Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02efaca6-0f0b-3210-b808-d7ccb8d893ff.roa
File: 02efaca6-0f0b-3210-b808-d7ccb8d893ff.roa (raw, json)
Hash identifier: MLWfntA+BjIEzZKbnl4yJkNYAB0jAq0jpebPAmrWYi8=
Subject key identifier: 9D:7F:AC:C4:42:52:5D:2F:7E:72:38:8F:B8:92:3E:97:FC:EB:BC:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E65752779B9E0DB90CAAD7E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02efaca6-0f0b-3210-b808-d7ccb8d893ff.roa
Signing time: Tue 28 Jun 2022 12:00:00 +0000
ROA not before: Tue 28 Jun 2022 12:00:00 +0000
ROA not after: Wed 03 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:65:75:27:79:b9:e0:db:90:ca:ad:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jun 28 12:00:00 2022 GMT
Not After : Aug 3 04:00:00 2022 GMT
Subject: CN=f1442d06-d46d-482f-a96b-e150579f2d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:54:94:f5:13:1b:75:ae:d0:47:e7:85:98:77:
2c:e4:65:57:ad:ea:84:45:69:df:24:8d:8d:25:c3:
20:7f:54:7f:b8:23:71:ca:63:17:a4:df:5c:18:9a:
1e:d8:03:4c:d4:80:57:60:7f:cd:17:4a:e1:4e:fe:
2c:19:27:d4:da:25:b8:3c:17:1e:57:46:d5:32:0e:
a5:85:bb:5e:03:d4:92:19:89:be:32:f6:38:6b:22:
4d:3d:9f:c8:c4:09:79:f6:f5:06:a7:ae:37:95:30:
11:78:0a:5b:51:93:3b:05:54:c4:be:b8:eb:05:37:
4e:5c:5c:27:b4:37:d4:a5:79:b5:74:65:5b:6c:71:
d1:e6:1f:70:66:0f:0b:b3:9e:02:42:82:f7:28:09:
a9:8a:30:cc:ae:ba:78:12:6f:dd:66:5f:ad:24:f5:
5d:5e:1b:bf:2b:35:02:ef:df:39:41:d1:b1:8a:cc:
a9:1c:ca:33:c2:00:0e:2b:b4:53:9c:15:60:5d:1c:
0c:d7:1f:f1:39:6b:79:38:42:e3:80:12:09:e0:93:
0c:4e:19:2b:f3:41:a4:f7:2f:22:cd:29:15:19:49:
9c:4f:23:54:7a:d1:82:33:62:04:69:c7:7a:a3:4b:
20:e4:13:f4:2d:e3:8f:7e:6d:02:f2:a7:04:ad:ea:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7F:AC:C4:42:52:5D:2F:7E:72:38:8F:B8:92:3E:97:FC:EB:BC:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/02efaca6-0f0b-3210-b808-d7ccb8d893ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:fb:9c:7e:f5:5b:87:a4:82:a1:ae:2a:5e:d6:1e:10:a8:40:
7e:7b:c5:2d:d4:38:de:32:89:32:d0:e2:e8:98:de:81:ec:31:
b9:99:3e:d6:e5:d8:9e:81:aa:aa:b7:f9:a0:58:c7:1b:fe:4d:
1e:35:18:4b:77:ef:df:2e:16:4b:dd:f5:e2:ea:f1:94:4e:e7:
21:f0:37:17:41:e2:ab:0d:6d:61:74:03:15:9b:d5:9c:2c:b0:
d4:37:04:f0:fc:66:59:b6:b8:e4:a9:e9:80:93:cb:e7:20:3b:
af:f1:5f:cc:15:81:bb:6e:f0:2b:a4:33:c5:89:80:a4:52:0d:
32:2c:e7:1f:7a:59:73:2b:96:ed:1f:9d:fa:ff:1f:8c:ed:f2:
c7:c3:d3:e5:28:c5:7f:8b:79:64:fa:20:16:e4:4f:3f:cb:f3:
92:9e:81:74:c6:61:44:a8:5d:88:68:3c:5b:98:70:e4:3f:ad:
10:a8:f3:6e:35:99:ed:14:4d:c6:22:8c:21:e7:a6:1a:00:e0:
ba:26:f5:e9:ab:ca:f5:c0:43:2d:b4:c6:ea:9e:44:49:11:7b:
95:9c:93:53:e2:54:bc:53:8c:6b:f8:df:5e:3c:f3:66:15:c7:
9d:03:72:db:54:f3:82:4f:05:b3:50:af:8d:62:02:90:f9:df:
4f:6f:d8:58
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD5ldSd5ueDbkMqtfgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDYyODEyMDAwMFoXDTIyMDgwMzA0MDAwMFowLzEtMCsGA1UEAxMk
ZjE0NDJkMDYtZDQ2ZC00ODJmLWE5NmItZTE1MDU3OWYyZDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVSU9RMbda7QR+eFmHcs5GVXreqERWnfJI2N
JcMgf1R/uCNxymMXpN9cGJoe2ANM1IBXYH/NF0rhTv4sGSfU2iW4PBceV0bVMg6l
hbteA9SSGYm+MvY4ayJNPZ/IxAl59vUGp643lTAReApbUZM7BVTEvrjrBTdOXFwn
tDfUpXm1dGVbbHHR5h9wZg8Ls54CQoL3KAmpijDMrrp4Em/dZl+tJPVdXhu/KzUC
7985QdGxisypHMozwgAOK7RTnBVgXRwM1x/xOWt5OELjgBIJ4JMMThkr80Gk9y8i
zSkVGUmcTyNUetGCM2IEacd6o0sg5BP0LeOPfm0C8qcEreoFbQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFJ1/rMRCUl0vfnI4j7iSPpf867wPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMDJlZmFjYTYtMGYwYi0z
MjEwLWI4MDgtZDdjY2I4ZDg5M2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDfgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAhPucfvVbh6SCoa4qXtYeEKhAfnvFLdQ43jKJMtDi6JjegewxuZk+1uXY
noGqqrf5oFjHG/5NHjUYS3fv3y4WS9314urxlE7nIfA3F0Hiqw1tYXQDFZvVnCyw
1DcE8PxmWba45KnpgJPL5yA7r/FfzBWBu27wK6QzxYmApFINMiznH3pZcyuW7R+d
+v8fjO3yx8PT5SjFf4t5ZPogFuRPP8vzkp6BdMZhRKhdiGg8W5hw5D+tEKjzbjWZ
7RRNxiKMIeemGgDguib16avK9cBDLbTG6p5ESRF7lZyTU+JUvFOMa/jfXjzzZhXH
nQNy21Tzgk8Fs1CvjWICkPnfT2/YWA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:06 2025 by rpki-client