Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bcfc0733-d040-374c-934e-6ced7db77221.roa
File: bcfc0733-d040-374c-934e-6ced7db77221.roa (raw, json)
Hash identifier: hZnJ/p6Qpr1boJQ3nfQke/IAdDpNnYEXP2+9Q1OgnbE=
Subject key identifier: D7:F7:27:68:47:B8:63:35:B7:40:60:E9:A7:B3:AF:43:A5:E7:6D:B5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584013ACE0F42FCEE8DC0C0C7B40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bcfc0733-d040-374c-934e-6ced7db77221.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:ac:e0:f4:2f:ce:e8:dc:0c:0c:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=c7ae0aae-4e86-4be2-984b-d315b55286bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:45:16:dc:f1:a9:d5:b1:ed:0e:c3:b1:68:48:
9f:17:9d:17:83:d1:9b:50:4b:38:d2:39:01:6e:aa:
40:d9:4d:1d:d9:da:15:01:c1:be:46:f7:3f:25:78:
69:de:f5:f7:54:63:5e:a7:8f:63:65:24:45:c9:6d:
da:1c:66:06:4c:8c:b5:b6:c8:07:a7:55:da:3e:fa:
e3:1e:04:75:8e:dc:e1:f3:5f:ca:b7:dd:67:5c:1e:
85:c7:16:cd:8c:34:27:bc:60:00:35:e8:3c:49:32:
c5:43:86:e5:88:c9:15:09:79:27:cf:42:e3:f5:55:
65:61:37:fb:85:30:c8:1a:a4:96:2f:6b:1a:01:af:
bc:8f:d6:1a:b9:58:9c:d7:d1:70:cd:15:2b:09:8f:
91:5d:80:0e:ce:32:6f:96:b4:9c:9a:6f:d3:c8:dc:
27:00:68:3e:86:01:a4:a7:44:bb:c6:da:ab:bd:f0:
7e:27:27:bd:7e:14:39:d9:18:d3:fd:75:5d:43:6e:
64:ec:ad:69:52:14:96:81:22:29:0d:f6:f9:71:56:
7d:3a:4c:8a:3b:12:da:a8:80:16:2d:9b:88:7e:9d:
1c:6e:8e:17:7b:ab:92:a7:12:54:4a:89:7e:38:53:
d5:a4:a5:4e:7b:b5:ca:d4:f9:73:b5:ba:68:fa:a2:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:F7:27:68:47:B8:63:35:B7:40:60:E9:A7:B3:AF:43:A5:E7:6D:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bcfc0733-d040-374c-934e-6ced7db77221.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:65:31:85:a2:c0:d2:9c:27:4a:a4:c3:4e:16:bd:8c:42:21:
0f:1e:cb:f4:79:dc:63:35:ed:67:23:e7:f5:fb:a6:64:01:51:
62:d2:c3:07:4a:40:40:14:a4:0f:d6:25:0a:cf:0a:3c:85:46:
0b:30:b5:a7:6d:0a:d3:ef:4f:f0:1b:40:a3:20:a1:28:69:f4:
12:00:bd:c7:4f:63:7f:df:c6:28:59:42:5c:66:83:13:84:9a:
f0:5c:97:66:4c:0e:59:90:af:74:b0:d4:54:0c:07:8b:2e:5b:
8b:88:43:af:43:e0:cb:f3:aa:69:8f:f1:06:05:6d:4d:d4:68:
f1:9e:cb:81:42:8d:87:e4:bc:9f:ba:c5:d6:ab:64:44:61:14:
27:c8:a6:41:ac:f8:e1:cf:d8:95:52:ca:89:bd:a0:75:15:75:
03:5e:68:69:24:28:c8:96:bd:f4:ff:bc:5c:2a:7f:c9:99:43:
e4:9a:61:e1:eb:c1:c7:f6:54:18:9f:8f:89:93:cf:d3:fe:29:
f1:b6:b1:aa:95:f5:74:11:f2:6a:0d:6e:91:87:30:f0:51:2e:
0b:a0:f2:d0:28:68:c1:fd:fe:fb:e1:d3:bc:ef:11:de:2c:0f:
2c:d8:b4:ed:78:e8:3e:50:25:15:30:70:67:e4:03:b2:d0:18:
1d:83:1a:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:45:48 2025 by rpki-client