Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b35f1b09-3cc1-3c15-a677-7cfb291226f3.roa
File: b35f1b09-3cc1-3c15-a677-7cfb291226f3.roa (raw, json)
Hash identifier: 7+2emaAuyv3ID5sQjaX4iUkYP5PUllE9pEDoEBEWKe4=
Subject key identifier: DF:FA:DC:00:E4:DF:BF:A1:40:3E:6A:83:25:C3:39:47:80:D3:D3:B8
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F28EFBC2F910B6A64652CEBC0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b35f1b09-3cc1-3c15-a677-7cfb291226f3.roa
Signing time: Tue 06 Sep 2022 12:00:00 +0000
ROA not before: Tue 06 Sep 2022 12:00:00 +0000
ROA not after: Wed 12 Oct 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:28:ef:bc:2f:91:0b:6a:64:65:2c:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Sep 6 12:00:00 2022 GMT
Not After : Oct 12 04:00:00 2022 GMT
Subject: CN=ed43de1c-3b10-4c11-a293-64da5d92388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:25:0e:5a:fb:ff:3c:3e:36:07:d9:8b:b9:
b0:1e:c7:9c:fc:ef:52:20:ef:fd:d6:d4:ca:35:bf:
7c:9e:94:6b:ac:39:5a:f6:8d:45:ec:b3:97:6a:6d:
45:f4:a2:a3:dc:6a:fc:52:e8:0a:c4:4a:eb:62:b2:
f5:a8:19:d7:9d:ec:a9:b5:56:16:72:f0:08:d5:8a:
ee:c0:6a:e5:00:6e:be:4e:d6:25:95:1a:74:76:07:
28:64:8b:23:2e:5a:46:5d:2d:e4:8f:3e:a0:ed:21:
ac:fc:8c:23:87:b2:30:95:5f:8a:d5:4d:46:6a:0f:
6c:f6:47:d8:1f:8d:4e:62:1c:10:57:8a:5b:30:b3:
fe:40:94:35:00:a1:97:c3:a7:b4:3e:d2:ee:05:ca:
b9:86:9d:ee:49:33:16:85:be:be:88:22:a9:6c:0e:
f0:b2:36:e3:46:2b:9b:a6:cc:45:17:aa:e4:64:2b:
da:5d:53:df:3c:82:ed:8e:6d:74:62:a6:d3:90:bc:
27:3a:d7:9c:f0:06:46:47:57:da:2b:a6:01:a8:d5:
e4:6f:71:36:7a:16:32:82:60:dd:3e:1a:99:4d:61:
a9:f2:ec:06:9b:91:5b:40:25:bf:2d:ae:bb:35:75:
3d:4e:9e:7c:28:6f:5f:50:26:0e:f5:b7:42:7c:e8:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:FA:DC:00:E4:DF:BF:A1:40:3E:6A:83:25:C3:39:47:80:D3:D3:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b35f1b09-3cc1-3c15-a677-7cfb291226f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:37:a5:0f:6e:47:f9:79:6c:7b:46:7a:97:d4:39:2f:16:8a:
65:17:fe:71:46:05:c1:25:bd:f5:d3:f3:4d:70:59:d3:94:22:
22:5d:20:e6:c4:d4:38:03:5e:f8:de:f8:a0:42:f8:b8:2a:e9:
70:cb:b3:b9:56:16:35:15:26:1c:11:5f:6e:44:2d:08:8e:cb:
c9:f5:5e:54:41:78:99:5d:32:be:36:82:50:b7:06:00:d6:87:
4f:fd:78:54:45:c9:d7:56:89:6a:ff:03:00:23:27:4e:4d:63:
80:65:79:9e:ae:03:f8:c0:ba:8a:fd:86:c6:c3:d3:8c:be:ed:
26:7d:c1:04:9f:70:1c:c4:8c:4f:61:d6:4b:fd:d0:b0:a7:19:
ff:d1:fa:76:fc:80:e5:6c:9c:09:2c:e6:5c:1b:29:4c:d2:ad:
d6:27:20:6f:a5:9f:ae:e9:4f:ec:02:44:67:ae:1b:0a:d0:56:
80:9b:e6:94:f3:21:7b:44:d0:d6:a3:2d:fa:97:88:db:42:a4:
34:20:aa:71:ca:b7:ed:17:da:76:e3:55:8c:19:02:58:ec:95:
4c:53:7d:30:88:84:68:65:6e:67:48:48:eb:5e:a5:ac:b4:d6:
64:27:e5:76:08:1e:1f:4c:8f:f1:2f:b5:85:4a:ea:98:70:dd:
0e:bb:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:48:23 2025 by rpki-client