Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4608d75-e3a9-3beb-89da-2e107e06405b.roa
File: d4608d75-e3a9-3beb-89da-2e107e06405b.roa (raw, json)
Hash identifier: R95mAOZpmPgZZPuG6sB3CCEl2biQi5kOLCLFLpCTakY=
Subject key identifier: 4A:3A:05:77:05:28:07:27:17:28:39:E5:67:FB:A0:C0:2B:27:53:6C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583ECCDDFC344C112F9A7634F000
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4608d75-e3a9-3beb-89da-2e107e06405b.roa
Signing time: Thu 04 Aug 2022 12:00:00 +0000
ROA not before: Thu 04 Aug 2022 12:00:00 +0000
ROA not after: Fri 09 Sep 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:cc:dd:fc:34:4c:11:2f:9a:76:34:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 4 12:00:00 2022 GMT
Not After : Sep 9 04:00:00 2022 GMT
Subject: CN=19546eb2-1f78-40c8-adba-0ced3db7764d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:5d:04:79:19:89:b8:01:a1:e4:af:dc:dd:
55:1d:6a:72:d2:97:ac:ce:aa:1b:fd:a5:43:e7:d4:
8e:2b:fb:e9:e4:b1:d2:e0:3d:a4:6c:b5:30:2c:ea:
7e:bb:31:33:eb:06:49:f0:19:12:46:8c:d9:e6:61:
cf:fa:83:62:b5:5a:f2:bf:86:9e:df:ae:cc:fc:ec:
fe:b8:88:0d:ca:a4:11:c2:32:59:87:db:7b:bc:b2:
41:6e:9e:c1:c5:d9:71:bb:06:4d:60:7c:13:02:83:
72:99:ed:17:ee:bc:e4:58:e0:32:6d:b5:15:bf:9c:
cc:49:0e:de:f7:7b:55:2c:3c:c5:7b:8f:bb:ad:1a:
fc:68:d3:94:34:4c:91:36:b3:3a:b9:46:dd:c4:41:
ca:2e:ad:6e:2b:82:c2:09:ac:0b:5c:99:74:55:a4:
bf:45:b4:de:f8:cf:40:11:91:79:5d:12:8b:f2:3b:
1b:2a:e8:fe:51:13:7d:23:59:d5:96:6c:ab:4e:a0:
77:81:60:de:a3:09:fb:8e:e7:84:1b:85:43:0f:ba:
a7:e5:a6:5a:ab:94:e5:b0:c7:33:dd:18:26:4b:b7:
08:1c:83:b1:ed:36:05:b6:73:b9:3c:67:47:60:b4:
ea:af:6b:2e:bc:8f:d1:97:2e:6f:44:a7:b8:b0:30:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3A:05:77:05:28:07:27:17:28:39:E5:67:FB:A0:C0:2B:27:53:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d4608d75-e3a9-3beb-89da-2e107e06405b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:3c:aa:69:0b:f9:8d:25:3a:c1:b3:f9:ca:4f:fa:df:39:6e:
e5:6e:28:b7:fc:fe:95:62:a1:d2:d1:c2:0d:c8:95:a1:d9:d3:
92:24:dc:27:29:85:1b:c1:ea:cb:b2:0d:48:08:8c:3f:23:0e:
19:db:0e:ac:f1:7e:2f:4e:a7:ba:bc:b4:7d:74:28:54:20:a0:
fd:f1:1e:36:3b:bc:dd:ac:04:a6:86:2d:58:7d:f4:02:68:ab:
cb:42:bd:c8:f4:b7:48:63:ca:1a:b3:20:83:b5:92:25:68:79:
a4:cb:7a:4c:93:c4:8f:91:3e:d8:a1:75:78:d8:08:b0:96:26:
f8:90:e5:2f:a2:01:66:9a:e9:2d:d9:93:64:97:75:d0:59:24:
8e:0b:36:f7:4c:fb:15:35:b3:67:87:c5:8f:07:3a:88:4b:e9:
9d:a1:5b:de:f4:4f:05:1a:04:8b:2d:96:18:2b:cb:f7:8a:cd:
50:84:72:7b:11:7f:76:b4:9f:3f:aa:ba:7f:85:a7:18:a0:44:
7d:f9:6f:6c:a0:1a:21:2b:bf:4f:69:13:1e:46:73:06:c5:b9:
e3:bc:72:84:61:78:e1:98:cc:a8:17:3c:51:ee:95:fb:2b:fd:
ee:dd:b9:8d:0c:c9:45:f7:6c:3a:ba:47:86:76:d0:51:95:6c:
b6:5d:2a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:04:07 2025 by rpki-client