Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cf42ec4-2679-3895-9ff6-a77646d60366.roa
File: 1cf42ec4-2679-3895-9ff6-a77646d60366.roa (raw, json)
Hash identifier: Pu8v/GkxQsW3Pyu83+iU0nNAc+7UGZ8BUoIOf3TJZfk=
Subject key identifier: AB:32:8F:27:37:E4:C8:24:3F:29:A3:F0:8D:11:3B:8C:EB:E0:7A:43
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858407B16055076CF2A83B8B26780
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cf42ec4-2679-3895-9ff6-a77646d60366.roa
Signing time: Thu 05 Jan 2023 12:00:00 +0000
ROA not before: Thu 05 Jan 2023 12:00:00 +0000
ROA not after: Fri 10 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.216.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7b:16:05:50:76:cf:2a:83:b8:b2:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 5 12:00:00 2023 GMT
Not After : Feb 10 05:00:00 2023 GMT
Subject: CN=d1f1a1c3-bb13-4677-b3c9-445d46d30d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ba:16:54:a0:4a:91:ad:68:0b:2f:b1:a2:d7:
54:de:0c:04:aa:9c:72:5c:f4:0f:82:cc:6a:67:af:
fd:08:c9:b1:25:f7:29:57:82:95:bf:1a:96:cc:93:
14:7d:95:cf:16:3a:d6:bf:40:e2:0c:1f:4a:28:3e:
b1:0d:8d:85:43:59:16:d7:e2:d5:8b:ca:60:37:c2:
4e:8b:ea:c2:56:b4:d3:89:20:ff:75:3d:37:44:e6:
44:d6:01:d2:e2:df:42:4b:c5:e7:e5:55:bc:39:fa:
cf:c5:cd:b6:e5:16:54:c9:3f:06:bf:10:00:34:ec:
56:e0:75:3c:b3:42:ca:7a:c2:f6:ce:8e:7a:e6:4c:
a8:d7:7a:1d:fe:e3:f4:c5:a6:48:f3:a6:60:36:a8:
2f:aa:97:43:1f:4f:b9:8d:d6:cd:88:02:09:8a:c3:
05:9d:62:40:b0:93:ed:0b:e6:20:8d:6e:18:a3:3d:
9a:07:e8:a7:3d:ea:50:ca:70:a5:cf:40:bc:e7:a5:
5e:b5:01:3c:5f:b6:2e:79:2b:e8:84:af:61:44:7e:
ec:d3:25:a1:10:31:33:2b:56:22:14:71:dd:6f:27:
61:de:26:d7:74:cd:21:a3:7e:dd:8b:bc:32:fd:22:
68:58:51:96:67:15:5a:84:41:de:e2:bb:43:6d:1c:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:8F:27:37:E4:C8:24:3F:29:A3:F0:8D:11:3B:8C:EB:E0:7A:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/1cf42ec4-2679-3895-9ff6-a77646d60366.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.216.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:bf:09:d2:cc:a6:51:fc:2f:bb:e7:7a:9e:9b:4d:8a:9b:56:
c9:8a:87:d1:17:69:44:77:f7:23:02:14:17:f1:e4:98:d9:91:
94:04:28:9d:7f:7a:b9:12:c0:4e:ab:d5:e3:e1:90:01:b0:f7:
ae:97:e9:9c:40:01:14:67:c5:3d:5d:97:00:da:c0:fd:00:bb:
7b:79:a9:5e:ec:2d:c6:c2:70:f5:6b:c4:a6:4c:2b:aa:3c:13:
a8:9a:ff:64:16:ae:dc:75:b2:e7:2a:a9:13:81:c3:a9:28:2c:
a5:d6:3c:e6:b6:ef:06:3b:32:f8:3b:30:e6:8c:46:a9:41:0e:
5f:e6:39:d7:54:51:86:1d:35:c1:46:0e:d5:ff:d5:e5:ab:61:
2f:a8:bb:fc:69:fe:56:43:a7:a7:be:92:ad:54:02:f7:a4:9c:
8b:c0:a8:85:34:1e:6d:83:a5:57:2c:17:9d:0f:94:06:67:49:
2a:02:90:89:a7:c1:77:c0:0b:03:5a:56:2d:47:c4:12:15:0a:
62:f8:8e:e7:96:ef:bf:40:17:41:24:07:4a:2d:11:48:36:f0:
38:42:ad:b3:2c:47:4c:8f:7f:06:ab:22:97:a0:c8:50:62:86:
30:7d:fa:d7:5f:6d:ef:02:06:f1:0d:9c:09:80:54:87:e7:7c:
b8:cb:75:53
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB7FgVQds8qg7iyZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwNTEyMDAwMFoXDTIzMDIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
ZDFmMWExYzMtYmIxMy00Njc3LWIzYzktNDQ1ZDQ2ZDMwZDNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmroWVKBKka1oCy+xotdU3gwEqpxyXPQPgsxq
Z6/9CMmxJfcpV4KVvxqWzJMUfZXPFjrWv0DiDB9KKD6xDY2FQ1kW1+LVi8pgN8JO
i+rCVrTTiSD/dT03ROZE1gHS4t9CS8Xn5VW8OfrPxc225RZUyT8GvxAANOxW4HU8
s0LKesL2zo565kyo13od/uP0xaZI86ZgNqgvqpdDH0+5jdbNiAIJisMFnWJAsJPt
C+YgjW4Yoz2aB+inPepQynClz0C856VetQE8X7YueSvohK9hRH7s0yWhEDEzK1Yi
FHHdbydh3ibXdM0ho37di7wy/SJoWFGWZxVahEHe4rtDbRzzJwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKsyjyc35MgkPymj8I0RO4zr4HpDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvMWNmNDJlYzQtMjY3OS0z
ODk1LTlmZjYtYTc3NjQ2ZDYwMzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDdgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEADr8J0symUfwvu+d6nptNiptWyYqH0RdpRHf3IwIUF/HkmNmRlAQonX96
uRLATqvV4+GQAbD3rpfpnEABFGfFPV2XANrA/QC7e3mpXuwtxsJw9WvEpkwrqjwT
qJr/ZBau3HWy5yqpE4HDqSgspdY85rbvBjsy+Dsw5oxGqUEOX+Y511RRhh01wUYO
1f/V5athL6i7/Gn+VkOnp76SrVQC96Sci8CohTQebYOlVywXnQ+UBmdJKgKQiafB
d8ALA1pWLUfEEhUKYviO55bvv0AXQSQHSi0RSDbwOEKtsyxHTI9/Bqsil6DIUGKG
MH36119t7wIG8Q2cCYBUh+d8uMt1Uw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:21:34 2025 by rpki-client