Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc7e34d0-6bef-3155-867f-6c931ebeb4b8.roa
File: bc7e34d0-6bef-3155-867f-6c931ebeb4b8.roa (raw, json)
Hash identifier: w6PmY+JhFGAI0r2jl3wz2X47o+xFWn1Z8rTPAcgpooc=
Subject key identifier: 76:67:AF:8D:4C:06:21:74:99:20:F0:07:2A:98:F8:24:76:86:B2:04
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D5393AF7DCC96EAE62F703780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc7e34d0-6bef-3155-867f-6c931ebeb4b8.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:53:93:af:7d:cc:96:ea:e6:2f:70:37:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=68303857-5a47-400e-9204-339b316b497b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:45:b0:9b:61:7c:c4:2b:4d:9f:15:2e:8e:
e6:de:23:8a:25:7c:14:af:7a:7a:f5:af:b7:e1:4b:
27:8d:fd:01:0d:7d:7f:ce:e8:c3:2a:e9:75:fc:17:
2f:0d:b6:f6:d1:b0:1b:df:01:54:31:7d:af:a9:c9:
40:74:ef:c9:bc:e9:ff:2f:1c:07:25:24:b8:52:f7:
5f:24:fe:14:7b:be:15:18:24:a8:47:4b:5c:43:ef:
ca:53:2b:ce:7c:33:79:e4:6b:20:1a:39:02:64:45:
51:03:22:bf:07:bf:47:06:d3:b2:c9:79:03:80:0c:
df:29:03:0a:c8:7a:54:76:24:45:8c:46:74:b7:db:
e4:b8:a6:eb:9c:a1:c4:b3:37:66:9d:98:63:97:42:
3c:ad:83:fe:97:07:8f:3c:19:1d:b0:f8:3b:88:bb:
14:f1:32:1f:f2:e8:16:a3:2d:a0:c7:02:4d:9c:2a:
2b:79:13:b1:78:e6:3b:fc:53:22:6a:d1:76:d0:4a:
a1:25:5e:b2:70:79:04:e1:71:43:1f:86:ad:e0:81:
00:6b:aa:00:63:22:4f:a8:45:73:ba:ea:c9:f3:8e:
d4:01:bc:d5:b1:60:fe:19:e8:fe:f0:6e:ff:27:fa:
82:ee:ac:c7:51:e1:26:b2:b1:95:9e:95:49:1a:89:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:67:AF:8D:4C:06:21:74:99:20:F0:07:2A:98:F8:24:76:86:B2:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bc7e34d0-6bef-3155-867f-6c931ebeb4b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:85:f6:36:14:0a:08:bf:f3:4e:5d:6c:1b:2c:d3:f9:a1:4e:
f3:4e:af:20:26:31:71:93:4a:be:48:a2:ac:5e:a0:be:15:59:
3d:ff:cb:d7:11:7c:00:28:2a:0d:e6:65:03:3b:52:a4:ec:8f:
ef:61:c4:7a:d5:71:a7:b6:70:df:2a:a9:56:94:64:4d:3d:bb:
4e:b6:88:ce:87:6c:23:62:a1:d2:aa:c2:be:7c:1a:b8:ac:57:
cb:f2:ed:69:76:81:b4:eb:d2:b1:60:be:7b:06:e0:4d:c3:17:
b5:a9:09:cf:9c:72:2e:a9:0a:f0:f0:52:00:39:15:55:42:ba:
f2:8a:79:88:5e:4e:63:9f:36:5f:45:3f:ac:c6:0d:ef:ad:f2:
4b:65:be:7e:a0:d4:5f:49:3a:d5:d1:8b:2a:4b:24:c1:fa:92:
e1:60:85:eb:b0:47:cc:61:51:0f:c3:59:ea:4b:79:be:8c:8c:
bc:a5:57:a9:e4:d2:5e:35:e4:82:a7:2e:f2:1d:e5:75:a6:b3:
6b:d3:14:3d:0e:fa:7a:84:77:90:cb:bf:31:fb:22:ef:dc:05:
4d:f6:e4:5d:a6:81:93:f6:d9:4a:52:49:d2:c0:83:0e:50:d6:
98:c4:c8:f7:43:20:1c:42:8d:9b:75:00:d5:46:70:65:4c:3b:
ce:1d:fb:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:36:56 2025 by rpki-client