Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b49bf603-4439-39d6-b156-7aec7cf24520.roa
File: b49bf603-4439-39d6-b156-7aec7cf24520.roa (raw, json)
Hash identifier: QhSpUraEQp1Y0zZIzB9uaLDFrB7lftgf7fBdN+g5juI=
Subject key identifier: 7A:E1:2B:E7:44:17:B8:0E:20:F7:FA:6F:83:D3:38:92:51:65:D5:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7AB8B42B59A657153EE1FD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b49bf603-4439-39d6-b156-7aec7cf24520.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7a:b8:b4:2b:59:a6:57:15:3e:e1:fd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=2f3ef965-41e8-483b-8da9-6bd627d27078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fe:d3:3d:c8:24:87:7b:1d:a1:b9:9e:bd:e0:
66:6d:6a:fd:a2:40:24:26:42:6b:b2:55:ca:4a:ee:
91:46:22:54:24:53:bc:03:f1:3f:e2:31:1d:da:12:
1d:2c:ba:fc:b3:27:22:57:58:1a:6d:fc:01:dd:17:
a2:53:68:a5:cf:b5:d2:5b:d9:fe:73:1f:04:52:5c:
d5:c9:b4:ec:e5:e9:5f:49:b0:b1:8d:e8:9f:79:7d:
e7:06:e4:0b:fa:0e:87:2c:0a:e7:99:27:c4:d3:ac:
96:9f:8b:de:91:e9:7e:e9:61:27:85:54:cf:d8:bf:
06:a1:44:55:1d:3e:ab:80:0f:78:e5:39:2f:48:ee:
b3:af:c6:d2:d0:fe:7d:4b:fe:b8:9f:10:79:18:4c:
7e:08:67:1e:28:c4:3f:d2:e1:40:47:aa:70:16:20:
66:e6:6b:24:43:89:34:e9:9b:25:4e:56:6f:fa:c0:
49:71:9e:7b:09:db:d7:5c:62:0c:d6:40:33:76:ac:
71:ec:98:f3:f7:67:55:bc:d6:1b:7e:73:f3:dc:1c:
64:fc:fa:4d:fb:82:73:c2:83:7e:be:59:5e:77:5d:
04:c9:81:77:8a:50:14:f4:51:54:5f:6b:6c:cb:fa:
e4:97:0a:1a:5a:9d:14:13:51:d3:db:0f:91:c0:27:
9d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E1:2B:E7:44:17:B8:0E:20:F7:FA:6F:83:D3:38:92:51:65:D5:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b49bf603-4439-39d6-b156-7aec7cf24520.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:2c:f6:99:a3:79:c7:89:52:84:3a:cf:39:4c:0d:29:11:94:
25:8d:80:7a:bb:b4:46:36:aa:af:ec:fd:b7:01:0b:36:2d:82:
8b:2c:c5:cd:8b:37:28:ac:93:4d:32:45:2f:e3:18:4e:1e:00:
1f:81:af:ed:8c:92:35:ce:a0:7a:7b:85:20:8f:47:7c:6f:b3:
32:de:d8:59:a9:45:ed:d6:60:fd:56:51:9e:2e:fa:c6:29:7a:
8d:40:c8:42:17:82:f2:79:7c:e9:52:a3:2f:e0:c7:80:71:f6:
84:d3:fa:73:ac:40:67:25:1c:0e:24:20:65:8b:7a:8a:13:7b:
4d:3e:74:fb:2e:c5:e9:b3:52:5c:ae:8b:81:27:29:41:f9:c0:
dc:0c:66:09:5f:7b:1c:b1:ab:a1:e2:18:87:81:d5:92:bd:bd:
ea:92:ed:7c:d9:05:59:e3:77:09:c7:76:98:f6:52:83:26:94:
a7:72:f6:4b:d4:b7:64:5d:91:55:12:5d:b9:e8:71:58:46:1d:
8d:6a:5f:ea:bc:8f:f7:57:70:06:6a:de:0f:f7:07:51:e1:82:
4c:ef:e1:85:46:be:0f:b0:32:2f:9c:d1:ed:34:42:02:94:2e:
00:3d:8e:53:41:cc:aa:71:7a:c2:c1:97:79:36:fa:cf:ce:f1:
cd:ae:f6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:51:13 2025 by rpki-client