Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9ee8103-0f39-3533-a678-be141addba87.roa
File: d9ee8103-0f39-3533-a678-be141addba87.roa (raw, json)
Hash identifier: Ev7uYMUBBSo2cu6ZhZ3Lh8IdwuxA8d6a2BUQXFEse5I=
Subject key identifier: C0:5A:D0:24:64:5B:68:5F:FF:AF:00:F4:B1:C3:86:37:58:DB:32:CB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403ABACD56FFE08F3661C80D80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9ee8103-0f39-3533-a678-be141addba87.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.56.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:ba:cd:56:ff:e0:8f:36:61:c8:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=34764317-3653-4322-a060-fa1e0e2ebe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:cf:5f:ad:5f:43:06:f8:f4:c3:6f:86:44:
5b:42:ce:d3:16:b0:57:eb:4d:af:85:28:6e:51:4e:
c6:fb:ae:b9:ea:5b:fb:60:d9:8a:a4:0e:6f:21:8a:
2c:2b:d0:27:3f:42:07:73:83:90:b7:49:22:ad:40:
db:44:4e:c4:50:f8:ac:42:be:c6:88:3e:d1:3b:1b:
f0:3a:ad:59:62:40:6a:9a:93:f8:b4:db:11:b1:c1:
1e:9b:06:22:eb:b4:c0:d2:fd:f2:32:f9:fe:c4:47:
a7:7a:c0:f4:97:aa:00:f0:04:23:bd:9c:1e:e3:fb:
cb:b4:b0:c2:2c:61:aa:5d:45:73:50:46:e3:18:c0:
6e:a3:f7:c4:a4:52:ef:c2:cf:d6:f3:46:a8:d3:a8:
4f:5d:cb:77:eb:32:49:61:79:b2:64:46:3f:5e:81:
6d:76:c5:f6:86:32:8b:b7:02:b2:43:2f:cd:78:c1:
b3:c6:92:8c:a2:bf:6e:ca:89:ca:21:65:2f:09:28:
15:1e:54:1b:09:b1:91:6f:e6:b0:ee:02:95:f6:f0:
65:59:ae:f7:6b:46:fe:f2:32:59:ad:4e:82:f0:e5:
8c:35:c5:b2:d3:d4:c1:7b:b1:db:d6:43:cc:36:11:
7a:3e:13:b4:b7:cb:f5:10:cf:42:ce:53:20:a9:55:
91:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:5A:D0:24:64:5B:68:5F:FF:AF:00:F4:B1:C3:86:37:58:DB:32:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d9ee8103-0f39-3533-a678-be141addba87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.56.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:a7:c2:98:2e:75:fa:52:68:69:37:80:22:ad:0c:e3:23:0e:
7c:8b:1c:a1:27:3d:fc:ee:80:bd:bb:2c:f2:be:e7:10:a3:8e:
ce:bc:fb:dc:53:32:44:66:df:f0:cf:58:8f:52:1d:0a:cb:ae:
e2:8d:45:40:6a:0f:79:9e:56:82:10:93:56:9a:8e:77:73:8c:
39:94:12:73:4c:45:b1:15:b8:ff:46:9d:b2:f6:a5:35:bb:f9:
9c:67:e2:6e:3b:96:42:85:d8:ce:2d:6c:bf:f9:a1:cb:78:42:
bf:bb:a8:f6:18:cf:30:c1:5d:fe:86:15:df:45:e8:fa:f4:37:
42:2f:93:c8:2e:d9:a8:c8:d5:32:fe:3d:6c:40:ea:93:1b:f4:
89:24:64:df:07:3d:67:50:36:a8:39:c7:d8:a7:2b:64:bf:7a:
ae:ed:1f:ac:1f:cd:4e:1f:17:38:18:f5:7b:44:b7:0b:55:c7:
5c:d2:47:2b:ad:f9:c4:11:d0:c2:79:a9:b6:11:0e:67:8b:c9:
0e:f5:2d:c6:7b:bb:0b:ff:f3:63:29:5e:90:71:95:c1:d2:8f:
6a:3a:4a:87:31:95:c5:e7:75:fa:7e:76:ae:f3:36:09:e6:47:
96:5c:ec:c9:00:79:d3:92:2e:27:11:dd:f9:96:cb:45:18:59:
d3:4c:f1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:40:05 2025 by rpki-client