Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f89298c-09a2-3b71-a0af-712d3237dbdc.roa
File: 2f89298c-09a2-3b71-a0af-712d3237dbdc.roa (raw, json)
Hash identifier: /tfiHG5aMNCYVVdW8OKgLZ30GNGS0Mbp0ThM5xAg/xg=
Subject key identifier: 5D:6D:30:38:81:D5:CB:92:1D:AB:66:24:AE:20:65:84:0C:BA:BD:8F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D539B40F9B477837830EFF800
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f89298c-09a2-3b71-a0af-712d3237dbdc.roa
Signing time: Wed 23 Mar 2022 04:00:00 +0000
ROA not before: Wed 23 Mar 2022 04:00:00 +0000
ROA not after: Wed 27 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:53:9b:40:f9:b4:77:83:78:30:ef:f8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 23 04:00:00 2022 GMT
Not After : Apr 27 04:00:00 2022 GMT
Subject: CN=a0139061-bd45-4124-a92e-0595dcd55457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:06:3c:dc:a1:00:01:33:79:11:db:0f:e9:c3:
92:35:7f:12:5a:70:79:ac:01:e0:80:e8:6d:a0:03:
bc:ff:b7:04:65:c5:f2:a7:da:49:25:68:4f:f4:e3:
c3:35:aa:ba:bb:bc:6e:1a:9c:fa:4b:50:24:0c:01:
ec:4f:4e:37:0a:ea:75:81:a2:cf:c0:ee:13:cf:54:
77:b0:f2:53:b2:d0:44:3f:93:26:49:6c:77:44:ef:
29:5d:ba:12:df:3d:d3:d0:5d:60:59:0a:6d:86:6e:
cc:43:28:7c:26:7d:49:79:11:ff:23:c1:a1:92:a3:
b2:33:01:4a:81:c0:6c:fa:0a:39:a1:ee:31:a6:66:
6a:06:bb:3e:a8:b2:64:2f:ff:48:37:d6:07:bd:4b:
db:53:d5:4d:2b:91:42:b6:97:1b:30:f2:d3:3c:a4:
31:7f:0e:b0:d1:54:e2:7f:a5:ad:a5:b3:cd:45:f9:
6b:19:e8:77:30:3c:8b:15:91:0c:eb:e9:d3:ab:e0:
be:5e:81:8d:e1:9f:79:e3:a7:d5:a8:f5:34:1b:2f:
13:c3:c8:63:56:86:72:e8:0d:f9:38:07:f4:1b:da:
88:ef:f3:11:7e:a4:8c:91:37:47:40:41:1f:61:6c:
9b:4c:e4:72:82:8f:01:8f:e5:5d:b4:ed:89:36:28:
e1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:6D:30:38:81:D5:CB:92:1D:AB:66:24:AE:20:65:84:0C:BA:BD:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2f89298c-09a2-3b71-a0af-712d3237dbdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:70:c9:9e:c2:97:a4:aa:be:56:1a:9f:51:2e:5a:2c:26:19:
85:55:99:45:8c:b3:f2:e6:c4:ab:de:59:17:aa:2b:1c:4b:bc:
f0:71:f3:c7:15:32:71:f4:fb:41:f3:2d:92:41:08:a3:59:ad:
d8:49:12:61:cf:1d:ef:dd:4a:2b:a2:66:59:e9:45:18:3c:7f:
ee:9c:77:1a:62:2f:1d:1e:ed:14:e7:32:98:ea:e2:bf:1a:4d:
e4:f7:45:24:d0:53:df:4c:b5:fd:b1:f3:b4:84:60:38:43:eb:
0c:15:c0:ac:d1:c5:98:42:56:cd:80:e1:24:cf:b4:ba:47:0f:
20:5b:1f:88:9f:79:95:27:a7:f1:5d:b4:23:7b:c1:9d:29:3a:
6e:e4:62:70:ad:a4:82:35:ad:bb:0a:b0:fd:9d:d8:c4:2d:c5:
f3:ed:76:75:0c:36:ca:b9:23:94:ae:c4:60:88:b4:22:9e:d0:
22:05:86:c3:ca:c7:a3:59:ad:32:67:a4:d4:d7:dd:18:c3:86:
98:b1:99:d7:31:f9:3b:84:d1:10:e5:5a:a3:2d:9a:58:f0:ff:
85:84:8f:5f:47:8f:97:78:09:14:c2:9a:dd:03:f9:16:ef:ab:
e5:ab:8a:fd:65:7d:7c:f3:11:b9:fd:9b:4d:a4:b9:55:93:fd:
e2:28:bf:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:26:18 2025 by rpki-client