Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf0934b2-d9ec-3ce1-bc15-5c3e0ec53b87.roa
File: cf0934b2-d9ec-3ce1-bc15-5c3e0ec53b87.roa (raw, json)
Hash identifier: nlcUAxaiM6IVbNBOLQ1MTQA/T41l+PEqhFBg4yzMFtA=
Subject key identifier: 65:75:59:15:62:DF:35:6E:ED:11:F4:79:D1:1C:1E:8E:A2:49:C4:A7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC16695B271AA
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf0934b2-d9ec-3ce1-bc15-5c3e0ec53b87.roa
Signing time: Sun 21 Oct 2018 08:16:31 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 38895
IP address blocks: 13.112.0.0/14 maxlen: 14
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b2:71:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=655199c0-a3cb-4ffe-a5e6-72cbad799e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6e:37:80:5e:4f:9f:53:68:49:f7:5b:b7:27:
5f:92:74:fc:19:96:f2:86:f2:c3:7f:95:4e:75:f0:
38:a3:f6:cd:b6:c2:82:b0:c9:d2:03:89:89:a7:db:
da:8d:0c:e5:ea:23:ce:9f:b2:0d:d1:62:84:5c:27:
f9:d9:8b:1c:51:ef:f4:7a:25:b6:53:cc:9f:10:29:
6e:44:2a:10:9f:cc:5a:54:ec:d3:4f:55:4c:6c:0d:
bc:cd:ac:23:92:b2:de:e4:6a:93:d5:fe:32:65:5d:
9b:ad:e0:61:da:5a:64:ab:78:90:75:cd:d3:fd:50:
f3:26:ff:88:3b:1a:2b:49:6e:fe:e5:f6:47:81:df:
e6:10:35:23:c3:bb:74:cd:f2:12:64:af:84:42:27:
6b:a5:68:17:e8:e7:25:bf:d1:2a:ec:eb:a4:b9:89:
19:7d:49:2f:45:19:d2:ff:51:7d:d9:b8:79:69:f8:
76:be:83:fa:1f:58:24:cd:8a:92:ba:21:35:31:18:
9c:f3:02:ee:10:a5:7a:f4:c6:ec:f9:b8:c3:6b:0c:
5e:df:da:dc:b3:ef:d8:5d:9c:6a:ca:14:2a:50:88:
0e:6b:f4:21:03:a5:a0:ea:4e:c4:6f:79:b0:90:ce:
1e:86:77:7d:bd:0e:93:b9:80:73:42:92:ea:a7:6a:
77:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:75:59:15:62:DF:35:6E:ED:11:F4:79:D1:1C:1E:8E:A2:49:C4:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/cf0934b2-d9ec-3ce1-bc15-5c3e0ec53b87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.112.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:f6:b8:b7:19:55:88:06:a2:20:49:8f:92:f8:cc:b5:3c:64:
6a:9b:28:57:22:92:cd:fe:ee:dd:d8:5b:71:de:b5:4f:5f:8f:
74:22:2e:4e:55:6b:d3:85:08:d9:2d:bf:23:a3:35:fd:46:3c:
98:44:a2:dc:30:53:b0:bb:c9:88:84:a9:da:b2:d5:8b:9e:c2:
95:95:a9:bf:2b:2a:1e:a6:07:20:d0:b9:9e:d4:96:b2:1a:b9:
82:a5:59:f8:28:0b:f8:b6:f7:05:9c:71:f2:94:af:3d:59:85:
b5:2f:90:d1:6f:c8:c5:a9:47:25:b4:dd:40:9d:65:20:17:71:
f7:43:bf:57:66:83:1b:ea:9d:dd:97:96:02:90:69:7a:d5:9e:
5e:b9:d1:43:4d:dd:6c:f7:cc:66:f3:45:3d:55:df:e9:fc:a3:
6f:32:2b:e6:39:8b:b0:02:f8:f2:21:33:de:b4:45:f8:96:78:
c0:30:3d:55:ee:f1:07:87:ff:33:81:32:15:d3:82:70:60:a0:
bc:85:e6:19:44:78:d8:1c:35:5a:d8:a2:de:c5:61:21:34:4d:
bd:fe:97:02:84:d7:8c:2a:12:db:6a:9e:cb:ba:a6:07:ad:0f:
92:8f:e5:6b:cf:d0:74:68:3e:4a:bf:53:0d:a9:63:3e:e2:26:
6a:9c:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:50:02 2025 by rpki-client