Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a82256f3-610a-3a1d-a526-d7ccd951f2a9.roa
File: a82256f3-610a-3a1d-a526-d7ccd951f2a9.roa (raw, json)
Hash identifier: 9CvAKNmRzYKI6Jz/ZGHyF70GuWaVGPX9VNuXFdIZbj0=
Subject key identifier: 9C:64:29:A3:73:93:7B:F8:07:9A:9B:DB:4B:1A:07:30:9E:03:C0:F7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9E7B047D3674D9AEA5767B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a82256f3-610a-3a1d-a526-d7ccd951f2a9.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.232.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:7b:04:7d:36:74:d9:ae:a5:76:7b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=638afeff-253f-4fe5-924f-2475ff3d5773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:d6:2c:95:96:f9:c5:b0:76:ae:ca:2e:02:
8c:50:d8:11:91:79:76:a4:8f:be:ad:eb:bd:d7:a7:
58:f0:a7:0a:bd:82:4f:2b:e3:46:b8:13:42:7c:ec:
a2:41:ba:1e:b5:36:b8:f0:21:9b:dd:45:f1:e2:8d:
41:95:61:e3:6c:ce:5b:30:74:0b:45:e2:50:64:99:
44:51:18:35:45:28:ee:66:35:d9:82:a6:b0:65:f8:
06:45:a0:60:f8:69:31:7d:48:dc:71:19:8d:ee:fa:
eb:3d:de:97:74:db:51:9a:66:fd:24:d8:4d:e5:51:
a7:a0:92:8e:ab:8e:1e:6c:dd:b0:cb:a8:62:25:d0:
d0:4e:b6:47:a7:34:b9:47:3f:c4:40:ff:01:2f:63:
56:25:75:d6:34:70:3e:85:bf:54:59:9d:f5:87:ba:
3f:87:e2:c8:6e:39:44:0b:58:d8:70:67:5a:05:21:
af:5c:77:57:66:10:dd:64:ff:7e:fb:b7:f5:d0:86:
43:78:a5:36:56:80:8c:ec:a0:6a:d9:be:d1:9e:66:
24:84:68:d0:da:e7:85:26:0a:a1:ae:b1:40:ee:48:
a1:02:21:ce:59:91:03:a1:63:68:ed:93:ca:1d:9c:
6a:36:09:9b:fd:09:cd:b8:ff:5c:f3:33:67:54:48:
02:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:64:29:A3:73:93:7B:F8:07:9A:9B:DB:4B:1A:07:30:9E:03:C0:F7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a82256f3-610a-3a1d-a526-d7ccd951f2a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.232.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:2d:51:8a:f0:ca:05:74:86:88:0d:bb:5b:f0:72:71:7f:58:
9f:c9:19:2d:e7:7c:79:bf:f9:c5:5f:31:6b:1f:f2:83:74:b1:
e3:c4:cf:69:a1:e2:61:4b:6d:a6:72:e2:b2:de:d8:08:65:68:
8d:89:1a:83:80:6e:32:34:2a:14:78:54:5a:e6:1d:d9:00:b3:
0b:1b:7c:68:1e:85:5c:7a:ef:d7:2f:a0:dd:01:ea:cf:db:1d:
1a:47:e6:f3:c3:d6:43:77:14:bc:96:b5:92:11:31:47:d2:2c:
45:f5:4f:8e:43:f7:ef:ed:c4:88:31:44:ea:d0:ec:fc:af:b8:
14:39:aa:01:6e:2a:17:7c:af:22:ff:91:e6:80:1e:0b:6b:b7:
ed:54:2e:b3:a6:7b:8d:47:fc:d2:4f:92:e3:7e:86:21:b1:cb:
58:da:59:f4:fa:0a:eb:9c:27:3d:a9:57:cb:46:59:b7:67:b2:
ea:f9:cf:53:c0:23:0b:80:be:63:fb:f9:7d:ac:c4:93:05:23:
46:3a:a7:c9:04:a8:52:31:e7:90:f0:a0:d9:b4:c0:88:b2:da:
8c:64:6c:90:99:95:ce:c9:be:12:de:96:b3:ea:dc:b5:d9:6c:
a4:27:a0:1d:fe:e8:1e:95:4d:80:80:9f:78:84:91:e4:46:9d:
aa:4a:04:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:05:03 2025 by rpki-client