Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f2a107b-3bfc-3525-8d43-eccaf4aa3368.roa
File: 7f2a107b-3bfc-3525-8d43-eccaf4aa3368.roa (raw, json)
Hash identifier: 0T5+RYoDVc1bhOsq1anG55VOkYSng+9TIkZHyED1NR4=
Subject key identifier: 29:1A:A6:27:67:81:EA:86:9F:A2:25:A1:B3:48:1C:E5:AC:32:3A:CF
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC572A11EB9714FAC0C490328
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f2a107b-3bfc-3525-8d43-eccaf4aa3368.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.112.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:72:a1:1e:b9:71:4f:ac:0c:49:03:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=37c24703-cb9d-47d4-ba97-409ed8f13d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:72:68:d6:33:a6:bd:f8:e1:66:ef:e4:a7:75:
bc:83:45:dd:5d:37:66:0e:29:29:5f:69:8f:d7:8a:
39:45:55:ed:4c:86:0b:36:cc:2f:bb:69:bf:e1:eb:
8a:72:7c:8c:53:96:e1:02:86:ec:a2:6b:9b:60:99:
34:7b:33:f0:98:a5:d0:2d:63:c1:4d:c8:8f:b1:0f:
c7:b3:10:3c:97:e3:93:4e:62:c9:e3:e7:90:01:81:
91:33:c8:05:96:93:84:39:c3:a6:9d:78:1f:81:68:
27:75:b7:a3:59:36:7e:a2:a8:f4:2c:23:6c:b0:f1:
61:1e:a0:54:2f:7a:44:b2:37:0d:ec:e3:e5:bd:a9:
24:6e:da:4a:0c:81:ce:8c:91:b0:8c:26:84:0c:33:
ef:f5:f3:49:ae:5e:50:4a:77:b7:29:4e:24:14:b6:
50:c8:a6:00:20:9e:53:94:c0:db:77:c9:21:df:9d:
d1:0a:02:8b:c4:ed:05:9b:5c:5d:a7:e4:1f:d9:55:
c9:e1:f3:16:c3:7f:ff:1c:cf:44:f6:8a:8a:3f:6e:
4d:6d:a8:fd:1f:a3:1f:78:10:12:3a:7b:41:c9:d8:
68:21:64:6e:7a:87:8e:4a:d7:70:19:83:ca:12:b5:
44:ef:9b:14:3f:c7:4e:fd:02:29:11:54:15:ed:e6:
d7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1A:A6:27:67:81:EA:86:9F:A2:25:A1:B3:48:1C:E5:AC:32:3A:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7f2a107b-3bfc-3525-8d43-eccaf4aa3368.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.112.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:b5:c7:bb:50:f7:a1:92:49:5b:91:79:15:e6:25:9c:3f:5c:
34:41:1a:60:cd:52:37:f6:e1:00:71:b8:ee:82:82:44:a1:61:
7c:03:98:c1:90:13:e9:a8:fc:1b:e2:70:8d:90:13:7c:98:d5:
59:14:a7:41:a3:54:15:42:00:92:e4:b7:f7:6e:e3:85:c8:a1:
c0:cc:a3:bb:dc:fa:99:e5:a2:70:18:ce:97:9b:97:12:3d:d3:
82:89:a2:9d:d3:04:c8:5f:f4:8d:32:0e:4f:7c:d8:7f:00:67:
e4:c6:8e:04:23:a6:c0:ac:16:52:dc:ca:5a:dd:99:7a:d6:74:
62:e1:bf:08:98:89:43:04:5f:fb:dc:1d:cf:35:17:b4:2d:f5:
b0:1c:2b:bc:26:cc:67:44:0e:89:03:6a:e2:f1:6c:e6:e4:ba:
97:56:2f:0a:de:fb:d9:3e:e1:be:bc:f4:12:af:82:44:6c:bb:
9e:c8:1d:40:e0:6d:62:d9:02:c3:5a:ae:3b:38:83:3f:af:7b:
d9:15:8d:82:4d:f5:21:94:02:75:9a:fa:c6:5f:1e:17:44:a0:
73:3b:ed:f5:36:20:61:41:bc:97:ac:a8:f4:1b:4c:41:53:82:
3c:b4:08:3f:21:33:23:26:3f:91:22:fd:35:e6:5e:0e:74:08:
19:a9:4a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:15 2025 by rpki-client