Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fcd47f5-33fa-3777-a7f6-4d564bfac2a8.roa
File: 4fcd47f5-33fa-3777-a7f6-4d564bfac2a8.roa (raw, json)
Hash identifier: Q4pvE7IsT5XqqPCKSsDDZ/a0fqoVj7qxsROXUIcj2Gg=
Subject key identifier: 90:CA:D6:2F:5A:B3:E6:AE:D4:87:5C:5B:BE:8E:4A:D6:3B:84:D0:93
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDE3D1E399C5E765EED789D00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fcd47f5-33fa-3777-a7f6-4d564bfac2a8.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.228.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:de:3d:1e:39:9c:5e:76:5e:ed:78:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=52f0e307-0e65-4ab2-b34a-2e40a8d27135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5c:10:13:ac:ca:04:8d:d0:00:d8:a4:04:cb:
ef:ef:70:34:f8:46:15:dd:bf:29:2f:d0:12:58:6e:
de:89:83:6f:88:8f:fb:10:bb:e7:25:2b:6b:35:06:
23:bc:60:18:68:ab:31:02:0c:f3:ab:e3:0f:7d:69:
a2:17:c3:30:48:7f:fe:1e:42:9d:ce:d4:42:9f:66:
1c:13:82:4a:04:46:7a:7d:a4:d1:be:3e:4b:f2:eb:
45:21:fb:48:0a:9e:d5:5a:5f:e3:91:9c:45:57:59:
0b:97:8d:ee:88:99:9d:3a:e5:44:c0:ef:a9:7d:38:
d5:ff:6b:c2:a2:df:af:e9:92:ad:6a:49:6c:09:1d:
db:dd:e8:1c:7f:ff:67:7c:e1:91:11:8c:b8:75:eb:
88:42:64:1e:7f:fd:8b:72:43:f9:5b:d2:89:07:00:
83:af:8f:51:f9:7d:0f:24:a8:fd:58:e2:49:28:08:
d7:6a:77:fa:d4:1d:87:ae:18:93:ab:c5:ee:3a:42:
a2:de:d5:4f:00:e4:31:37:78:8b:29:b6:00:36:1f:
03:f0:2a:04:9e:83:9d:7e:00:65:3e:61:5e:7c:9b:
2e:fb:13:34:d0:60:c1:a7:2b:fa:40:d7:ad:cb:6e:
db:86:f8:65:c2:76:93:9c:df:2f:53:c0:22:32:6c:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:D6:2F:5A:B3:E6:AE:D4:87:5C:5B:BE:8E:4A:D6:3B:84:D0:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/4fcd47f5-33fa-3777-a7f6-4d564bfac2a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.228.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:45:23:fb:4e:44:93:6f:f1:06:d5:1f:83:c5:9e:a3:11:ac:
f4:55:b9:8e:94:d3:60:71:36:92:e0:aa:eb:3b:bb:a4:c5:79:
8f:49:ee:7a:f1:f5:1d:7b:27:b1:71:d1:50:39:dd:32:c8:40:
09:17:53:0b:f7:b2:c5:11:88:b3:99:82:3a:08:68:c7:4a:94:
d7:68:24:c9:10:35:27:18:0d:17:d0:36:0a:af:68:96:a9:e8:
a3:d4:d6:b3:9f:d7:0c:0a:ec:5c:62:2f:e5:4e:a3:c3:5f:a9:
df:b7:6b:3f:a4:97:57:f4:2b:8e:a7:89:20:30:51:7b:f6:1b:
e3:74:91:0b:99:23:d7:b1:74:60:60:82:17:8c:e5:4a:2e:73:
b7:67:2f:95:74:c1:dc:45:1b:a9:36:30:37:b5:e0:b2:07:ff:
08:3b:ac:c2:b2:4e:48:d2:b2:9c:ce:50:b0:b9:3b:ac:a1:6d:
50:f5:49:2f:20:3f:29:a3:bc:e1:e5:de:e9:0e:7f:93:28:02:
b5:be:90:24:ae:7e:47:53:58:88:a0:78:04:df:c4:dc:ff:c2:
db:2e:74:e4:9e:f3:dc:2b:8f:93:6a:14:69:f6:7a:72:94:d3:
1f:b5:a5:7e:2d:30:87:24:f5:5c:e0:db:9c:39:5f:4b:ad:f6:
0d:89:8d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:56:58 2025 by rpki-client