Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8cc1180d-85b1-30d6-8e25-04ead05044e4.roa
File: 8cc1180d-85b1-30d6-8e25-04ead05044e4.roa (raw, json)
Hash identifier: Icn8fVirrwiUjoiwOgAxgTAsWOzJ4nOQv4r28v15xZw=
Subject key identifier: BD:4B:A3:66:2E:CF:0B:8D:D0:2C:71:C6:63:95:2A:35:60:BE:D2:17
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16825ECDFF9
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8cc1180d-85b1-30d6-8e25-04ead05044e4.roa
Signing time: Mon 07 Jan 2019 01:28:27 +0000
ROA not before: Mon 07 Jan 2019 05:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:68:25:ec:df:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 7 05:00:00 2019 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=272d2744-407a-4097-b94e-4f4ee23fa029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:8d:ac:9c:90:16:38:8b:d8:a1:ce:ed:11:
ea:e1:a7:20:11:b0:6d:c7:18:5c:2d:90:5c:88:b9:
58:f4:84:1a:f5:e6:54:d9:94:e3:98:fa:05:16:56:
1c:b9:5e:ec:0d:03:64:b6:60:2a:ff:5b:72:25:b2:
61:86:7d:b2:4a:1c:f7:13:32:a8:97:b4:4c:45:93:
d5:a3:f7:f2:4a:5b:c2:0a:7d:c7:a7:b8:4b:b0:5e:
d6:cc:22:4e:72:53:ea:b8:b5:e8:36:6f:1a:4e:9c:
d1:32:fb:7c:c9:c2:0a:0b:a3:4b:6f:3f:76:c8:19:
b5:2e:50:2f:34:b7:7f:d1:3e:cd:91:b1:22:58:80:
db:1e:9e:89:07:77:72:9e:49:85:41:bb:43:7c:51:
32:11:f8:8d:1d:b7:b6:27:1b:15:f5:7c:c3:3b:d2:
37:8d:a4:5e:fd:f3:65:5d:a4:1a:2e:a2:7f:0e:c5:
b2:66:ac:ec:c0:53:2c:f0:de:1f:0f:9e:ec:52:d9:
be:03:65:b2:bc:f2:9c:9d:92:b9:5c:98:c5:64:94:
a1:63:02:f4:51:96:39:df:d7:e0:a8:a0:ec:f4:92:
26:74:c3:14:eb:b7:2c:83:b2:8f:73:61:e8:df:d5:
11:b6:cf:46:e6:31:df:46:13:61:08:03:cb:84:57:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4B:A3:66:2E:CF:0B:8D:D0:2C:71:C6:63:95:2A:35:60:BE:D2:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/8cc1180d-85b1-30d6-8e25-04ead05044e4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:41:5b:be:7c:9a:37:bd:b8:a5:c2:c7:6b:a7:20:59:f1:1f:
f2:e5:f5:7b:e2:28:62:3f:ed:df:4a:57:a0:04:24:f6:df:a3:
2b:34:31:e8:2e:11:14:2d:c9:1c:93:26:48:a5:f2:7d:7c:5c:
95:94:a5:93:90:80:2c:9b:bc:ac:e5:71:38:86:74:25:07:cd:
97:47:54:c5:d6:08:25:12:f3:28:a8:cf:80:52:88:33:1b:b4:
39:0e:e5:7b:61:e0:94:0b:48:0a:70:13:50:b3:5b:53:3e:42:
91:43:ac:d4:b8:5a:f9:c0:d6:58:11:d2:82:64:25:af:c8:b4:
96:74:a2:4c:f9:d8:86:a4:2e:9a:90:07:ef:f2:16:ae:c4:44:
b1:63:0e:8a:77:1f:f2:a9:74:11:5a:eb:86:12:5f:71:83:03:
05:93:b3:f4:f9:60:ca:c3:62:bd:9a:d8:fa:01:b1:f1:c7:6e:
93:10:17:04:7e:bb:83:2e:91:3d:bf:3f:c0:b5:a3:70:e5:61:
a1:c3:4d:a9:ad:db:d7:21:f8:53:4b:49:2e:e1:34:70:cd:ab:
8c:5d:86:b1:27:c5:6c:f4:22:f4:76:28:ad:59:09:7d:37:f4:
c7:54:f0:0c:d5:ba:76:01:95:68:b3:31:6c:3e:58:b4:32:ea:
04:09:7a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:37:52 2025 by rpki-client