Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd78a6ba-ab6f-36c4-b38a-7bb272988618.roa
File: bd78a6ba-ab6f-36c4-b38a-7bb272988618.roa (raw, json)
Hash identifier: NgsqMLbeLdNrAWXUMdnW0ojB7PnLNZAW5bRRBGvYDFQ=
Subject key identifier: 7D:CC:83:AD:0D:71:34:F1:1E:C3:F8:B7:8A:BF:F4:13:C3:58:CB:49
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C900A084B3A59077AE4141580
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd78a6ba-ab6f-36c4-b38a-7bb272988618.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 16509
IP address blocks: 13.200.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:90:0a:08:4b:3a:59:07:7a:e4:14:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=10ee43c4-86e7-470e-962e-5876c686642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a8:a1:65:35:74:8e:c6:f1:6c:18:66:57:d1:
8d:27:18:ac:53:d8:59:87:7c:43:c2:18:09:63:33:
c8:43:71:73:75:d3:e8:72:40:f8:26:a3:ae:3c:cc:
84:06:cc:a5:36:a7:bc:81:aa:6f:5b:7a:27:cf:7f:
25:f4:75:03:2a:42:db:54:61:0b:7e:8e:d7:e9:3a:
13:75:d0:12:16:14:eb:c3:79:b3:33:c4:c6:00:29:
83:58:87:61:c8:b7:02:3f:2d:59:67:38:5c:0f:94:
fc:7d:e6:92:fe:f0:47:3d:12:64:9d:57:45:3b:0b:
f0:f7:bc:a6:fa:63:bc:cf:c3:b7:df:70:9b:a1:b8:
2f:d9:b7:00:d8:ce:ba:f3:3e:78:a2:ff:0a:13:c0:
bf:1a:e9:5d:75:19:2c:67:72:02:cc:4b:33:9f:c6:
c2:c0:d2:1b:d3:98:7f:61:cd:4a:ba:86:ac:ff:3a:
9e:7e:70:2f:60:62:08:af:c5:a0:03:e8:6d:70:9d:
7a:6f:df:f3:3a:80:cc:2c:6e:01:73:2c:b8:a4:8f:
ac:3f:a8:ca:8c:bd:75:24:22:28:c9:05:1c:58:03:
57:3f:23:f3:14:5f:01:a4:bd:a6:9c:cc:ee:32:0c:
3c:bb:6c:d8:d1:c0:f2:10:61:9f:3d:1a:14:4e:04:
86:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CC:83:AD:0D:71:34:F1:1E:C3:F8:B7:8A:BF:F4:13:C3:58:CB:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bd78a6ba-ab6f-36c4-b38a-7bb272988618.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.200.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:38:ca:d3:b9:f0:b9:98:ca:69:88:37:d5:20:a8:07:32:2e:
28:21:45:76:c6:05:a0:8b:2a:84:c6:d6:9b:07:b0:a2:dd:b9:
1c:de:4c:90:1c:a2:df:a0:cf:f8:2f:8e:8e:f8:19:98:b5:bf:
cb:96:b0:d6:ba:e2:64:f2:af:30:d0:15:20:7e:53:06:ec:6c:
b6:25:eb:7b:f2:77:a3:dd:07:2e:83:d7:c5:6d:84:24:f1:7b:
d4:b1:15:55:14:dd:c8:9f:31:90:7d:14:45:d1:ed:8c:db:e0:
59:b9:13:8c:3b:54:58:2c:7f:5b:39:e8:95:76:9b:aa:5a:1f:
cf:d2:e0:74:50:20:05:6d:9e:13:f9:91:86:80:08:db:0a:d0:
9a:88:27:ca:5c:19:08:25:3d:96:ae:c0:72:d5:49:e5:de:4c:
be:44:74:fd:91:d3:29:6e:1d:9f:8b:39:a9:21:bf:a7:d2:d5:
78:68:39:f9:62:52:69:1e:bc:87:38:f3:bf:9b:ca:4a:5a:67:
21:8d:a4:f1:4f:7f:54:15:a2:99:98:7d:f8:23:0d:06:f7:48:
63:29:8a:83:62:46:2c:dc:89:93:01:27:4a:2f:25:ec:19:77:
c0:2f:87:75:fe:11:38:b2:39:b1:40:58:2d:06:53:39:70:d9:
cb:10:ce:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:21:45 2025 by rpki-client