Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21174392-6469-3d3e-bea6-3dfbb5d7b7d6.roa
File: 21174392-6469-3d3e-bea6-3dfbb5d7b7d6.roa (raw, json)
Hash identifier: pGtDGOCJBAep96LVQgfJ+QR+DMk4m0Tzc3aFuaSEuYk=
Subject key identifier: F3:5D:DC:74:52:D3:9C:FE:42:C1:15:82:5C:3D:B9:38:BA:69:79:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C68E649649F4D09C22F6F3520
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21174392-6469-3d3e-bea6-3dfbb5d7b7d6.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.228.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:68:e6:49:64:9f:4d:09:c2:2f:6f:35:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=b5a9539b-212c-47ee-a234-be4de1fa1a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:74:9e:5b:79:92:b7:62:30:31:47:0d:cf:f2:
71:69:c0:d4:cc:f9:b9:1d:47:e8:b5:cc:66:97:90:
19:48:1e:86:10:07:f3:0f:ae:ad:56:54:d4:ab:d0:
e3:a3:59:ba:8b:83:64:0d:69:58:d2:7e:4b:f2:92:
93:2e:47:f7:b4:79:3d:73:f3:ec:a2:24:9b:b8:16:
ba:8e:1f:77:29:56:a4:58:3d:f3:0b:0f:c7:8d:5b:
9d:e0:b9:ec:ce:f3:6d:94:0f:97:30:64:f5:bf:c7:
83:b9:f9:49:b0:05:05:f8:a4:b1:0e:50:03:7f:82:
7b:2d:88:c5:16:99:c6:bb:4e:83:fb:e9:a8:a0:34:
cf:d2:e3:f8:13:b6:79:f3:d7:90:17:e6:6a:27:d2:
35:9f:04:be:ce:25:10:3f:ba:03:f8:39:d1:96:f3:
30:5c:0a:0f:24:7f:07:d8:c8:2e:fd:f8:0b:f4:fe:
45:af:72:b3:77:4b:eb:95:03:60:4f:8e:fd:3c:d7:
00:91:8f:c3:94:10:6c:ac:54:cd:3c:f5:16:dd:0f:
8a:24:9f:5a:e3:4a:b4:4a:f9:57:a6:09:a3:e9:ee:
fe:b0:e5:6e:ab:83:a4:c3:e6:c6:4f:8f:8b:5c:8c:
13:4f:ac:58:16:3b:5a:46:91:02:d8:74:3f:32:d9:
8b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:5D:DC:74:52:D3:9C:FE:42:C1:15:82:5C:3D:B9:38:BA:69:79:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/21174392-6469-3d3e-bea6-3dfbb5d7b7d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.228.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:8b:0c:08:44:5e:45:ab:d0:6f:a3:c0:04:f7:31:40:f5:6f:
28:62:1f:bb:2f:93:3b:9e:88:c1:52:9a:e2:65:10:3c:e7:2f:
0f:d4:85:13:e5:74:21:2f:db:11:07:7f:3c:b5:91:50:dc:a2:
91:3a:f2:35:06:ec:4f:ae:bf:e0:d6:9c:c3:8f:8d:08:a3:3d:
db:72:b1:dd:a2:5c:44:96:31:97:65:61:df:24:d6:77:94:0e:
e8:26:e4:f4:15:7e:55:f4:dc:c3:3e:5e:78:02:be:62:49:be:
bf:18:6a:97:c4:7c:36:7b:64:06:43:82:f9:13:72:c1:78:a8:
bc:79:dc:fb:ba:d8:c5:fc:69:57:a0:be:d1:0b:a7:bc:9a:7f:
04:cc:ca:dd:d9:db:67:ca:9f:a7:93:8b:22:26:4d:b3:d7:6e:
f6:8e:9f:f7:28:ef:bc:58:17:8d:46:72:1f:20:a5:f1:8e:c4:
e6:0f:21:6a:ee:7d:c4:70:d2:ef:a0:e8:f9:b1:46:1b:61:78:
f5:b3:cc:90:3e:83:b5:d0:69:10:d2:d6:1f:3c:33:d9:e1:91:
c2:1c:99:1f:df:5f:87:d8:98:4e:8b:1f:69:14:e2:50:f3:8a:
7b:2f:30:2f:39:4f:11:ce:2a:8a:f6:57:c7:9e:2b:db:e8:89:
81:0f:cf:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:35:37 2025 by rpki-client