Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42ffd22c-04da-311d-9a4c-cf8131cc0f59.roa
File: 42ffd22c-04da-311d-9a4c-cf8131cc0f59.roa (raw, json)
Hash identifier: x8Pe5T9xl7lyZ5glvjgHwWQRkByagVOrQuUkegHEswI=
Subject key identifier: F9:16:9A:43:C1:C2:40:98:45:D1:92:E2:19:3F:A9:C7:1E:C6:B6:12
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840621AD87EB0E5190BE6DC7C40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42ffd22c-04da-311d-9a4c-cf8131cc0f59.roa
Signing time: Tue 27 Dec 2022 12:00:00 +0000
ROA not before: Tue 27 Dec 2022 12:00:00 +0000
ROA not after: Wed 01 Feb 2023 05:00:00 +0000
asID: 16509
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:62:1a:d8:7e:b0:e5:19:0b:e6:dc:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 27 12:00:00 2022 GMT
Not After : Feb 1 05:00:00 2023 GMT
Subject: CN=24672d15-1c77-4db3-bea9-756076f7b60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d2:09:4e:98:2f:3e:a7:b6:98:f7:54:ce:e9:
e8:5a:ba:68:40:99:f9:46:86:4a:28:6e:53:90:cd:
e1:b7:07:99:d8:09:70:ef:1c:2f:7e:e0:12:3c:40:
09:04:5e:bd:4b:bc:18:ee:64:8a:08:e9:bf:bd:0c:
ec:2e:68:55:bb:09:95:dc:8a:e8:57:8e:48:a2:75:
63:6e:74:6a:e9:d3:cd:c6:0c:db:84:20:05:33:be:
ef:aa:81:74:a7:42:70:52:2d:b6:49:15:de:a8:68:
98:f7:63:2d:33:af:69:3f:f7:d2:94:77:06:93:f8:
ed:95:db:80:1f:a2:71:0f:ee:15:34:1b:10:90:14:
ae:52:d7:57:fc:c5:02:8f:f0:21:d1:e7:34:f2:26:
b7:33:1a:b4:7c:95:d0:9c:77:cf:39:a4:d1:63:b0:
be:9c:d2:ce:5b:30:c5:36:88:35:96:d0:5a:1c:e6:
55:d8:ce:f3:8f:d3:45:e3:0c:25:dd:04:31:8b:e7:
8b:28:7e:ee:b7:c4:cc:e8:1d:5e:37:b5:f9:1c:64:
b9:2c:cc:64:7e:65:fd:f6:17:54:c2:df:82:00:6a:
80:fe:c6:79:16:7c:d9:09:ba:b7:b3:fd:fa:54:0b:
71:4b:90:a6:a6:6f:59:83:9b:3d:91:3b:4b:29:c7:
15:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:16:9A:43:C1:C2:40:98:45:D1:92:E2:19:3F:A9:C7:1E:C6:B6:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/42ffd22c-04da-311d-9a4c-cf8131cc0f59.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:56:cd:43:61:d9:ae:7a:4d:4d:e2:4e:54:35:d7:b7:e9:c6:
ff:26:87:9a:e1:f9:67:11:24:47:20:78:8c:eb:2d:4f:dd:99:
27:99:14:a3:13:a3:98:f8:4d:e1:2e:02:b7:a4:de:ad:4b:c6:
2f:48:7a:40:1c:f2:17:46:04:6f:ff:77:f9:bd:94:47:37:30:
23:4a:1d:16:bd:a7:be:27:09:0d:9b:a2:14:2f:6e:b9:35:a2:
ff:de:ec:be:a4:d6:97:63:10:0f:3c:bd:5e:40:29:a2:6f:3b:
6e:7a:d7:0b:45:b3:74:75:0a:6f:21:19:e0:11:d5:3f:45:3d:
34:4d:45:42:d5:1c:b1:76:b4:8e:34:92:b6:86:bb:b7:bf:18:
19:3a:9c:eb:b8:1b:45:d3:c8:6a:3a:1a:a1:42:fc:8c:be:e6:
d7:1a:9e:45:91:ca:f9:13:fd:70:5a:22:9e:42:6b:a4:f2:c2:
ce:04:db:ca:4f:49:e3:81:bf:2f:e3:88:d2:72:77:22:83:64:
e6:ed:72:54:4d:92:7d:01:74:fd:ba:89:a8:db:c1:b5:e2:35:
4c:5e:bb:a9:b9:ef:21:c2:ea:8d:23:6a:42:62:f3:21:9f:0e:
1b:ac:aa:c6:dc:bc:00:43:f1:31:3e:77:7e:3e:fa:c2:54:f2:
2e:40:1a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:52:09 2025 by rpki-client