Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46042add-edc9-3599-995f-eeeaec67b66c.roa
File: 46042add-edc9-3599-995f-eeeaec67b66c.roa (raw, json)
Hash identifier: FEdzbkXwyFKEp+EyxGulnkrJZegR1AA7YMUk/eAobS8=
Subject key identifier: 03:5D:87:87:62:B4:EE:41:4F:D9:13:35:72:EA:51:64:40:98:3A:32
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583E1758D0CFA4CDB0D7EADB6A40
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46042add-edc9-3599-995f-eeeaec67b66c.roa
Signing time: Tue 31 May 2022 12:00:00 +0000
ROA not before: Tue 31 May 2022 12:00:00 +0000
ROA not after: Wed 06 Jul 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:17:58:d0:cf:a4:cd:b0:d7:ea:db:6a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: May 31 12:00:00 2022 GMT
Not After : Jul 6 04:00:00 2022 GMT
Subject: CN=84ba3187-750f-4172-85b9-41eb58187e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:44:8b:9e:3d:10:72:c2:d9:9c:1a:2d:75:c1:
30:56:1f:7d:f3:9f:39:eb:4f:63:1f:07:08:b2:77:
2b:ba:b0:f6:5e:96:53:7d:37:0e:d4:72:af:a3:ca:
0e:3d:77:cb:53:4a:95:f4:39:83:97:b8:3c:3d:41:
3b:75:31:66:ab:5b:94:07:dc:7d:30:60:03:3e:28:
a0:82:bf:f7:75:ca:03:ec:cd:39:df:d4:47:8e:47:
fa:eb:c7:1e:0f:65:17:ab:0b:47:c0:42:2d:76:7e:
1b:67:e1:63:75:bf:34:f3:32:87:12:02:40:c9:ef:
16:08:66:13:da:6d:4b:75:ac:49:87:13:12:f8:4f:
39:f3:8b:97:08:70:50:5d:5f:db:db:25:55:96:3b:
0b:2d:a3:98:63:68:6f:bd:df:93:58:bd:3f:98:02:
57:80:72:6b:4d:d1:4e:53:d7:d4:41:6e:e9:49:f4:
bf:08:4d:3b:04:49:f6:17:4a:08:b3:85:d8:ff:d3:
63:1b:e4:6d:67:0e:c7:93:d0:d9:f3:56:1a:6a:fa:
52:f0:d1:59:92:ab:ef:92:fb:b1:66:0a:3d:e9:10:
d7:55:fd:63:b0:01:b2:6f:d5:e9:ed:cf:94:ff:e2:
2d:9a:bc:48:d1:f4:fa:f1:5f:9e:36:e8:71:7c:9b:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:5D:87:87:62:B4:EE:41:4F:D9:13:35:72:EA:51:64:40:98:3A:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/46042add-edc9-3599-995f-eeeaec67b66c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:f3:d4:b8:b7:86:a6:24:bf:c9:76:e6:31:bc:24:66:19:d3:
85:84:b4:8e:27:1a:62:fd:61:23:fc:da:3d:bd:f0:f5:e9:24:
93:ac:ba:b9:35:77:ec:15:4b:8b:78:a4:ed:13:c0:9b:d3:73:
28:88:12:51:1f:bc:e2:d2:a8:68:54:fc:fd:97:1f:87:59:4e:
98:85:ae:00:38:08:07:cf:94:de:2b:1e:d9:aa:a0:df:16:f2:
ef:2d:a0:ac:3d:e9:9b:dc:fa:ed:26:c7:8e:a4:20:82:83:e7:
4a:ee:5d:fe:53:1e:1d:13:d1:ce:d1:dd:91:83:f1:0e:fb:54:
82:1c:3a:df:b8:e0:6c:bf:9e:e8:c5:95:07:b1:f1:b3:ae:4e:
18:6f:a6:c5:ec:13:14:59:33:b5:42:f6:9c:cc:99:44:d1:b6:
fb:fc:5b:b1:bb:ed:62:a2:1c:82:71:3a:4c:cc:dc:fe:32:b6:
03:71:9e:df:c1:40:f4:d2:39:b2:ae:03:5e:bb:80:31:41:54:
f7:ba:17:21:6c:59:0c:8c:9a:8c:dd:25:8c:a5:7e:72:09:fb:
ba:d0:8e:03:64:96:0d:92:9e:be:2a:a5:37:cc:cc:e0:13:94:
e1:1d:33:e4:6b:b3:e7:d6:7c:7a:cb:e8:f1:a7:f1:53:03:2d:
86:3e:e1:67
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD4XWNDPpM2w1+rbakAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDUzMTEyMDAwMFoXDTIyMDcwNjA0MDAwMFowLzEtMCsGA1UEAxMk
ODRiYTMxODctNzUwZi00MTcyLTg1YjktNDFlYjU4MTg3ZTc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkSLnj0QcsLZnBotdcEwVh998585609jHwcI
sncrurD2XpZTfTcO1HKvo8oOPXfLU0qV9DmDl7g8PUE7dTFmq1uUB9x9MGADPiig
gr/3dcoD7M0539RHjkf668ceD2UXqwtHwEItdn4bZ+Fjdb808zKHEgJAye8WCGYT
2m1LdaxJhxMS+E8584uXCHBQXV/b2yVVljsLLaOYY2hvvd+TWL0/mAJXgHJrTdFO
U9fUQW7pSfS/CE07BEn2F0oIs4XY/9NjG+RtZw7Hk9DZ81YaavpS8NFZkqvvkvux
Zgo96RDXVf1jsAGyb9Xp7c+U/+ItmrxI0fT68V+eNuhxfJteyQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFANdh4ditO5BT9kTNXLqUWRAmDoyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNDYwNDJhZGQtZWRjOS0z
NTk5LTk5NWYtZWVlYWVjNjdiNjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDdAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAnPPUuLeGpiS/yXbmMbwkZhnThYS0jicaYv1hI/zaPb3w9ekkk6y6uTV3
7BVLi3ik7RPAm9NzKIgSUR+84tKoaFT8/Zcfh1lOmIWuADgIB8+U3ise2aqg3xby
7y2grD3pm9z67SbHjqQggoPnSu5d/lMeHRPRztHdkYPxDvtUghw637jgbL+e6MWV
B7Hxs65OGG+mxewTFFkztUL2nMyZRNG2+/xbsbvtYqIcgnE6TMzc/jK2A3Ge38FA
9NI5sq4DXruAMUFU97oXIWxZDIyajN0ljKV+cgn7utCOA2SWDZKeviqlN8zM4BOU
4R0z5Guz59Z8esvo8afxUwMthj7hZw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:27:25 2025 by rpki-client