Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df1bc872-7589-33ab-b839-ed317c55fb6c.roa
File: df1bc872-7589-33ab-b839-ed317c55fb6c.roa (raw, json)
Hash identifier: AVeD87xeDCXyOKykaN4b4QvPE2lrtQ5wWDa4Fo9mUkQ=
Subject key identifier: FB:B5:1A:80:5E:20:97:85:2B:CD:15:83:87:C4:45:9F:98:18:77:EC
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9E6BF676319C7C1EBA57B380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df1bc872-7589-33ab-b839-ed317c55fb6c.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:6b:f6:76:31:9c:7c:1e:ba:57:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=008676b4-b652-4d35-93ae-8a1aaf27c25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3f:ac:5e:ba:ab:90:81:16:d5:9f:0e:02:89:
08:87:bb:20:6a:06:87:50:80:f1:da:7e:e1:3e:fa:
28:a1:d9:80:37:e7:2f:f6:5f:f5:f0:6e:63:7b:a7:
c9:72:c3:06:9a:d3:1d:8e:cd:b5:29:94:76:f4:bf:
6f:28:dd:2f:35:fb:63:76:66:b4:d0:dc:ae:d2:70:
fb:3e:62:59:c8:50:89:38:89:a0:71:b2:33:bc:fc:
6e:a7:19:aa:b0:c7:0f:52:60:b5:27:95:91:83:2a:
34:68:81:5a:87:9e:5d:48:0e:af:2a:a8:27:e7:05:
08:6f:c2:27:b5:29:85:bf:21:31:02:bd:ce:04:a3:
12:24:83:79:e1:aa:29:72:68:a6:ed:84:90:06:85:
a3:56:61:fc:80:4b:0f:17:d9:ff:0b:71:72:79:5e:
ea:65:17:88:2d:09:bf:61:b6:85:17:93:8f:5b:52:
d9:cb:d0:8a:85:bb:32:04:d4:00:34:f0:15:c6:01:
53:cb:2f:54:32:e8:0b:3c:bd:c5:dc:a4:ea:fd:a8:
32:91:ca:a8:8a:9a:69:0d:a1:22:8f:93:e2:cf:4c:
bc:ec:84:6e:51:bd:6b:56:16:61:a4:7a:ad:ca:90:
5b:58:46:c8:ea:62:c3:4d:0f:ce:02:79:ab:6c:68:
0e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B5:1A:80:5E:20:97:85:2B:CD:15:83:87:C4:45:9F:98:18:77:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/df1bc872-7589-33ab-b839-ed317c55fb6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:17:d0:e6:11:2c:cf:43:c3:23:ef:a7:3e:89:65:35:ae:b2:
55:d4:7e:b7:47:cb:cc:58:77:c3:4b:28:c8:3b:3a:7f:27:a4:
e2:90:d3:c1:46:97:f6:a4:c4:dd:df:08:da:18:39:2a:c5:fc:
7f:6e:2d:87:e6:ac:52:9b:37:4b:c8:5f:05:1e:81:dd:1c:a3:
24:4d:f9:45:31:cd:4f:e0:e0:da:74:5e:30:e3:86:fc:c4:45:
a4:f5:94:2c:c4:25:ec:99:29:4d:c6:64:a5:30:5b:59:ea:3f:
ca:fe:58:4e:db:77:52:0b:47:fd:9d:de:bf:b8:a2:c9:10:61:
a5:6c:cb:94:bb:01:3d:7e:57:3c:e9:1c:ed:b4:e8:7c:db:2c:
03:80:7e:51:0e:6c:ca:bf:9d:de:ee:0f:9f:f7:71:b5:18:e9:
9a:66:60:4a:52:3a:e5:7d:12:fc:c2:24:68:25:67:95:6d:3c:
a5:56:da:4c:17:11:ed:61:c9:ef:30:50:db:ac:b0:ac:b8:62:
70:1c:8a:2b:3f:0e:13:a4:7d:92:dc:fb:e0:a0:09:7a:24:cc:
9a:cc:c5:4a:6f:a7:36:56:6d:6f:de:2e:37:0b:18:34:d0:57:
a7:26:5e:6c:5c:1e:92:05:72:70:8d:6f:6d:f0:42:9a:08:10:
05:65:9c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:25:19 2025 by rpki-client