Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b347a7-bbe3-3cb7-b9e0-ca9a535661e7.roa
File: 10b347a7-bbe3-3cb7-b9e0-ca9a535661e7.roa (raw, json)
Hash identifier: oqUtgZwd4LFhB1VIoXEfquyCYL/bK9Ug4bYfq2fKmLo=
Subject key identifier: D1:0F:F1:F3:88:C0:1B:48:C1:FA:8E:C7:79:6F:98:33:83:AB:88:0D
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840139DF767F41BD4BA82861B80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b347a7-bbe3-3cb7-b9e0-ca9a535661e7.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:9d:f7:67:f4:1b:d4:ba:82:86:1b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=646d5382-a25a-44dd-9f3d-62da36bf72e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:db:62:e7:a0:78:13:d3:48:62:e2:d0:a8:0d:
22:c7:16:60:73:8d:b0:be:ab:99:cd:59:e8:98:e8:
06:a7:48:74:0e:7e:92:49:53:15:20:8d:58:b3:c3:
18:3a:ac:fe:48:91:71:c4:65:37:51:3c:b4:78:13:
46:57:1b:02:f0:89:88:0a:a2:85:e4:58:87:99:fe:
f0:ad:a7:f2:8f:8a:17:9b:8e:26:fc:2e:db:18:4d:
7f:a6:e9:f3:a1:de:d4:96:6b:b0:d6:2a:2c:70:5b:
dc:e7:aa:75:9d:3e:e6:33:97:be:1f:4b:98:a5:06:
fc:ea:c1:36:0e:d2:40:9f:3e:b1:63:2b:3c:78:7d:
08:13:02:82:c4:93:f7:35:c6:ee:46:f6:df:97:9f:
60:bd:34:98:0c:4b:e5:ad:36:ab:82:57:81:ba:4c:
78:f7:e7:2b:67:99:a7:9b:90:2a:d3:8c:90:d3:0f:
20:a6:99:a3:69:69:b2:cb:d1:71:d7:90:4b:a7:7f:
80:11:44:de:a9:ff:07:a9:07:b9:23:e1:9b:0a:bf:
5b:7e:70:d7:28:c0:0c:dd:ed:5b:44:00:c8:ab:e4:
5f:6d:20:9f:50:63:ad:16:0a:2a:d3:27:40:de:c1:
91:65:69:2d:b3:9d:c3:1b:0f:1d:4d:4e:0b:88:96:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0F:F1:F3:88:C0:1B:48:C1:FA:8E:C7:79:6F:98:33:83:AB:88:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/10b347a7-bbe3-3cb7-b9e0-ca9a535661e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:21:49:61:fa:b9:f0:e8:53:e0:2c:b6:2a:5c:8f:63:a4:dd:
52:11:dd:eb:f6:38:25:39:8a:3c:5a:63:6d:36:88:94:5c:02:
da:df:4c:44:92:37:f7:ee:67:f0:cd:22:67:01:9d:64:55:81:
87:be:96:58:da:7c:26:f3:14:aa:f2:7b:50:a4:52:b7:ad:89:
c4:eb:12:f3:54:33:36:d1:42:7f:75:a0:b2:20:78:dd:b3:02:
56:0f:d1:b8:5c:08:6c:ec:f2:30:a9:05:6d:00:c3:2e:c7:9e:
45:62:6a:a1:89:69:f5:5a:f8:4e:22:68:06:df:0b:87:1f:43:
fd:7a:e2:71:dd:2a:0d:db:94:e8:40:28:90:1b:36:a2:3d:a7:
dc:7b:cb:14:0d:41:9a:c8:5d:79:72:2b:b7:cf:28:a8:83:14:
bd:49:bb:bd:08:7d:c3:8e:e1:44:71:13:ef:dc:3e:20:da:1b:
c4:40:16:27:dd:fe:37:d0:d5:c1:6c:97:0a:63:63:ad:ca:36:
c9:25:78:09:18:d3:8f:ab:7e:9f:f4:32:e8:ae:80:59:2c:8e:
73:4d:ed:70:be:9b:72:a3:8a:ee:33:30:5c:5d:4a:85:ed:87:
c9:9d:73:e2:28:73:d4:8e:10:4d:ef:3b:27:44:3c:89:df:be:
80:3b:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:08 2025 by rpki-client