Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/408a23cc-d6ae-37c9-b155-08b8e8a6b130.roa
File: 408a23cc-d6ae-37c9-b155-08b8e8a6b130.roa (raw, json)
Hash identifier: LVp+leZmjDTwNajXUaz1LCqyDDQutHes6ziykNDnjGg=
Subject key identifier: 07:88:E2:B5:84:5D:43:FE:A5:A0:11:F6:8F:36:33:3F:E9:D6:02:A5
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F776D0EA0776701EE4D72F740
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/408a23cc-d6ae-37c9-b155-08b8e8a6b130.roa
Signing time: Tue 04 Oct 2022 12:00:00 +0000
ROA not before: Tue 04 Oct 2022 12:00:00 +0000
ROA not after: Wed 09 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:77:6d:0e:a0:77:67:01:ee:4d:72:f7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 4 12:00:00 2022 GMT
Not After : Nov 9 05:00:00 2022 GMT
Subject: CN=a46e348d-f74a-42d2-988c-f0369b757f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:45:e9:58:6a:74:95:2d:3c:01:91:ce:35:9b:
84:70:e3:a3:71:aa:05:c3:80:12:71:9a:1d:bf:b0:
50:e0:c9:ce:60:e3:41:83:24:8a:34:2c:0a:67:0a:
ff:e8:45:60:83:ef:c7:db:97:2c:3c:ed:b3:97:67:
30:81:b7:fd:11:e3:45:00:65:6e:af:db:ed:a8:b2:
48:7d:76:ff:23:de:bc:9e:9d:f7:43:4c:b0:89:1e:
b1:7f:af:8e:b6:22:b4:cf:e9:e6:48:f7:79:0f:8b:
3e:da:99:9c:11:b7:51:61:6e:6b:d4:9e:9b:7d:e4:
a6:0d:77:fd:58:e2:de:ef:76:9c:4c:60:6c:90:f8:
c9:b6:80:eb:07:58:12:6b:38:eb:6c:c1:c1:4f:2f:
1a:f0:65:b1:73:6e:4b:7d:05:a1:e9:b4:f4:43:78:
b3:bf:29:0a:d8:79:88:10:67:33:d3:40:ad:0f:0e:
cb:c6:a9:85:3b:ce:2e:5f:56:1c:6e:17:a9:09:af:
e9:83:f5:17:15:b0:61:38:95:51:a2:8d:ad:95:cf:
47:6f:30:07:95:ae:28:d3:7e:bd:2e:cd:84:e1:a3:
00:0e:92:c4:98:59:81:a6:54:29:9b:42:da:27:00:
35:90:2c:01:12:b9:cd:40:8e:bb:ff:d4:51:df:e0:
d8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:88:E2:B5:84:5D:43:FE:A5:A0:11:F6:8F:36:33:3F:E9:D6:02:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/408a23cc-d6ae-37c9-b155-08b8e8a6b130.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:5c:1e:bc:b9:26:b6:5a:d8:ca:34:ba:d4:14:9c:45:c7:32:
ed:35:79:dc:f5:c1:cd:53:75:a4:59:9c:66:76:07:cb:6f:64:
b6:05:d0:e0:4f:8c:54:46:3e:30:10:d9:f2:27:0d:73:b9:be:
1e:0a:f2:5c:e0:26:65:f2:63:60:20:a2:52:cd:4d:40:27:77:
06:8e:b0:24:d0:16:25:5a:89:3e:75:02:a4:c2:6e:96:4b:4e:
c6:7b:1a:6e:e6:15:e4:7c:c3:46:92:56:f8:1c:2d:f4:7a:bf:
76:78:57:22:1b:07:7a:e1:23:3d:9a:1e:96:08:f9:ca:d3:98:
de:ea:23:38:f3:08:a4:6a:62:1f:38:7c:07:f5:93:fe:39:98:
8a:35:2a:e2:cf:3c:57:d2:0e:78:4d:f4:dc:04:7a:db:a1:85:
c4:b7:f6:c1:42:fd:c6:0a:4a:fc:e8:3c:9c:6a:28:0f:61:10:
6a:aa:a7:da:03:11:96:2b:32:7f:f5:64:54:a7:d4:eb:0e:b5:
7d:d4:12:15:b8:57:6d:01:e6:c6:98:c9:cb:69:26:2d:e8:41:
9d:d6:3f:9d:93:6b:5f:fa:93:2e:93:be:30:1d:58:43:b6:d2:
74:a0:56:d9:24:7a:c2:e5:e4:77:58:27:01:9f:9e:ad:1f:ab:
d0:60:b6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:29:08 2025 by rpki-client