Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8837d909-91d3-3e35-b0a1-628f9577dba3.roa
File: 8837d909-91d3-3e35-b0a1-628f9577dba3.roa (raw, json)
Hash identifier: olCyK5OPK5TqpHqMiPRxmmyc/a2oDlf0EChGjszPhUg=
Subject key identifier: 3A:88:55:6D:CF:E5:05:86:0E:C4:3E:1C:9B:51:B9:13:94:14:81:66
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F5031DECE91C10821116F6980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8837d909-91d3-3e35-b0a1-628f9577dba3.roa
Signing time: Tue 20 Sep 2022 12:00:00 +0000
ROA not before: Tue 20 Sep 2022 12:00:00 +0000
ROA not after: Wed 26 Oct 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:50:31:de:ce:91:c1:08:21:11:6f:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 20 12:00:00 2022 GMT
Not After : Oct 26 04:00:00 2022 GMT
Subject: CN=3bf2b6f6-c663-4b97-91eb-3dfbd0e19c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:14:0b:e0:61:bb:24:ea:76:5b:ba:fe:c3:40:
95:90:e8:4b:f5:30:28:db:fb:e0:ad:6b:38:5d:ce:
43:44:11:00:78:e8:1f:09:ac:79:5d:06:c6:81:ad:
4b:f1:5b:24:ca:ba:6f:bb:4f:9a:11:8c:f3:d1:7c:
86:18:ca:1c:56:6a:b0:05:b7:f6:fd:c0:56:ab:21:
5e:69:ba:a4:c2:8d:ec:1a:3b:9c:69:46:ec:e9:30:
03:6c:25:e8:25:96:1d:64:69:ba:00:95:36:d2:89:
63:f2:18:e2:1d:cb:e0:1c:df:7a:c4:df:32:2e:b2:
ab:cf:f7:0f:b7:b3:1a:1b:fb:d4:5c:fc:2c:a7:cc:
19:a7:d5:bc:fc:94:bc:1c:35:71:56:c5:4c:78:94:
4b:12:97:d4:3a:08:fa:45:d4:87:79:c0:e9:2f:da:
53:76:99:e2:a4:38:5a:72:fc:f2:39:25:37:e1:e8:
ca:8c:4e:68:a9:48:d6:28:d0:f9:fb:28:cb:70:ef:
1c:9a:53:26:76:75:85:e8:00:30:58:67:e3:6c:a3:
e0:65:42:ca:0a:4f:27:b2:c2:87:88:3d:a5:95:31:
88:98:04:b5:05:00:74:ad:4e:d9:55:d4:d0:ce:7b:
d4:dd:01:ae:ce:27:b7:e8:71:17:1f:6e:06:38:d7:
54:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:88:55:6D:CF:E5:05:86:0E:C4:3E:1C:9B:51:B9:13:94:14:81:66
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8837d909-91d3-3e35-b0a1-628f9577dba3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:28:a9:1a:da:ca:0b:df:a1:7b:ea:e0:b2:6a:e1:42:74:b0:
e2:5f:06:8c:f8:e5:3d:15:65:83:86:67:2a:b6:93:40:92:68:
cd:bb:de:87:52:d7:ed:6d:0f:cd:75:78:20:25:52:74:f4:af:
b7:7a:4e:67:d5:08:39:6a:1e:b1:4e:bd:dc:c4:8b:fe:31:f0:
38:84:fa:55:28:c2:7b:fa:79:b5:c7:43:85:bb:46:a6:e1:1c:
19:8b:0a:2b:59:41:d8:40:89:d1:3f:3c:d8:43:56:9e:e9:70:
ec:c9:a1:8a:ee:53:82:94:82:19:16:c0:5a:57:25:b5:b6:3c:
10:ff:06:93:1a:d6:ae:73:0f:68:db:f9:c8:d7:97:d1:1a:de:
b7:7a:3f:e1:47:62:12:02:44:4c:da:f0:b5:93:97:e1:98:3b:
a2:17:9c:93:63:5d:87:bf:be:1c:d1:eb:55:15:83:68:5b:c8:
d6:f5:94:35:8a:1d:0b:26:31:13:6b:12:0a:10:81:91:ab:a1:
97:c8:9a:1b:f1:c0:c2:a8:e0:30:51:57:12:af:31:b7:17:dd:
60:6b:32:e7:b2:43:74:41:19:8f:e7:d2:7a:0c:25:e6:31:c3:
62:e1:0f:e7:ab:36:32:d8:bd:95:53:02:e7:7d:b6:1e:0d:ff:
f5:72:fb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:11 2025 by rpki-client