Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1e4d564-1940-345b-8c07-f5ee0013e96f.roa
File: f1e4d564-1940-345b-8c07-f5ee0013e96f.roa (raw, json)
Hash identifier: 9r0d0F9I2MGNo3ugk/8ITnb629GcupVGLHs1zUizkf8=
Subject key identifier: 88:1F:D6:35:62:48:68:E9:79:12:DC:48:9A:F8:E8:0D:A1:3B:26:83
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DC93C60ED2AC50827554EC380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1e4d564-1940-345b-8c07-f5ee0013e96f.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Wed 08 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.52.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c9:3c:60:ed:2a:c5:08:27:55:4e:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : Jun 8 04:00:00 2022 GMT
Subject: CN=974c6916-8bc1-46f7-86e3-00c304f32e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:73:bf:73:9d:00:ee:ea:a9:cd:f1:fb:08:
06:4d:f7:cb:2e:e6:e8:10:c3:5b:26:3e:2f:c3:5e:
2e:1b:c1:cc:d5:36:77:1a:1d:fc:3c:e9:ff:7c:0c:
89:a9:76:32:f5:1f:03:7b:f3:d9:76:33:fa:b5:b5:
62:e6:bb:3d:6e:2a:ac:38:90:09:b0:2b:b6:ab:49:
6f:63:f5:96:c3:a7:de:94:6c:c0:fb:21:ea:0c:2e:
e8:92:34:03:c4:30:a2:ab:18:19:b3:6a:a4:b7:13:
cd:11:07:92:77:8f:ad:87:e1:ed:11:b2:46:78:e8:
99:7f:68:78:54:dd:01:33:16:ac:aa:65:e6:11:31:
19:7c:b1:68:33:d8:ff:05:51:e8:56:76:68:80:d9:
3f:fb:6e:3d:e1:4e:8c:b0:29:86:fa:d6:99:30:e5:
c4:4e:d7:df:04:b9:7b:47:10:40:f5:7f:a9:86:9b:
6d:4e:40:a2:01:f6:3d:bd:c0:2f:a7:88:14:f8:6c:
02:a3:fb:5d:85:e2:e7:7c:05:68:75:c9:17:88:6c:
6b:31:88:7e:d7:94:ae:87:b0:bb:bf:9f:7e:ca:1d:
05:cc:c7:fa:46:82:17:62:1e:cf:5f:5a:65:0d:c9:
70:ee:03:62:c2:0e:ef:52:f7:11:2e:f5:cf:6c:5c:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1F:D6:35:62:48:68:E9:79:12:DC:48:9A:F8:E8:0D:A1:3B:26:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1e4d564-1940-345b-8c07-f5ee0013e96f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.52.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:00:69:3e:b6:b8:a2:d0:dd:53:aa:f1:b2:99:5f:8e:e6:7d:
a6:30:14:41:d2:27:97:b8:e9:c3:76:fa:2e:4d:10:32:5b:78:
b3:17:15:bd:40:d1:4e:74:22:a0:45:a4:0e:69:ce:1f:15:ab:
89:7b:1d:88:45:bc:d6:6d:1e:4c:a0:53:3d:35:e8:4f:4b:4c:
de:77:6e:59:cd:14:d2:2b:41:9b:51:df:8b:96:86:60:b8:e8:
d0:19:89:dd:92:b4:24:bd:86:0e:c6:9e:51:7e:33:64:ff:f6:
41:30:c6:c2:8d:c8:d3:e7:84:53:4d:99:25:32:38:99:91:74:
44:ef:9b:af:b2:d3:e6:6c:39:04:46:33:71:8e:0d:1a:fc:2c:
2d:98:5c:88:9a:52:b0:ec:1c:d3:1f:92:a6:8c:9e:75:37:46:
dc:db:ff:26:ce:87:d9:1b:98:22:1b:98:e3:b2:d7:ec:c5:0a:
03:5c:93:69:c5:91:5e:78:cf:5d:7d:ba:57:f9:1e:a2:88:56:
f8:0b:24:07:e2:fe:ba:ce:86:93:db:55:e3:1b:23:09:a4:df:
60:48:cd:3e:48:e1:9e:7d:0b:32:56:7c:15:d7:c3:b1:ad:dc:
e9:ba:ff:72:3e:a6:5c:c8:6b:76:40:08:e3:02:a1:a2:88:5c:
96:95:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:12:37 2025 by rpki-client