Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0720e63a-9eeb-3ced-8064-d4236691c0ab.roa
File: 0720e63a-9eeb-3ced-8064-d4236691c0ab.roa (raw, json)
Hash identifier: HNxLeg5N09bTVFFOavSGSqG+mbK7MTeidX9HcUWlytw=
Subject key identifier: 23:4B:73:33:F4:E4:4D:6C:6D:D8:DB:03:20:84:77:98:47:65:38:30
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CD0650D6F9576E336A868A600
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0720e63a-9eeb-3ced-8064-d4236691c0ab.roa
Signing time: Fri 04 Feb 2022 05:00:00 +0000
ROA not before: Fri 04 Feb 2022 05:00:00 +0000
ROA not after: Fri 11 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 13.216.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:d0:65:0d:6f:95:76:e3:36:a8:68:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 4 05:00:00 2022 GMT
Not After : Mar 11 05:00:00 2022 GMT
Subject: CN=bf8cb951-d9c4-4bf0-853f-678a05ff6fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:cb:f9:45:cb:47:43:d5:d4:b9:fd:4d:a6:5c:
ba:a6:26:d6:24:db:66:8e:92:c4:61:80:1f:cb:22:
a6:b8:1c:57:e9:a9:a8:a8:b2:b3:1d:35:6c:a1:5b:
c6:ab:91:b7:d2:7d:e6:ad:f9:69:40:f8:00:b5:5e:
ed:08:5c:79:ec:84:6c:81:8c:7d:b0:1e:c4:ce:77:
6f:53:4a:de:a7:a9:3b:5c:31:3e:c8:9c:62:aa:52:
f0:ad:45:95:fe:08:14:51:b6:20:4f:e0:94:b8:46:
58:35:89:0a:63:d0:c3:e6:1b:e6:bd:25:b4:3a:62:
0e:ff:90:ae:df:39:30:98:f5:43:2c:1b:13:31:d8:
d8:03:69:e9:58:ee:ba:5b:56:27:07:97:c8:ff:2e:
df:e9:f1:09:7c:63:ae:e1:f4:bc:ba:96:5c:0a:71:
26:52:c6:77:d6:9c:92:d0:44:2e:0d:65:a6:76:8d:
a5:20:d1:27:c5:db:8b:95:a2:88:60:24:87:4b:ce:
8a:35:90:04:60:c3:6f:d2:3b:e8:59:5e:37:ba:e3:
81:5d:72:10:39:3a:98:c9:c2:0b:48:05:15:d7:af:
3a:8f:b8:29:23:3c:4b:c7:53:12:74:c7:26:09:8e:
31:e7:1d:38:68:05:8d:f6:c2:63:d6:de:ba:63:22:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4B:73:33:F4:E4:4D:6C:6D:D8:DB:03:20:84:77:98:47:65:38:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/0720e63a-9eeb-3ced-8064-d4236691c0ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.216.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:32:9a:9f:0a:68:ee:a8:df:87:ed:bf:9d:91:a6:79:55:8e:
16:aa:04:9b:a8:88:8d:39:0a:e4:14:38:67:b6:34:5b:c7:25:
3b:ed:3d:c4:65:8a:83:89:2d:e3:d8:20:6d:fd:82:02:e0:93:
b4:d3:bf:c7:95:f9:86:3a:0f:9d:e8:e2:b1:fb:cf:7b:36:21:
b4:d6:aa:67:ac:3c:f2:e9:71:d2:af:95:61:16:c0:ce:35:9f:
7e:ba:1f:9a:4b:fa:02:4f:94:e1:fa:f5:75:4c:11:97:dc:61:
99:9e:73:09:39:45:36:79:40:cc:1d:85:ae:0f:c6:9e:e9:3c:
8f:03:64:c9:3e:41:9b:f6:60:7d:9e:33:1a:ea:ee:86:c2:9d:
2f:79:bb:2a:30:e7:45:23:8c:62:22:02:96:e3:9b:65:1f:94:
44:a1:0d:fb:9f:3e:fa:b9:79:bf:b5:7a:98:df:a1:1d:13:b9:
38:e7:e8:34:d1:70:5e:75:de:df:16:bf:e5:1e:cc:d1:20:db:
88:b2:f2:e2:7f:71:b2:2e:27:87:96:04:2f:72:3f:78:c7:f0:
cb:18:fc:fa:9f:96:9b:62:4a:b2:5e:9e:a0:8c:29:9b:63:33:
7d:27:fa:c6:8c:9f:77:9e:93:ef:69:e2:d4:45:35:f2:12:e9:
b7:48:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:24:22 2025 by rpki-client