Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87ed27fa-cf97-33cb-a7f8-d9cc32300dc1.roa
File: 87ed27fa-cf97-33cb-a7f8-d9cc32300dc1.roa (raw, json)
Hash identifier: +5spVsR0PiXXyEhXLfohAgbj8geiuPiOMSZacSoBLJY=
Subject key identifier: 78:D8:11:50:C5:56:F1:CA:B9:D8:00:C5:2E:A7:C7:33:65:D2:28:9F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB72787826C45386EDA1DD800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87ed27fa-cf97-33cb-a7f8-d9cc32300dc1.roa
Signing time: Wed 26 Jan 2022 05:00:00 +0000
ROA not before: Wed 26 Jan 2022 05:00:00 +0000
ROA not after: Wed 02 Mar 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b7:27:87:82:6c:45:38:6e:da:1d:d8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 05:00:00 2022 GMT
Not After : Mar 2 05:00:00 2022 GMT
Subject: CN=bf3b2526-3d7c-4df7-ad29-24acf7747bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:5d:32:fd:75:db:21:d5:fc:13:ec:b1:cd:c3:
22:cd:72:4a:87:c2:5c:a1:67:28:45:52:a4:92:13:
91:00:bc:50:1a:3e:4f:d5:15:9d:56:84:81:0f:98:
ff:d7:15:4a:66:a3:e3:96:13:87:50:3f:e3:86:87:
9a:56:a2:0d:03:fb:40:43:76:d7:0b:56:fb:0e:aa:
4c:27:5e:2f:09:e1:fc:0e:5b:f6:cc:26:17:0c:fa:
f6:c3:96:87:1b:60:97:7e:8e:9c:d5:60:c5:65:e7:
7c:50:06:3e:5c:c1:94:b0:e6:08:34:e1:4c:d7:9e:
cb:a7:34:e6:93:fa:60:64:b7:c3:25:42:df:e0:e8:
3d:0e:c2:b7:08:4c:d9:2e:b4:fc:e8:96:f4:ad:b9:
58:9f:c1:a2:c7:d6:1b:17:02:ce:0a:f8:52:f7:ea:
1f:63:d3:e3:58:e8:4f:f2:f0:9d:6b:85:d1:73:4c:
12:47:c2:ef:94:1c:18:69:df:00:b0:02:7e:5b:c2:
30:fc:5d:d0:af:c0:c7:4f:b3:cb:ff:35:5d:8c:d3:
75:4b:8e:c8:a1:79:2d:8c:1f:17:38:f9:56:48:d1:
01:d4:9d:6e:c7:ae:94:a7:24:24:e0:4e:d5:a8:88:
69:51:39:ec:ea:bd:0b:ef:f2:d9:62:66:36:a0:cf:
90:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D8:11:50:C5:56:F1:CA:B9:D8:00:C5:2E:A7:C7:33:65:D2:28:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/87ed27fa-cf97-33cb-a7f8-d9cc32300dc1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:37:28:38:21:cc:7f:26:e6:62:e5:ea:83:d1:b7:c1:c5:c1:
3f:f6:82:fb:cc:d3:65:0f:96:02:7d:f6:e6:4f:d4:1a:9c:7b:
37:e6:b9:29:c8:4a:4f:76:6b:7a:a6:1f:bd:af:28:27:fa:a1:
58:f2:a5:21:51:43:bc:3f:34:81:e0:98:dc:b2:73:18:65:b7:
33:16:81:9f:ed:18:25:89:c7:01:ce:db:4c:b7:af:9a:a4:f6:
27:5a:e4:45:2c:d6:74:a7:e6:c3:c6:a7:91:8f:3e:37:4f:bc:
ed:7b:2c:c7:49:0a:7a:d8:5f:f2:90:48:81:9e:63:6b:15:9c:
81:bf:3f:14:0b:37:90:84:11:d1:c3:4e:73:22:ef:ac:be:0b:
bb:3e:c9:f7:61:7a:4a:0b:63:02:f7:d4:98:81:33:3a:77:b2:
5c:5a:77:98:10:86:82:56:11:85:29:4d:04:c2:f0:68:f9:5b:
c7:b4:11:3b:03:33:de:dd:ac:d9:63:cb:e1:f0:d4:13:72:db:
e0:b3:92:2b:dc:ed:f0:7e:fc:4b:04:d0:2d:a1:f6:cc:29:87:
3b:a9:9e:97:af:bb:b8:d5:9f:cc:7f:80:23:ee:d3:bc:e4:26:
85:f4:ee:d0:2f:21:6b:4c:af:0a:ce:f3:b4:eb:b9:dd:e5:45:
fc:49:b5:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:45:47 2025 by rpki-client