Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b7f0448-45dd-32ed-a4ee-5b5e586d48de.roa
File: 9b7f0448-45dd-32ed-a4ee-5b5e586d48de.roa (raw, json)
Hash identifier: Q7tOa9SMeFwBYcZvzrqbYoHagHX8+B3JBSp13V1BsM4=
Subject key identifier: 08:D0:D4:A2:BE:ED:B7:62:5F:A3:94:02:4C:82:5F:7D:8C:77:C0:9E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858406238DCF0DC6BAB31FA928E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b7f0448-45dd-32ed-a4ee-5b5e586d48de.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:62:38:dc:f0:dc:6b:ab:31:fa:92:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=5db1eeaa-eadb-4e41-8c02-6044a57aae10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:f6:22:ad:40:77:f0:14:5e:5a:d1:a3:0a:
7c:f4:55:a2:e4:7d:fd:e5:ec:cb:16:a9:0e:29:9a:
3c:8d:5f:7f:49:da:74:e4:c0:c7:a9:1d:17:5a:1d:
0b:21:bf:62:ab:f0:43:40:55:7c:2a:6d:c6:d6:cf:
2a:41:25:4b:95:2f:1e:6f:c4:ee:22:29:96:c1:70:
67:39:6f:b4:a9:00:7d:68:73:f6:5e:b5:9f:01:98:
0e:29:40:82:c5:5a:eb:5d:cb:2a:62:8d:d0:21:1d:
4b:bf:c1:4c:95:a5:35:c1:19:8a:9c:f2:e2:13:d4:
fc:e6:ca:8c:e0:a0:b2:a2:b2:5d:19:25:92:e6:a6:
af:89:4e:b2:9b:a9:4d:04:ab:f5:b7:55:61:54:2b:
00:c1:37:dc:89:14:46:56:e8:8d:81:f6:f6:8b:07:
9d:26:c3:64:46:35:4c:ea:bc:c0:e6:d0:f6:13:7a:
0a:30:94:9a:6e:67:ca:02:52:0e:5f:c3:fc:4e:2c:
d8:c7:aa:5d:e4:9f:d2:05:e2:a1:cb:3e:4f:a3:42:
56:f1:bb:3a:c1:a8:b6:e3:58:05:96:9c:ea:a0:55:
f6:81:30:f3:37:38:e0:7e:c1:7d:14:1b:cb:00:aa:
b4:e2:25:78:a4:0b:33:a8:38:12:bf:27:80:67:51:
b3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:D4:A2:BE:ED:B7:62:5F:A3:94:02:4C:82:5F:7D:8C:77:C0:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9b7f0448-45dd-32ed-a4ee-5b5e586d48de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a3:4f:8d:3c:c6:85:82:27:78:8b:cf:55:fd:6e:03:bc:37:18:
e7:aa:22:c7:f9:6d:be:ca:92:a5:66:71:f7:98:14:c9:b7:3d:
57:d6:26:33:50:b8:bc:34:a2:03:13:53:f8:95:35:f7:87:df:
d9:02:ff:00:2d:32:e1:93:a4:1c:6d:17:0a:ce:d4:9f:17:38:
2a:1a:0c:98:67:43:f1:12:e9:42:09:47:38:b2:a9:ef:17:db:
25:da:4c:ef:9e:1b:d8:8b:61:12:05:e0:22:f8:e4:85:be:ed:
87:fa:4b:31:f1:22:60:0a:1f:31:99:9a:54:51:1b:46:b1:3f:
d6:8c:5d:e7:f1:96:22:b0:5b:33:a3:15:9b:5c:32:e8:42:6e:
68:b5:21:de:4a:c1:b9:fe:6a:c8:f2:65:9a:db:84:53:1e:41:
5a:58:c8:fe:c1:a9:71:c3:58:5b:ab:3c:85:3c:12:7c:9a:0e:
21:d5:3f:1d:5f:0d:c6:b5:b5:f6:47:f8:56:12:ba:48:9b:81:
ea:45:98:54:a2:1d:da:5c:e0:9a:8a:7a:8d:c3:3e:86:dc:4c:
9d:05:15:97:e0:90:09:a5:9e:8e:f4:3e:42:c9:a0:fa:e1:43:
00:49:9d:9b:7c:f6:98:f2:0c:dc:ca:c0:22:25:1e:e4:ea:89:
cc:f2:07:18
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBiONzw3GurMfqSjgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyNzEyMDAwMFoXDTIzMDIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
NWRiMWVlYWEtZWFkYi00ZTQxLThjMDItNjA0NGE1N2FhZTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcv2Iq1Ad/AUXlrRowp89FWi5H395ezLFqkO
KZo8jV9/Sdp05MDHqR0XWh0LIb9iq/BDQFV8Km3G1s8qQSVLlS8eb8TuIimWwXBn
OW+0qQB9aHP2XrWfAZgOKUCCxVrrXcsqYo3QIR1Lv8FMlaU1wRmKnPLiE9T85sqM
4KCyorJdGSWS5qaviU6ym6lNBKv1t1VhVCsAwTfciRRGVuiNgfb2iwedJsNkRjVM
6rzA5tD2E3oKMJSabmfKAlIOX8P8TizYx6pd5J/SBeKhyz5Po0JW8bs6wai241gF
lpzqoFX2gTDzNzjgfsF9FBvLAKq04iV4pAszqDgSvyeAZ1GzuwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAjQ1KK+7bdiX6OUAkyCX32Md8CeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvOWI3ZjA0NDgtNDVkZC0z
MmVkLWE0ZWUtNWI1ZTU4NmQ0OGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDTQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAo0+NPMaFgid4i89V/W4DvDcY56oix/ltvsqSpWZx95gUybc9V9YmM1C4
vDSiAxNT+JU194ff2QL/AC0y4ZOkHG0XCs7Unxc4KhoMmGdD8RLpQglHOLKp7xfb
JdpM754b2IthEgXgIvjkhb7th/pLMfEiYAofMZmaVFEbRrE/1oxd5/GWIrBbM6MV
m1wy6EJuaLUh3krBuf5qyPJlmtuEUx5BWljI/sGpccNYW6s8hTwSfJoOIdU/HV8N
xrW19kf4VhK6SJuB6kWYVKId2lzgmop6jcM+htxMnQUVl+CQCaWejvQ+Qsmg+uFD
AEmdm3z2mPIM3MrAIiUe5OqJzPIHGA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:21:13 2025 by rpki-client