Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29c5e2e5-2610-375b-9698-ac1fef1d4859.roa
File: 29c5e2e5-2610-375b-9698-ac1fef1d4859.roa (raw, json)
Hash identifier: cX7oE+yafeFtzR078K2t9PvnVKs0DD6dMg31EicmLI4=
Subject key identifier: CA:5B:C5:3F:24:8E:48:6C:41:4B:3B:EB:C9:6C:E4:11:12:22:44:56
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C68E62172F9E17D2961EBAA60
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29c5e2e5-2610-375b-9698-ac1fef1d4859.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:68:e6:21:72:f9:e1:7d:29:61:eb:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=7e6f2cfa-8e5a-498f-b05c-0c8f99e93251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ef:83:15:89:9c:05:73:bb:24:7a:68:2f:37:
d0:9b:56:e2:5b:64:20:5d:f5:c3:8f:3b:27:8e:ef:
6c:bc:e2:5d:ed:b3:97:d6:a2:99:be:81:fb:c5:70:
92:87:7d:a1:fa:1e:46:4f:30:56:23:4d:35:a6:e5:
79:21:2c:cc:dd:e1:f3:01:33:cc:2b:c1:f2:56:3c:
15:97:45:b9:d8:ab:24:6d:22:b4:36:fd:a6:33:59:
44:71:58:9b:b0:e0:02:54:96:68:0f:4d:28:1b:d4:
d3:78:53:63:91:1c:d6:26:d5:80:42:eb:c6:70:aa:
69:35:45:83:f1:64:c3:31:50:41:e7:48:3b:cd:c6:
39:aa:8c:cb:98:3d:03:33:48:51:5c:6a:4e:56:ba:
29:a9:f1:b2:3b:43:f3:e7:50:73:b0:e2:96:f4:48:
2c:cf:88:0d:b6:47:60:f1:b5:96:f7:cd:d7:b2:7c:
6b:da:85:ba:77:a4:47:5e:ec:c1:09:c4:83:c9:d0:
8f:07:94:55:2b:3e:5b:f1:e8:f4:1c:48:1c:c6:86:
3c:bb:de:23:9f:ae:cd:51:0c:e7:3f:75:e7:0b:b3:
70:95:9d:f4:7e:2a:c8:75:97:e6:47:09:00:b0:01:
35:21:d7:22:d6:35:4c:9b:fe:36:63:6a:0d:8d:45:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5B:C5:3F:24:8E:48:6C:41:4B:3B:EB:C9:6C:E4:11:12:22:44:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/29c5e2e5-2610-375b-9698-ac1fef1d4859.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:18:6d:17:59:46:03:69:2b:63:4a:a2:3d:b7:5c:4e:b8:bf:
dd:e3:6c:46:d7:ce:e7:8a:f4:ca:b4:a9:d6:79:87:60:83:4b:
e2:ba:17:64:9b:43:ee:65:d1:a1:1c:21:a7:1b:64:9b:fe:43:
bd:20:89:8c:5c:f0:db:06:75:9f:48:2a:78:4c:04:1d:47:2e:
75:cd:2e:af:da:34:2f:7d:de:e7:19:59:1d:95:48:af:38:36:
5c:ba:7c:4a:ba:02:ce:9b:46:ba:20:60:10:fb:cf:58:09:91:
18:8b:83:52:98:f9:60:82:5c:fb:cf:41:a9:7a:43:5a:c5:2f:
bb:52:d3:fa:71:5a:9a:d5:e9:1e:3d:08:50:f7:9f:e1:9f:23:
44:05:a2:94:2e:79:e0:b0:97:33:e5:1e:fb:d8:35:d0:da:40:
77:f8:17:43:95:76:c8:79:1d:40:15:49:70:b5:cc:90:9b:16:
49:47:5a:9e:2b:9f:cd:bb:aa:36:64:4b:e3:ed:28:19:be:11:
84:db:48:a7:20:61:e9:f8:f1:59:93:9d:f0:4f:20:af:a5:2c:
ca:06:e4:80:cc:3e:ce:9b:1e:02:f8:ae:fa:60:bb:12:81:c2:
a6:6f:96:4b:8d:55:c4:3d:f0:99:8a:07:c0:b2:c5:b7:7f:03:
fc:38:5c:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:46:52 2025 by rpki-client