Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e23f173-beb1-3d6f-bcb4-17974d85d630.roa
File: 9e23f173-beb1-3d6f-bcb4-17974d85d630.roa (raw, json)
Hash identifier: 09bYpQisPKP+WRkcoaSjxLDYF7DA0ycFbg4FAMJjWys=
Subject key identifier: F8:A6:D7:69:AE:27:91:13:98:4A:B6:D2:87:30:F2:7D:DE:6E:37:70
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DA1CD74852445E670052B4A00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e23f173-beb1-3d6f-bcb4-17974d85d630.roa
Signing time: Wed 20 Apr 2022 04:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:00:00 +0000
ROA not after: Wed 25 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.112.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:a1:cd:74:85:24:45:e6:70:05:2b:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 20 04:00:00 2022 GMT
Not After : May 25 04:00:00 2022 GMT
Subject: CN=45423140-3dac-41e4-b544-647ac0f6b2e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:68:ec:64:99:a0:49:bf:e3:a6:2e:18:fa:
bf:44:6d:e6:96:da:e6:48:3a:b6:1a:b6:87:41:2c:
67:d3:72:28:62:7c:b1:7a:00:93:d4:e6:35:81:77:
16:d4:e9:8d:d7:92:99:5e:61:a6:0c:51:38:ed:03:
f4:79:8b:c7:a5:fb:91:c3:80:96:59:98:f6:11:db:
e5:cb:92:63:5a:9c:45:12:1b:2d:04:38:02:ab:57:
1c:e0:4b:36:0f:14:e9:12:f5:2e:f4:51:a9:8a:5c:
c7:c9:f6:c0:cc:17:84:cf:5c:0f:3c:39:a5:f3:98:
7a:01:15:df:77:6f:14:37:43:bf:03:f5:d7:49:b0:
b2:44:54:73:c8:aa:10:27:80:09:11:ea:0c:93:1d:
cc:92:ba:09:db:86:8c:d4:de:cc:de:79:b6:7a:f2:
76:01:4c:f4:7c:d0:24:90:7a:64:8f:69:e0:7b:c2:
bc:28:2d:75:c8:f9:2f:d6:16:8d:5a:d4:43:f5:1b:
5e:43:3a:5c:40:df:c8:80:92:8e:11:cc:17:33:bf:
e7:6d:b4:fb:ec:d7:53:19:38:79:3b:30:25:e8:40:
e1:5e:79:10:09:19:7b:fd:40:3a:0c:98:70:99:cd:
42:84:65:31:24:54:04:28:66:2e:e6:84:6d:9c:a0:
3a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A6:D7:69:AE:27:91:13:98:4A:B6:D2:87:30:F2:7D:DE:6E:37:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/9e23f173-beb1-3d6f-bcb4-17974d85d630.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.112.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:00:09:08:73:9b:c5:c9:75:3c:2d:48:1b:04:31:49:48:7c:
36:8f:68:d3:d7:4f:90:ed:03:b7:6a:ee:70:42:7b:bb:eb:b7:
d3:cb:88:d0:34:e7:8b:02:91:a8:61:15:92:23:26:49:e8:c3:
1a:29:5f:7d:59:53:6b:1f:54:2e:84:b3:22:36:43:36:d5:fa:
72:53:79:f1:75:98:9d:91:bc:d0:d9:fd:0d:11:b3:95:cc:64:
e3:ea:c1:ac:2b:10:e9:9f:f1:f4:cf:ec:03:b8:30:30:91:07:
77:36:f3:82:8e:35:e4:9e:74:b3:74:36:9a:30:60:34:95:d1:
3f:ef:db:3f:be:0c:b7:a9:29:e0:25:c9:03:fa:37:53:b8:93:
94:63:20:0c:0c:be:4f:52:ac:1d:53:50:dc:cd:cd:89:f1:34:
9f:e8:d0:02:18:99:75:21:02:bf:18:c9:e3:b1:05:e2:95:e7:
03:e4:17:3b:69:c5:21:7f:2d:d6:49:63:f0:ae:ea:e0:22:7e:
5d:69:97:df:6f:ec:c7:82:69:43:8a:61:3a:e9:2b:95:25:1d:
10:40:7a:a7:1d:d0:af:a4:3b:0e:86:e3:22:2d:e5:57:48:e6:
b5:47:5e:0b:b0:69:d5:45:96:c5:8c:ee:c7:94:87:eb:7a:af:
8e:5b:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:04:14 2025 by rpki-client