:6b:0b:1d:80:c9:ad:0e:92:e4:43:8f:6d:c8:
32:21:c6:7e:c7:0e:d8:f2:c0:89:f3:02:76:91:b0:cb:92:71:
0e:fb:48:c2:aa:69:01:97:fd:97:ba:65:fc:cc:33:bd:e2:ff:
76:12:e1:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:23:23 2025 by rpki-client