Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa4fcff6-4027-3d66-8858-7f49245efc47.roa
File: aa4fcff6-4027-3d66-8858-7f49245efc47.roa (raw, json)
Hash identifier: GOGDAy5fdqoWxdHLvMKqfKiBLXTGZF6UOj3qPLUoNTY=
Subject key identifier: 73:49:28:6D:03:82:9C:41:AB:AA:E8:F8:C7:4B:C0:1F:98:E8:5F:3D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7AB0B1BC4A095781BE2F0800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa4fcff6-4027-3d66-8858-7f49245efc47.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7a:b0:b1:bc:4a:09:57:81:be:2f:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=40314e1d-3896-4eb6-8106-f4237aa9482b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:85:76:dd:4d:4a:e3:2a:e7:5d:5f:f2:32:
c6:18:5a:e1:e4:9d:c5:af:ec:f7:c0:41:79:04:55:
b0:b1:21:2d:23:a0:3e:fd:48:89:5c:de:0d:c1:76:
d2:6e:0b:73:6b:a9:78:8a:ed:94:a1:39:89:80:bc:
d7:24:3e:9c:0a:af:95:47:08:21:51:2e:e7:71:da:
4d:72:1f:cb:44:64:12:02:3c:d7:62:5d:e7:08:5f:
38:c3:01:b0:55:da:34:cd:c1:92:12:30:14:25:d1:
81:3b:f8:75:cc:91:ac:8d:6c:6a:0e:94:e9:76:b7:
d3:e4:00:6b:07:bc:df:68:6f:e7:04:e1:25:2a:60:
73:0f:c7:9b:6f:db:70:77:25:bc:02:55:68:10:aa:
71:7f:64:96:be:00:f6:ba:11:cf:53:d2:5d:93:d0:
94:f4:9b:39:b0:e3:40:e1:78:9f:19:a0:3b:b3:55:
6e:07:a5:7c:cd:a4:46:ee:09:81:e2:e9:08:0c:a6:
d3:b2:0c:0c:28:46:e5:b4:78:64:00:3e:94:69:1f:
4f:7e:53:d4:27:31:51:a5:de:38:c2:a7:47:81:f1:
e0:f8:33:75:e1:1e:3a:16:9d:2c:ef:c2:31:ad:17:
71:27:11:55:aa:bf:bc:6b:60:29:12:4d:c7:cf:3d:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:49:28:6D:03:82:9C:41:AB:AA:E8:F8:C7:4B:C0:1F:98:E8:5F:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/aa4fcff6-4027-3d66-8858-7f49245efc47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:87:bf:99:d8:74:9b:f7:58:fc:dc:bc:61:72:51:94:20:4a:
79:c9:3d:77:af:2c:9b:8a:70:c1:c9:5f:bd:bd:a0:ad:21:1e:
9c:a1:c5:e9:2d:95:4e:73:5e:e2:0c:a2:15:cb:ed:ec:03:80:
a9:e8:1f:3c:5c:d9:e4:3d:35:a0:b4:37:59:9d:ee:13:99:3b:
4e:69:c5:e2:44:bd:ea:05:5c:0c:fe:28:51:2f:d2:ce:e4:72:
8e:df:6a:00:d1:41:80:d7:dc:b1:56:8d:e6:63:6d:87:f5:17:
0c:f5:c7:1d:c2:b1:03:d5:e2:fe:eb:b0:b8:96:5e:f7:3f:2c:
4f:9b:cf:c3:1a:35:7d:d2:e0:4e:9b:16:a1:8a:82:69:55:cc:
6a:02:41:b5:da:17:fa:c8:6f:d5:3d:be:26:98:fc:6a:d1:5e:
51:28:7d:a8:db:ee:65:3d:0f:8e:87:9a:11:4b:79:0b:b1:f4:
41:54:73:b2:80:04:31:b3:1d:a1:e9:ac:62:a5:f6:93:b2:2c:
73:06:57:22:fd:b7:53:f1:ab:1b:65:30:2c:f3:9d:d1:f2:be:
86:74:95:e1:5b:6d:2f:90:0d:ea:f7:e6:f1:a4:65:00:6a:84:
38:20:4c:6a:58:d2:c3:03:72:77:44:1f:b6:2a:c9:76:f8:dd:
3b:72:0e:aa
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD16sLG8SglXgb4vCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwNjA0MDAwMFoXDTIyMDUxMTA0MDAwMFowLzEtMCsGA1UEAxMk
NDAzMTRlMWQtMzg5Ni00ZWI2LTgxMDYtZjQyMzdhYTk0ODJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs82Fdt1NSuMq511f8jLGGFrh5J3Fr+z3wEF5
BFWwsSEtI6A+/UiJXN4NwXbSbgtza6l4iu2UoTmJgLzXJD6cCq+VRwghUS7ncdpN
ch/LRGQSAjzXYl3nCF84wwGwVdo0zcGSEjAUJdGBO/h1zJGsjWxqDpTpdrfT5ABr
B7zfaG/nBOElKmBzD8ebb9twdyW8AlVoEKpxf2SWvgD2uhHPU9Jdk9CU9Js5sONA
4XifGaA7s1VuB6V8zaRG7gmB4ukIDKbTsgwMKEbltHhkAD6UaR9PflPUJzFRpd44
wqdHgfHg+DN14R46Fp0s78IxrRdxJxFVqr+8a2ApEk3Hzz2VWQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHNJKG0DgpxBq6ro+MdLwB+Y6F89MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYWE0ZmNmZjYtNDAyNy0z
ZDY2LTg4NTgtN2Y0OTI0NWVmYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDSAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASYe/mdh0m/dY/Ny8YXJRlCBKeck9d68sm4pwwclfvb2grSEenKHF6S2V
TnNe4gyiFcvt7AOAqegfPFzZ5D01oLQ3WZ3uE5k7TmnF4kS96gVcDP4oUS/SzuRy
jt9qANFBgNfcsVaN5mNth/UXDPXHHcKxA9Xi/uuwuJZe9z8sT5vPwxo1fdLgTpsW
oYqCaVXMagJBtdoX+shv1T2+Jpj8atFeUSh9qNvuZT0PjoeaEUt5C7H0QVRzsoAE
MbMdoemsYqX2k7IscwZXIv23U/GrG2UwLPOd0fK+hnSV4VttL5AN6vfm8aRlAGqE
OCBMaljSwwNyd0QftirJdvjdO3IOqg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:55:14 2025 by rpki-client