Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b752975d-5048-30ba-bae8-54733d6f8e62.roa
File: b752975d-5048-30ba-bae8-54733d6f8e62.roa (raw, json)
Hash identifier: d3RHn6dLJBsYkX0wpjr0MiBss2mIhqa2x14z/FWztI0=
Subject key identifier: 67:1F:35:67:67:52:3C:17:0F:F0:BF:A1:B8:72:F3:85:82:B6:33:E1
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403AEF1B501552C99899666849
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b752975d-5048-30ba-bae8-54733d6f8e62.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.232.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:ef:1b:50:15:52:c9:98:99:66:68:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=73fcb6fd-ad56-48a1-af7e-06168f91216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:71:b6:23:2b:c1:f4:46:d5:16:89:f9:10:f9:
ce:5d:92:35:9a:99:26:4a:e3:27:37:21:28:83:ef:
79:20:2c:82:2b:d0:a4:a1:67:52:28:a0:91:f5:65:
cc:b8:a4:90:89:c3:51:db:2b:53:3e:b1:f4:80:40:
07:b9:bd:75:bc:82:84:88:08:4b:94:8e:f1:1b:58:
95:21:09:88:d3:9b:24:d3:09:6e:66:d9:4a:e7:29:
74:58:da:ab:3a:41:c5:7b:08:b1:5a:18:6e:00:a9:
e4:86:04:17:50:95:72:cd:0e:19:a4:98:ab:1d:79:
af:78:64:55:df:89:b4:20:19:55:9e:37:52:95:03:
1e:54:ef:98:4d:a0:c1:d8:f1:6d:4c:ed:dd:8c:41:
3a:d7:df:4b:a6:60:cd:51:79:b6:e5:c4:ae:44:73:
8e:b3:96:31:7a:e0:46:e7:c1:81:85:44:80:41:2c:
c2:73:7a:7e:75:76:7b:31:aa:0e:27:e7:51:a5:9a:
7b:b8:92:53:d1:8c:25:16:bf:7b:8e:9d:93:ad:a1:
cc:c7:00:ce:b1:07:ad:67:9c:93:8d:b0:41:1a:fc:
af:d1:a4:df:b8:d1:eb:ca:d6:1d:2d:78:f2:bb:48:
ad:e7:b7:26:95:18:3e:f8:9d:c6:06:b5:e4:a4:df:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1F:35:67:67:52:3C:17:0F:F0:BF:A1:B8:72:F3:85:82:B6:33:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b752975d-5048-30ba-bae8-54733d6f8e62.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.232.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:0e:a2:df:9c:71:ce:21:7f:b6:f6:5a:f5:a0:30:27:7d:d8:
f7:62:e0:6b:b4:6f:12:e6:e3:67:d6:8c:d7:56:12:b1:a0:60:
71:f3:18:a5:d2:27:06:e0:11:4b:f4:78:b7:26:6d:92:d5:ff:
bc:4e:a1:a0:c9:70:1b:f0:8e:24:52:cb:c2:65:bb:5e:7c:7e:
ac:ee:d7:f7:b0:bc:97:bc:e3:13:cc:ce:c3:e3:c2:5f:f3:30:
7b:23:51:d8:17:8a:83:e9:17:03:3c:51:bd:c8:71:4b:fb:b7:
c1:dd:6d:40:4f:e9:d9:a3:c0:f0:9e:ad:0a:72:a9:c5:bd:ad:
25:13:f9:1d:1d:32:45:71:d3:6e:a6:58:6c:b6:76:de:f2:8a:
16:bc:bc:16:ec:08:15:e2:07:de:85:32:71:e9:2b:f1:82:90:
8f:87:70:9b:09:46:49:a5:87:17:c1:5a:11:8b:d3:26:1c:c2:
36:d8:ba:c9:b0:03:d9:fc:b1:67:1f:74:c3:e0:c1:36:11:82:
ac:15:ea:97:77:8c:1c:86:0a:57:7e:57:e7:fd:49:ac:36:3e:
e6:b1:f1:76:58:c8:61:8f:e5:24:2a:3c:e7:e5:68:a2:19:0c:
32:ce:41:a1:99:6d:e1:43:b9:9c:21:d5:67:61:77:b1:60:db:
66:bd:1b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:16:08 2025 by rpki-client