Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43d2aec0-1f11-381d-adfb-8c8747624bb9.roa
File: 43d2aec0-1f11-381d-adfb-8c8747624bb9.roa (raw, json)
Hash identifier: MPdMiBweaioyu0V+chjAxE2rL6e48th27TF4UvbAIV0=
Subject key identifier: 09:61:B2:DE:F8:08:AB:42:B0:9B:18:28:D6:AB:35:15:42:C6:86:26
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DC8F21D08DC9965B5418CBD40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43d2aec0-1f11-381d-adfb-8c8747624bb9.roa
Signing time: Tue 03 May 2022 12:00:00 +0000
ROA not before: Tue 03 May 2022 12:00:00 +0000
ROA not after: Wed 08 Jun 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.212.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:c8:f2:1d:08:dc:99:65:b5:41:8c:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 3 12:00:00 2022 GMT
Not After : Jun 8 04:00:00 2022 GMT
Subject: CN=f4a8790c-83d7-41d7-a7ba-35172026bcce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:33:fb:c4:d7:b5:03:3a:9b:b5:c8:4c:a8:
4e:f9:79:3a:8f:ef:43:b8:c2:54:6d:5a:ba:43:94:
36:40:92:d8:a6:81:f9:fb:7c:0c:d9:e4:9b:04:f9:
5a:6b:ef:2e:8f:a8:d1:23:b6:c6:f8:a1:eb:38:a7:
c5:44:5d:d2:85:48:15:ee:38:ce:13:84:1e:18:e8:
20:e7:35:cf:a1:00:17:c1:81:4f:c6:cd:fb:39:91:
ae:6d:98:2d:c0:fa:80:bb:f5:5b:79:ae:cd:89:f4:
23:35:4a:f8:c2:47:63:1d:78:22:1a:ba:4a:6a:c7:
4b:a2:3a:dc:89:b4:36:9b:b6:fa:0a:c6:d2:ed:25:
1e:cb:50:f9:cc:48:95:61:34:59:ea:a4:8c:80:15:
47:52:37:fe:7b:8c:f1:0c:f3:ee:fa:61:b1:8e:0d:
ff:83:52:ea:07:16:1a:6e:d0:08:8e:27:71:f1:9e:
3f:d1:ce:15:32:9e:89:00:29:1e:fc:65:fa:86:b3:
0d:94:43:8b:29:f8:56:79:24:c1:42:ca:22:8f:2d:
0b:16:e3:6a:b6:74:9c:de:13:f8:19:36:d4:7c:75:
6d:a8:21:36:8c:c2:00:b0:6b:5c:e6:5b:98:51:2a:
c0:1f:65:51:d2:fb:be:2e:9c:e4:e8:08:41:12:3f:
19:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:61:B2:DE:F8:08:AB:42:B0:9B:18:28:D6:AB:35:15:42:C6:86:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/43d2aec0-1f11-381d-adfb-8c8747624bb9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.212.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:39:57:86:2d:1b:87:20:74:3a:e6:0c:ca:70:2b:e8:d5:15:
2b:71:25:05:18:38:cb:4d:d5:65:30:b1:38:9c:04:46:9a:d4:
83:a3:85:69:97:f1:23:7f:c2:3d:c2:08:6b:ea:74:59:60:42:
98:17:c8:03:36:c1:b6:fc:c3:1f:e0:af:3f:e0:cf:4a:f8:79:
46:47:3a:e1:4e:95:b9:16:d3:7a:c2:7a:68:4a:7d:24:97:de:
78:3e:95:49:1e:b6:1b:09:74:38:52:8b:6f:e7:22:87:c9:57:
db:bd:47:b1:25:89:c3:f4:4d:8f:3b:74:c8:32:09:e3:ff:b0:
bf:f9:92:43:6e:17:9a:0d:a7:e1:57:8b:5d:31:82:c3:33:88:
f8:92:01:f0:a6:d6:81:8f:33:64:8d:ea:cc:25:41:66:3f:6b:
45:a6:07:ab:91:cc:57:c0:b3:92:27:69:dc:f0:90:ce:e9:51:
b1:f9:eb:b3:fa:23:8b:45:10:ff:5d:c5:d8:9a:2d:af:89:f0:
59:9f:6d:b5:8b:20:89:a2:14:8c:03:df:c3:24:e8:68:ea:d2:
9f:ba:76:78:03:b4:00:11:07:68:0f:da:43:72:b3:12:a3:5b:
15:60:ce:ad:13:b8:59:de:e8:0a:db:90:16:f8:2b:7a:de:ad:
bf:2e:31:13
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD3I8h0I3JlltUGMvUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUwMzEyMDAwMFoXDTIyMDYwODA0MDAwMFowLzEtMCsGA1UEAxMk
ZjRhODc5MGMtODNkNy00MWQ3LWE3YmEtMzUxNzIwMjZiY2NlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcwz+8TXtQM6m7XITKhO+Xk6j+9DuMJUbVq6
Q5Q2QJLYpoH5+3wM2eSbBPlaa+8uj6jRI7bG+KHrOKfFRF3ShUgV7jjOE4QeGOgg
5zXPoQAXwYFPxs37OZGubZgtwPqAu/Vbea7NifQjNUr4wkdjHXgiGrpKasdLojrc
ibQ2m7b6CsbS7SUey1D5zEiVYTRZ6qSMgBVHUjf+e4zxDPPu+mGxjg3/g1LqBxYa
btAIjidx8Z4/0c4VMp6JACke/GX6hrMNlEOLKfhWeSTBQsoijy0LFuNqtnSc3hP4
GTbUfHVtqCE2jMIAsGtc5luYUSrAH2VR0vu+Lpzk6AhBEj8ZYwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAlhst74CKtCsJsYKNarNRVCxoYmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDNkMmFlYzAtMWYxMS0z
ODFkLWFkZmItOGM4NzQ3NjI0YmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDdQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsTlXhi0bhyB0OuYMynAr6NUVK3ElBRg4y03VZTCxOJwERprUg6OFaZfx
I3/CPcIIa+p0WWBCmBfIAzbBtvzDH+CvP+DPSvh5Rkc64U6VuRbTesJ6aEp9JJfe
eD6VSR62Gwl0OFKLb+cih8lX271HsSWJw/RNjzt0yDIJ4/+wv/mSQ24Xmg2n4VeL
XTGCwzOI+JIB8KbWgY8zZI3qzCVBZj9rRaYHq5HMV8Czkidp3PCQzulRsfnrs/oj
i0UQ/13F2Jotr4nwWZ9ttYsgiaIUjAPfwyToaOrSn7p2eAO0ABEHaA/aQ3KzEqNb
FWDOrRO4Wd7oCtuQFvgret6tvy4xEw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:03 2025 by rpki-client