Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1e9c504-8f23-313a-8a12-0f975ce9a232.roa
File: f1e9c504-8f23-313a-8a12-0f975ce9a232.roa (raw, json)
Hash identifier: QNkssAet079SzSGVFnYejEhAk+Lb58Tap2pwXRew0HY=
Subject key identifier: 02:37:BC:67:D9:ED:21:E0:11:FC:8E:CC:B3:EA:CB:F4:3A:5A:C4:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403ABAD42DFE73A467DBF46D40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1e9c504-8f23-313a-8a12-0f975ce9a232.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.56.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:ba:d4:2d:fe:73:a4:67:db:f4:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=668afa7c-750f-4e45-bb4d-da36f76b449b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:91:72:00:c6:77:a9:43:7f:ff:9d:0a:e5:91:
cf:47:27:73:88:8b:fb:e9:40:75:78:ed:0d:7e:51:
61:f4:24:7a:c6:08:6a:38:e2:2e:f1:fc:ca:37:fc:
b3:f3:a0:43:98:bd:c0:05:ce:36:f5:6c:dc:ed:77:
8b:0b:a9:b9:22:e5:c2:72:79:22:e8:21:a5:ce:1b:
e1:5f:a1:68:b5:9c:c1:e8:c3:80:cd:ef:02:78:94:
6b:75:97:8a:01:47:02:76:1b:71:3c:c1:6d:bc:e1:
13:d8:7c:ba:dc:06:ef:40:c9:f3:45:48:99:56:d2:
09:42:87:23:45:24:f5:88:c5:d4:d7:96:1f:af:94:
3d:02:f2:ee:5a:fe:7e:15:30:a9:84:7f:f0:2e:bb:
26:7d:63:27:0c:4e:77:91:07:92:ad:89:10:86:b3:
3d:fa:66:6f:54:3f:c4:47:27:b1:99:7a:95:07:98:
5a:38:6d:34:5c:e1:48:13:aa:f7:bd:82:20:f4:2e:
d8:35:f3:0f:77:8f:f7:63:ec:7a:32:05:8f:76:82:
ea:4d:d9:b7:b3:42:e1:7a:04:d5:8f:19:60:de:52:
d3:d0:a9:fa:c3:98:8f:3c:71:51:58:4d:4a:ad:b1:
2c:77:09:81:8e:24:80:e1:87:a6:52:5a:cd:db:aa:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:37:BC:67:D9:ED:21:E0:11:FC:8E:CC:B3:EA:CB:F4:3A:5A:C4:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f1e9c504-8f23-313a-8a12-0f975ce9a232.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.56.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:87:28:df:06:bf:44:a8:b2:92:64:58:a4:c9:22:6a:c8:e4:
19:c1:cb:fb:cb:b7:69:9f:09:23:83:7e:10:49:62:62:d0:f2:
53:76:76:43:0e:f1:b6:e3:f8:cc:15:1c:3a:aa:58:5a:fe:c0:
5e:33:54:e5:3c:24:04:1b:28:a5:f7:ef:76:b0:a4:99:80:14:
0c:8a:82:cd:03:b0:ea:80:31:32:7f:24:41:25:61:ba:b8:48:
8c:4d:c2:ce:83:2e:3e:e9:ea:ec:aa:c3:ba:51:be:74:cb:39:
36:93:ec:64:d3:17:73:1c:e9:15:3e:3c:b0:ec:d8:f6:4e:a3:
c0:a4:62:99:e7:01:af:db:a2:b3:38:fd:d4:33:e6:cb:53:1b:
c7:ee:27:7e:79:3b:56:37:90:75:a8:18:af:a2:20:14:9f:8c:
b2:80:45:8e:99:54:d3:6b:11:ee:57:62:7e:15:30:66:24:53:
f2:9f:15:b8:10:88:28:8c:b8:a2:a8:64:b3:ee:3f:9d:03:77:
07:20:0f:c7:97:90:35:38:99:d4:71:85:63:aa:2e:5d:39:d3:
37:27:e7:35:58:1f:7a:5c:86:59:ca:fe:9d:24:da:12:34:84:
38:56:af:15:a7:da:55:0c:a2:83:84:39:bb:64:ba:7e:bb:04:
67:aa:61:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:40:17 2025 by rpki-client