Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e05691e2-d977-3145-a298-82f3a8bf7963.roa
File: e05691e2-d977-3145-a298-82f3a8bf7963.roa (raw, json)
Hash identifier: vS/Xm4tfABKr+5j0zfRQX2WRrVhMwtL+jILTaN7HsQw=
Subject key identifier: E1:36:34:30:6B:36:17:48:1B:1F:DE:28:E7:14:50:46:10:1F:18:91
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F903387781CAC723BDFAD7A20
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e05691e2-d977-3145-a298-82f3a8bf7963.roa
Signing time: Thu 13 Oct 2022 12:00:00 +0000
ROA not before: Thu 13 Oct 2022 12:00:00 +0000
ROA not after: Fri 18 Nov 2022 05:00:00 +0000
asID: 16509
IP address blocks: 13.24.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:90:33:87:78:1c:ac:72:3b:df:ad:7a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 13 12:00:00 2022 GMT
Not After : Nov 18 05:00:00 2022 GMT
Subject: CN=b3cd3599-cc55-417d-9776-872b0a3f3a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:43:44:17:85:62:37:1b:1b:ce:da:03:f2:fb:
6f:87:66:9a:3a:a5:bf:49:c9:f7:28:4e:84:c4:6d:
88:6b:79:40:f0:d2:36:8e:4b:f9:8e:a9:80:9f:ce:
b7:f9:38:53:8a:cb:2b:12:cf:58:65:57:d6:46:6b:
b8:52:84:bc:fb:21:e3:99:4c:34:e0:11:c1:5b:38:
73:2d:71:34:e0:49:50:cc:c0:ce:03:8e:6b:7c:de:
a5:e1:93:da:02:45:26:c6:3d:cc:37:b2:9c:3b:0a:
9f:db:b9:b2:b1:46:45:34:00:40:d7:92:20:d8:85:
e5:a3:5f:5d:71:c0:02:73:c5:e8:89:60:69:84:cb:
1d:aa:a3:8c:33:55:4a:80:f3:b1:16:0e:a7:fe:3b:
76:f5:bb:de:ac:f3:a2:5a:21:8e:2d:97:29:ed:90:
c7:01:d5:08:18:d5:b9:a6:6f:4c:9c:08:05:fa:0e:
9e:ff:3c:cd:79:74:5c:93:f4:75:9d:87:d7:c6:08:
dd:cf:93:1a:16:71:3b:a6:b2:3b:23:c2:b4:4c:bc:
6b:fa:2e:97:02:d9:63:9a:fc:08:8d:b9:ae:70:0c:
2b:e7:d3:fc:37:58:49:bf:15:f6:96:a4:56:1e:24:
d2:b5:96:ba:b6:99:ca:55:cb:a8:a7:a2:3a:60:3c:
32:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:36:34:30:6B:36:17:48:1B:1F:DE:28:E7:14:50:46:10:1F:18:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e05691e2-d977-3145-a298-82f3a8bf7963.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.24.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:da:e2:c2:03:a5:5f:47:ae:a3:e0:0a:18:d0:d1:07:9a:f8:
60:d4:1c:80:09:cb:55:85:5a:72:23:e1:8e:de:24:a6:5d:d8:
9f:c5:60:e5:94:8b:f4:04:74:ec:e4:51:e1:76:63:09:02:25:
cd:b7:71:3d:95:ba:4f:d3:af:9c:9f:29:f3:29:39:b9:fc:0f:
ba:a1:ba:a6:d0:34:96:99:ee:a8:bd:9c:f7:bc:35:cc:79:b0:
3d:e9:80:35:dc:95:25:d4:f9:0a:82:c6:52:9d:e9:fc:12:69:
df:5e:1c:ab:b6:34:2f:ba:72:c3:b5:7f:3b:e2:5d:7d:6d:a8:
77:2e:a1:f6:11:31:b4:cf:e4:71:a5:b0:1d:ec:a8:f5:fc:29:
52:c1:08:75:58:10:52:11:46:24:0a:b6:32:1f:5e:62:52:77:
bd:cb:c9:df:52:e8:d3:17:e2:25:43:08:6b:1b:25:ab:ce:46:
51:06:90:39:76:c4:73:9a:e7:5c:df:22:90:69:97:f5:6e:6e:
c9:9b:d5:d9:9a:45:4f:ea:f4:37:9c:b8:5a:bc:d4:42:48:bb:
be:87:29:57:df:5d:f7:7a:a8:30:e0:15:d4:89:92:6a:81:e2:
19:36:4e:4e:23:8f:b0:a4:7e:68:eb:b4:95:20:fe:c1:ec:0f:
ac:4d:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:44:57 2025 by rpki-client