Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbd830be-9564-3147-a9f0-5bf4da700b54.roa
File: dbd830be-9564-3147-a9f0-5bf4da700b54.roa (raw, json)
Hash identifier: n/AaQSOYVnTmRYIpKrTt6QEUntugnAakM7gcybmch00=
Subject key identifier: 90:56:33:D2:E9:3C:06:AA:39:F6:25:53:28:79:99:5C:8D:96:C0:9B
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584013F721EC5E51CAC2B8F3ED80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbd830be-9564-3147-a9f0-5bf4da700b54.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.124.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:f7:21:ec:5e:51:ca:c2:b8:f3:ed:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=82953c8b-63a7-4209-ba04-16377b4293ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ae:4f:a1:f3:43:98:73:28:e5:f8:4b:81:c3:
71:52:8f:50:0d:40:a4:fb:d7:31:ae:8f:83:c9:0e:
f5:a9:23:1c:80:fd:28:63:f9:c9:c6:2d:a4:24:53:
6b:3f:2b:ac:55:09:1d:95:05:b0:a6:6b:bd:1c:ff:
77:f0:30:c2:d9:12:c5:26:98:4e:df:5a:b4:9f:e8:
bf:fc:56:d7:87:b9:65:e8:80:94:61:4e:14:d1:ef:
8d:34:dc:74:28:2e:78:0e:e9:38:9f:44:25:a3:ba:
39:5e:9f:be:e4:fd:d3:c9:7a:ea:a2:8a:12:79:9e:
e9:1f:71:90:3a:93:a0:e6:ab:be:fc:74:36:f4:95:
e7:6d:ad:af:67:6c:c6:83:16:f8:9c:10:2d:ca:38:
fe:61:18:2d:82:c8:e0:18:d4:83:7d:95:90:a3:a0:
f3:b4:45:55:67:61:3e:a3:a1:8c:86:42:ca:66:b8:
40:b4:39:79:b2:3f:32:2b:c1:d8:d3:50:ae:3d:a8:
dc:a5:5e:60:fb:0e:5f:5e:c6:d5:45:e1:5c:71:a8:
49:83:42:ff:4d:85:ec:5a:e2:93:fb:e4:96:b9:7e:
b3:33:35:43:fb:d9:d5:4d:72:36:48:1a:69:38:d9:
b7:50:7c:04:3f:a1:fb:b6:37:c5:d6:27:b2:a3:5c:
5e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:56:33:D2:E9:3C:06:AA:39:F6:25:53:28:79:99:5C:8D:96:C0:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dbd830be-9564-3147-a9f0-5bf4da700b54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.124.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:82:78:76:51:a8:22:41:89:84:57:6d:14:a7:50:7d:6f:8f:
ae:85:0b:5a:3d:da:3d:2a:99:72:05:e1:97:d0:fa:bb:21:37:
48:bc:07:e5:e2:d9:73:80:35:78:d7:3c:a9:b6:de:8b:0a:38:
06:b6:69:a4:51:92:f3:0b:96:47:5d:7b:c0:50:52:06:e3:9c:
4d:2f:1b:a7:ee:3e:95:cb:da:a5:6e:3c:6c:19:25:c9:cd:24:
d3:9f:af:72:3a:4e:b7:a7:5b:6a:c6:09:a3:e8:7e:14:db:bc:
e3:8c:48:dd:89:2f:67:2e:26:7c:79:a3:1e:a8:70:ea:5a:ba:
5c:8f:22:47:b8:5d:3b:bb:db:d2:03:ee:0b:8b:f9:b9:f5:96:
68:be:f1:df:93:39:3f:ab:13:bc:80:7a:4b:02:7e:4d:a1:02:
91:35:59:3c:7b:f8:d4:0b:66:d6:f5:65:37:12:6b:33:87:eb:
0c:ed:ee:72:33:ef:00:95:d7:0c:c1:71:11:ad:21:a6:44:98:
c2:bb:c9:88:7c:ae:2c:25:30:a2:71:0c:16:06:bb:85:4e:e1:
ae:36:20:40:42:95:78:50:91:ea:3e:9a:0b:99:5c:64:9f:6d:
1c:62:05:8e:55:c2:be:c0:8e:3d:70:d1:d4:88:9f:ac:58:49:
08:25:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:03:26 2025 by rpki-client