Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06a1919d-3240-3b2a-a8a2-6f90400aba5f.roa
File: 06a1919d-3240-3b2a-a8a2-6f90400aba5f.roa (raw, json)
Hash identifier: e4udVOJEiGAtNlg/zaP/MKcHMExjFM7ODlX82J5D8qw=
Subject key identifier: 00:66:18:12:5E:07:A2:9F:56:E6:BD:66:F5:1B:20:51:25:C0:7A:2A
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7AB176723D1AFF83440C4140
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06a1919d-3240-3b2a-a8a2-6f90400aba5f.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.228.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7a:b1:76:72:3d:1a:ff:83:44:0c:41:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=a493fa1f-cb17-46ba-a619-50be912f164a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:58:4c:06:36:66:79:00:bb:39:96:d6:d8:
8b:e5:f6:10:f1:db:4e:96:32:c6:f0:49:ba:9a:5a:
65:f1:91:98:ef:e2:5c:98:7e:58:3a:68:81:ef:88:
c0:44:ff:fc:fc:a0:b6:22:85:0e:9e:00:c1:65:84:
52:80:60:db:42:6b:e3:85:d9:69:4f:56:2a:e9:5c:
0d:89:15:ca:e9:4d:30:01:d8:56:93:a3:3b:c7:10:
86:b5:57:12:35:4c:5d:1b:a9:57:8c:e4:1b:9a:aa:
8a:5d:f4:49:46:96:7e:2a:af:12:33:b1:27:00:bf:
8a:f4:e2:91:32:a1:0f:1e:17:1a:f6:ce:b2:fc:0e:
f0:ca:23:92:35:25:78:40:e2:7a:c7:f6:76:bc:65:
61:7d:24:05:df:6f:84:12:c5:d6:24:d1:bf:e8:89:
20:49:33:39:fa:15:26:c0:a1:04:91:f4:a8:07:25:
18:ce:fb:b0:7e:2d:45:65:1a:50:24:c5:35:62:57:
2f:45:e9:e4:f8:2b:17:f2:a9:d3:fe:8d:3b:f1:00:
5d:ec:11:47:99:66:28:89:46:da:1d:15:59:36:29:
ea:41:db:e2:02:bc:ef:d4:42:00:b3:ca:c8:b4:e3:
eb:4a:e9:59:fa:0d:51:64:cb:f8:a2:37:b1:87:1d:
33:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:66:18:12:5E:07:A2:9F:56:E6:BD:66:F5:1B:20:51:25:C0:7A:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/06a1919d-3240-3b2a-a8a2-6f90400aba5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.228.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:2b:75:41:31:f1:a5:a1:a3:37:ca:aa:09:dc:16:9f:42:da:
91:03:2b:80:e9:53:11:ba:c8:bf:53:60:15:74:5f:9a:ed:c6:
ae:3d:b3:ca:58:1b:32:d7:36:9c:d4:de:e0:22:30:57:6b:93:
c2:6f:ed:3e:62:6f:2c:15:83:98:04:78:c7:99:61:2b:bf:c7:
8c:ee:78:67:38:e6:38:d2:17:30:d0:d2:77:6c:4e:c9:15:ea:
22:e9:bf:e1:70:78:5f:0a:53:17:a2:bb:2c:ec:01:80:95:ba:
ea:48:a2:2b:db:d9:26:b3:3f:8f:90:6c:4a:d8:c1:e3:b5:03:
28:e3:80:22:97:70:8a:5f:6a:08:05:ab:5b:f2:b1:68:7e:96:
41:ce:b3:4f:20:45:01:80:d5:04:93:3a:ad:e9:d3:08:3f:a2:
fb:35:8e:76:23:f6:81:31:b4:9b:b5:36:68:c0:15:b1:86:d6:
2d:3c:85:f1:92:c9:76:7c:d0:2f:37:66:d9:5e:c9:42:29:51:
4b:5a:b1:1a:47:ec:a2:5a:1f:2b:89:40:78:bd:3b:c1:45:fa:
59:49:93:9f:98:a7:d9:86:3e:3d:e6:fc:bf:5c:c2:ec:d5:c9:
fa:6e:e7:04:e3:49:2f:4a:e7:74:24:93:a9:0f:09:3a:8c:f8:
23:d9:64:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:19:25 2025 by rpki-client