Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fae26a61-1d29-334e-895b-f7c47e4ebb38.roa
File: fae26a61-1d29-334e-895b-f7c47e4ebb38.roa (raw, json)
Hash identifier: mZUmaSveBk6ggJL6sfmfCIcMDXUqlhnlgsig5iJqI74=
Subject key identifier: 2A:C1:11:A5:C2:FD:0D:FC:BD:3F:2E:BA:42:63:56:36:52:9A:61:15
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B02105A77EE1DE5D9A330240
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fae26a61-1d29-334e-895b-f7c47e4ebb38.roa
Signing time: Tue 24 Jan 2023 12:00:00 +0000
ROA not before: Tue 24 Jan 2023 12:00:00 +0000
ROA not after: Wed 01 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.32.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b0:21:05:a7:7e:e1:de:5d:9a:33:02:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 24 12:00:00 2023 GMT
Not After : Mar 1 05:00:00 2023 GMT
Subject: CN=0cde4ba5-f254-45e6-a20b-93df284cc3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:4c:2e:73:cf:56:34:b7:01:38:f0:bd:1a:
70:b0:4f:50:21:fb:1a:3d:31:77:0a:66:e4:05:b8:
78:19:77:fc:b8:76:fa:22:e9:62:61:70:f6:71:bb:
73:9a:ee:df:43:19:e6:45:e5:f3:9e:6e:9f:48:26:
8f:7f:5f:9e:31:22:5a:18:f1:a5:e6:4f:6d:7f:bc:
b6:6d:2c:f6:07:30:1a:f7:e9:b0:bc:0e:5e:ba:40:
65:21:2d:c0:7e:12:9b:8c:39:91:bb:82:82:94:44:
cd:08:fe:d4:b0:83:eb:7c:6d:bc:77:1f:16:5d:9b:
45:ff:6a:b8:f6:d5:e8:ce:df:7d:fd:4f:1a:3d:d8:
32:9a:09:82:7a:10:b8:c8:b1:6c:8a:4e:0b:42:61:
18:4e:d9:4a:5f:0d:1c:4d:2a:12:4a:cc:a4:9d:1b:
09:0e:3a:20:e5:cc:26:cf:e0:e4:b6:1c:e5:01:64:
a5:74:8e:47:d7:df:e1:8e:33:0d:46:c2:ae:ba:46:
61:c3:41:39:dc:2b:d7:b7:13:eb:8f:12:69:ce:94:
28:48:86:3e:eb:16:ea:8c:15:03:01:c4:1f:40:4f:
3c:89:e6:ae:13:86:07:87:19:64:62:8f:76:44:05:
49:40:39:e3:f6:87:ad:2d:c4:f6:9e:0c:b1:74:80:
ea:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C1:11:A5:C2:FD:0D:FC:BD:3F:2E:BA:42:63:56:36:52:9A:61:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/fae26a61-1d29-334e-895b-f7c47e4ebb38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.32.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:42:ff:70:5f:6d:01:26:a5:55:65:94:f0:2b:60:ee:d2:dc:
d4:5a:7c:56:46:63:3d:2f:0e:a7:a8:89:6c:5f:bc:25:10:d8:
48:0c:b9:b4:a7:75:dc:2f:01:dd:2e:5f:15:52:1b:c8:66:17:
22:f1:ed:f5:13:b6:37:23:8d:3b:7b:88:4c:5c:52:db:80:77:
76:87:3d:fb:32:f2:c7:a5:4c:0f:b2:c8:58:6d:d4:98:ff:52:
6e:e0:44:48:09:9c:ef:2f:93:09:79:15:59:2e:5b:eb:f0:91:
1b:27:65:09:d4:38:38:de:83:a4:b2:f0:03:c4:b9:b1:13:19:
3a:db:ec:9e:78:d6:e3:50:e4:ae:fd:60:b0:23:28:6b:d6:b0:
5d:df:e8:97:e0:bf:d7:06:27:bd:5e:1e:53:c0:95:aa:7d:b0:
ef:d4:6d:40:c5:fb:e5:26:e4:3e:69:9f:bc:8b:36:43:c7:5c:
de:9d:ee:42:28:5b:af:09:ba:02:18:77:58:c8:e8:28:20:2a:
28:46:5d:b2:e7:18:02:52:7b:f3:d4:77:d1:ce:52:95:16:0c:
3c:d4:64:9f:0c:64:9e:e5:d8:ff:a0:a5:8b:13:57:df:1c:d2:
4b:cd:a6:a5:54:e8:16:d6:de:df:5a:4c:63:98:41:45:f8:53:
94:2f:01:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:43:34 2025 by rpki-client