Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3abe1566-589e-3e76-840c-8ad3c0204c48.roa
File: 3abe1566-589e-3e76-840c-8ad3c0204c48.roa (raw, json)
Hash identifier: SjCZ/QZmgCm4tVCk4CZm8OCZx0eJ20Z+UK/5TdUNLHs=
Subject key identifier: 5E:A1:2B:71:79:C2:C9:50:6A:AB:20:DF:83:4F:A2:35:3A:B2:74:EE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840621AFEAA18675923DEE68100
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3abe1566-589e-3e76-840c-8ad3c0204c48.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:62:1a:fe:aa:18:67:59:23:de:e6:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=be22ffe1-65d7-4f8b-9a6b-2b5637192a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cf:67:2b:77:54:ad:1f:c7:30:43:3b:71:5a:
37:f4:c8:63:bc:2f:5a:57:47:27:94:3c:d8:32:96:
e0:03:fa:44:a1:4d:77:e0:ea:29:cd:e1:4c:50:bc:
da:a3:e8:61:25:f2:c1:7b:b6:ca:2f:59:01:16:28:
04:0d:0d:5c:0a:b5:2c:45:4a:60:97:91:d2:22:b8:
04:7f:4c:e2:ca:ed:55:2e:5d:d7:5f:53:e9:31:8e:
ab:97:01:ae:d0:ae:90:a5:ce:e6:04:4d:1d:8a:56:
25:d2:d8:bf:3b:a4:2b:ae:02:75:b1:69:b6:85:7b:
89:83:8f:6e:63:96:95:44:76:a3:ba:c5:17:ff:a2:
ec:49:81:35:09:34:d6:2e:b6:9f:da:0e:e2:e1:89:
30:a1:4a:b1:85:20:3e:07:20:09:6a:a2:b8:3d:1e:
46:59:9b:1a:18:79:a9:c6:35:2d:85:1c:39:c7:fb:
c5:16:97:e6:02:9d:84:dd:68:56:56:79:8c:9c:0d:
0c:88:4e:af:e9:5d:1a:78:b6:e0:0d:c8:92:a3:62:
b5:a9:cb:ca:df:b7:20:cd:e9:8a:ae:df:fa:f7:76:
d0:dd:e7:a3:29:c0:0d:39:e3:97:b9:f9:d3:17:39:
68:49:9c:99:93:01:6c:2b:5a:71:fa:09:b4:1f:de:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A1:2B:71:79:C2:C9:50:6A:AB:20:DF:83:4F:A2:35:3A:B2:74:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3abe1566-589e-3e76-840c-8ad3c0204c48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:4d:b0:ea:aa:7a:b2:d6:aa:c3:e5:3b:9f:56:c6:dc:d0:61:
2a:90:ce:da:53:6d:f8:62:0e:87:38:3a:33:00:d9:ca:eb:be:
3d:e4:d2:5b:8c:69:ae:57:37:54:9b:78:c8:83:a0:12:1b:84:
0f:c9:72:42:8b:2a:bd:db:ee:6f:8b:3c:f1:5c:a4:f2:f2:53:
01:59:3a:b4:4b:2d:52:d9:a4:cf:02:c4:a6:55:a2:ea:ac:60:
cb:73:91:5f:f8:81:4a:ff:63:a1:75:03:aa:98:c8:3f:b0:2d:
41:61:e6:41:96:9e:2a:c9:1e:c9:29:1a:5f:c4:ed:34:09:96:
75:34:94:53:eb:67:51:bc:70:9a:41:97:3f:eb:76:53:d2:3e:
fc:68:61:b3:9a:f6:d3:56:e2:2d:01:96:d3:5e:2a:ef:b2:36:
8f:a4:01:be:d5:e4:6f:65:81:e7:e8:26:06:6b:42:18:da:9a:
36:04:64:0b:8a:9e:b7:65:86:75:ba:1e:bd:b2:84:fb:cf:f7:
af:34:03:8f:c9:de:d4:a6:fb:7c:5b:b1:c4:0c:bd:a7:6b:6d:
bd:3b:c7:61:7c:5f:8c:fd:4b:ed:2b:b0:7b:0c:97:bb:cd:35:
ce:21:29:df:12:0b:2b:bd:96:e3:5a:7e:f5:d9:bb:15:53:2b:
06:1e:86:39
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBiGv6qGGdZI97mgQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIyNzEyMDAwMFoXDTIzMDIwMTA1MDAwMFowLzEtMCsGA1UEAxMk
YmUyMmZmZTEtNjVkNy00ZjhiLTlhNmItMmI1NjM3MTkyYTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu89nK3dUrR/HMEM7cVo39MhjvC9aV0cnlDzY
MpbgA/pEoU134OopzeFMULzao+hhJfLBe7bKL1kBFigEDQ1cCrUsRUpgl5HSIrgE
f0ziyu1VLl3XX1PpMY6rlwGu0K6Qpc7mBE0dilYl0ti/O6QrrgJ1sWm2hXuJg49u
Y5aVRHajusUX/6LsSYE1CTTWLraf2g7i4YkwoUqxhSA+ByAJaqK4PR5GWZsaGHmp
xjUthRw5x/vFFpfmAp2E3WhWVnmMnA0MiE6v6V0aeLbgDciSo2K1qcvK37cgzemK
rt/693bQ3eejKcANOeOXufnTFzloSZyZkwFsK1px+gm0H943zQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFF6hK3F5wslQaqsg34NPojU6snTuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvM2FiZTE1NjYtNTg5ZS0z
ZTc2LTg0MGMtOGFkM2MwMjA0YzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDdAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH02w6qp6staqw+U7n1bG3NBhKpDO2lNt+GIOhzg6MwDZyuu+PeTSW4xp
rlc3VJt4yIOgEhuED8lyQosqvdvub4s88Vyk8vJTAVk6tEstUtmkzwLEplWi6qxg
y3ORX/iBSv9joXUDqpjIP7AtQWHmQZaeKskeySkaX8TtNAmWdTSUU+tnUbxwmkGX
P+t2U9I+/Ghhs5r201biLQGW014q77I2j6QBvtXkb2WB5+gmBmtCGNqaNgRkC4qe
t2WGdboevbKE+8/3rzQDj8ne1Kb7fFuxxAy9p2ttvTvHYXxfjP1L7SuwewyXu801
ziEp3xILK72W41p+9dm7FVMrBh6GOQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:12:54 2025 by rpki-client