Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c16e9a8-bc08-39af-a83b-f32e61e0022d.roa
File: 4c16e9a8-bc08-39af-a83b-f32e61e0022d.roa (raw, json)
Hash identifier: TuLCCoyGV9637uNJgpf65b9k/VWmPmeE8ekSHe+uEPs=
Subject key identifier: A3:86:88:08:0E:D4:3B:D6:BF:72:10:69:BD:4E:B9:18:ED:36:AF:FE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D7AB8BEC0C807C8836643D4C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c16e9a8-bc08-39af-a83b-f32e61e0022d.roa
Signing time: Wed 06 Apr 2022 04:00:00 +0000
ROA not before: Wed 06 Apr 2022 04:00:00 +0000
ROA not after: Wed 11 May 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:7a:b8:be:c0:c8:07:c8:83:66:43:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 6 04:00:00 2022 GMT
Not After : May 11 04:00:00 2022 GMT
Subject: CN=cef87e61-3b9c-4c7e-9905-f299093c9b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:30:0d:53:94:f2:6e:f9:0b:38:44:c9:90:90:
2d:94:58:cc:d3:c3:ba:94:eb:f2:65:a8:e2:04:8e:
23:92:a4:ce:f7:a3:b3:e5:ed:db:af:1f:06:05:24:
91:db:32:d1:08:e8:94:05:bb:07:75:12:23:0c:6d:
64:aa:f2:18:3e:bd:fd:78:1e:9e:2a:82:95:50:74:
28:e6:3c:a2:db:22:de:77:55:b9:cc:13:6b:14:6c:
06:73:bf:2d:91:11:63:fd:cd:fb:a0:66:be:1c:62:
b2:83:23:56:f7:1e:f9:42:c9:26:ee:0c:a6:42:8d:
a1:19:35:98:59:82:3d:df:a4:98:5a:4a:54:7b:d5:
ae:61:2f:27:70:fe:6b:14:06:1c:8d:6b:6d:d1:b0:
c7:08:6d:a3:7d:d8:46:e1:ba:1f:7a:b2:f2:d1:98:
84:e0:b2:50:69:e1:c4:29:7b:a9:ac:98:ab:29:c9:
b9:34:05:1a:8a:47:94:69:8e:98:12:6e:82:fd:71:
1a:9c:9f:ad:d4:c7:9e:85:d9:e2:f0:5a:a6:13:ef:
c9:b0:8e:28:5a:b4:9e:15:d4:b0:6e:d8:01:37:b2:
13:84:12:22:97:d0:11:5d:8b:83:04:fb:af:57:fc:
1e:e0:0e:e1:35:ec:1b:e8:5c:3c:dc:c9:be:89:c9:
99:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:86:88:08:0E:D4:3B:D6:BF:72:10:69:BD:4E:B9:18:ED:36:AF:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4c16e9a8-bc08-39af-a83b-f32e61e0022d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a3:dc:34:12:21:61:8e:cf:df:69:b5:77:82:11:b9:b4:7b:
40:f3:bf:a3:ea:ac:ce:1e:48:04:76:a3:9f:13:4b:51:ee:b6:
66:91:f5:b4:07:c7:9d:a2:1e:a5:d5:59:63:99:ca:2c:2c:f1:
a4:f6:0a:2f:83:af:60:02:00:8d:54:66:6a:e8:32:57:30:3b:
7c:87:77:71:0c:e0:7a:fa:b8:3f:27:64:24:0a:f1:2f:17:75:
8c:3a:c9:af:ed:81:0f:80:da:98:c7:8a:cd:cf:58:7d:ad:84:
ae:0d:53:24:0c:6c:a7:55:e8:ee:9f:14:1e:12:f2:88:7b:bf:
0d:18:31:fa:a6:90:0a:f1:55:8b:1e:1c:c9:56:8a:73:05:8f:
39:f5:27:2b:38:9f:05:cc:34:d8:9f:1b:c2:d0:4b:a0:0d:2b:
0a:d6:4b:00:fc:74:32:06:d5:ee:15:15:d5:23:d4:1d:4b:ab:
0b:b0:9b:af:0d:5b:1f:98:99:4c:0f:9e:c9:90:7a:ef:e1:38:
55:88:63:58:a7:c6:b3:45:31:62:50:ba:c0:93:41:b3:55:a9:
a5:13:df:2d:6c:d4:ae:18:85:47:43:2c:ef:9d:e9:f9:70:4b:
7b:2f:f3:19:9f:f2:ef:cd:09:81:e2:f9:4e:f3:95:23:fa:ec:
f4:42:42:04
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD16uL7AyAfIg2ZD1MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDQwNjA0MDAwMFoXDTIyMDUxMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2VmODdlNjEtM2I5Yy00YzdlLTk5MDUtZjI5OTA5M2M5YjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTANU5TybvkLOETJkJAtlFjM08O6lOvyZaji
BI4jkqTO96Oz5e3brx8GBSSR2zLRCOiUBbsHdRIjDG1kqvIYPr39eB6eKoKVUHQo
5jyi2yLed1W5zBNrFGwGc78tkRFj/c37oGa+HGKygyNW9x75Qskm7gymQo2hGTWY
WYI936SYWkpUe9WuYS8ncP5rFAYcjWtt0bDHCG2jfdhG4boferLy0ZiE4LJQaeHE
KXuprJirKcm5NAUaikeUaY6YEm6C/XEanJ+t1Meehdni8FqmE+/JsI4oWrSeFdSw
btgBN7IThBIil9ARXYuDBPuvV/we4A7hNewb6Fw83Mm+icmZ/wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKOGiAgO1DvWv3IQab1OuRjtNq/+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNGMxNmU5YTgtYmMwOC0z
OWFmLWE4M2ItZjMyZTYxZTAwMjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDeAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAKaPcNBIhYY7P32m1d4IRubR7QPO/o+qszh5IBHajnxNLUe62ZpH1tAfH
naIepdVZY5nKLCzxpPYKL4OvYAIAjVRmaugyVzA7fId3cQzgevq4PydkJArxLxd1
jDrJr+2BD4DamMeKzc9Yfa2Erg1TJAxsp1Xo7p8UHhLyiHu/DRgx+qaQCvFVix4c
yVaKcwWPOfUnKzifBcw02J8bwtBLoA0rCtZLAPx0MgbV7hUV1SPUHUurC7Cbrw1b
H5iZTA+eyZB67+E4VYhjWKfGs0UxYlC6wJNBs1WppRPfLWzUrhiFR0Ms753p+XBL
ey/zGZ/y780JgeL5TvOVI/rs9EJCBA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:22:31 2025 by rpki-client