Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0ea59e4-22e4-3cc2-846d-5d137d2a2475.roa
File: b0ea59e4-22e4-3cc2-846d-5d137d2a2475.roa (raw, json)
Hash identifier: SgGwK7eAwp4eMMFYQrZUqNYfp6tufbviLw2gC7dGV7k=
Subject key identifier: 09:EF:4E:09:EF:B0:56:02:93:CD:BC:48:41:3F:2D:26:C3:E6:5E:92
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7AB103D24C495A96B861F120
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0ea59e4-22e4-3cc2-846d-5d137d2a2475.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.36.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7a:b1:03:d2:4c:49:5a:96:b8:61:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=6eb031a6-2bea-4c56-a0a9-3cbb468f5f73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:22:60:53:92:c8:8f:10:ac:7f:05:c1:a0:6c:
ca:5c:8e:e1:ba:8d:34:68:99:e3:83:0d:3d:16:ef:
11:4e:2b:88:21:ea:62:7a:f8:7e:3e:e9:a9:50:ba:
0b:17:9a:96:1c:85:53:5e:f5:78:15:96:8d:f9:86:
60:02:36:34:e9:7d:43:a1:32:93:3e:d2:ea:fe:82:
4a:3b:22:30:b9:b7:86:3c:89:c5:92:33:23:61:0b:
b2:02:b3:6d:ba:42:cb:e8:29:47:de:79:0b:be:e9:
08:c9:c4:1c:a8:65:b0:a9:19:78:e5:73:31:61:e0:
6b:0e:b6:b3:57:b1:82:e3:01:26:c8:89:77:42:0b:
b2:66:d3:08:a8:b3:85:0e:02:82:f8:03:ca:3b:90:
74:0b:65:a3:8c:e6:b8:cc:96:ef:5a:2f:ff:22:2b:
c1:27:fa:59:43:85:5a:84:62:dc:6d:25:43:a2:73:
1e:22:5b:5f:9f:d9:7a:27:48:0e:59:77:1b:51:20:
eb:dd:1b:e7:f7:7f:26:e1:fb:6a:10:b3:1c:81:67:
72:45:7d:a8:19:73:11:67:8c:15:67:5b:e5:c3:ac:
ad:9b:ca:99:f3:9a:9e:24:3b:d9:83:af:a8:45:9e:
f6:a1:a7:b3:20:bd:62:02:07:1b:28:4d:4c:8f:2b:
a9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:4E:09:EF:B0:56:02:93:CD:BC:48:41:3F:2D:26:C3:E6:5E:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b0ea59e4-22e4-3cc2-846d-5d137d2a2475.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.36.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:97:22:35:e9:25:07:75:28:c5:ce:8f:36:ad:f8:c5:f2:5d:
19:c4:67:24:ed:7c:7f:2c:34:82:53:20:c1:1e:76:01:2c:80:
da:fc:86:b4:19:b4:9b:40:89:05:87:43:ba:54:35:e7:bc:54:
35:47:c8:62:ed:12:e4:88:8b:67:66:23:be:ad:39:71:28:8d:
39:77:58:df:36:90:a7:5b:8b:32:55:0a:38:cc:db:24:e5:d9:
8d:7d:6b:b4:1c:90:a0:54:3a:01:cd:c3:e2:6a:3f:58:12:1f:
51:96:e4:c2:a1:8e:d4:a1:5c:70:ce:16:91:25:e0:c7:d8:da:
85:c2:25:fe:af:28:2e:7a:63:43:fd:82:d6:68:17:53:8e:8e:
14:1d:da:e5:8d:cb:e2:0e:e5:88:f0:26:4e:68:de:a0:01:20:
a6:83:67:b6:6a:fb:26:3e:69:a3:5c:5b:13:87:bb:a6:e6:ad:
bd:a4:11:11:f3:c9:f4:d0:2d:80:3a:cf:f6:79:a7:98:fd:7f:
35:4b:7c:7f:51:b4:f8:85:e1:47:95:ca:84:1c:a8:98:94:67:
a1:08:d4:83:e1:4e:c3:57:f4:0b:9d:95:91:60:f9:eb:5d:77:
5a:ea:44:e9:57:c3:78:ac:58:46:3e:69:7b:43:a9:96:4e:4a:
25:01:bd:db
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD16sQPSTElalrhh8SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwNjA0MDAwMFoXDTIyMDUxMTA0MDAwMFowLzEtMCsGA1UEAxMk
NmViMDMxYTYtMmJlYS00YzU2LWEwYTktM2NiYjQ2OGY1ZjczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyJgU5LIjxCsfwXBoGzKXI7huo00aJnjgw09
Fu8RTiuIIepievh+PumpULoLF5qWHIVTXvV4FZaN+YZgAjY06X1DoTKTPtLq/oJK
OyIwubeGPInFkjMjYQuyArNtukLL6ClH3nkLvukIycQcqGWwqRl45XMxYeBrDraz
V7GC4wEmyIl3QguyZtMIqLOFDgKC+APKO5B0C2WjjOa4zJbvWi//IivBJ/pZQ4Va
hGLcbSVDonMeIltfn9l6J0gOWXcbUSDr3Rvn938m4ftqELMcgWdyRX2oGXMRZ4wV
Z1vlw6ytm8qZ85qeJDvZg6+oRZ72oaezIL1iAgcbKE1Mjyup6wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAnvTgnvsFYCk828SEE/LSbD5l6SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYjBlYTU5ZTQtMjJlNC0z
Y2MyLTg0NmQtNWQxMzdkMmEyNDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDSQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAfJciNeklB3Uoxc6PNq34xfJdGcRnJO18fyw0glMgwR52ASyA2vyGtBm0
m0CJBYdDulQ157xUNUfIYu0S5IiLZ2Yjvq05cSiNOXdY3zaQp1uLMlUKOMzbJOXZ
jX1rtByQoFQ6Ac3D4mo/WBIfUZbkwqGO1KFccM4WkSXgx9jahcIl/q8oLnpjQ/2C
1mgXU46OFB3a5Y3L4g7liPAmTmjeoAEgpoNntmr7Jj5po1xbE4e7puatvaQREfPJ
9NAtgDrP9nmnmP1/NUt8f1G0+IXhR5XKhByomJRnoQjUg+FOw1f0C52VkWD56113
WupE6VfDeKxYRj5pe0Oplk5KJQG92w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:43:09 2025 by rpki-client