Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/555db92b-d682-3cc1-87b1-a41ffe590257.roa
File: 555db92b-d682-3cc1-87b1-a41ffe590257.roa (raw, json)
Hash identifier: deF9A5kfGhrZZRzkB2NRVb2MFgkB4cqTC6QCJ5t79ns=
Subject key identifier: A2:18:A9:10:BD:91:65:28:B4:48:F8:C4:3B:A7:AB:A7:AC:62:C6:2E
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDE3D28E317ED66332348A300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/555db92b-d682-3cc1-87b1-a41ffe590257.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.228.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:de:3d:28:e3:17:ed:66:33:23:48:a3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=4ac4a785-9ab7-4ec6-b766-4e191e24be2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:2e:f5:c0:f9:68:e9:58:98:f8:51:6c:e2:83:
8f:13:17:e5:02:56:8a:0c:a6:0a:68:be:0c:36:08:
29:c2:68:6a:d6:29:07:7d:9c:fe:0a:da:8a:31:b8:
b9:76:1f:fb:ed:56:b6:d1:d8:64:80:1a:a6:ef:85:
98:3f:dd:ad:53:c3:b7:7d:86:0b:0f:0a:aa:14:53:
52:03:bd:d0:ae:24:be:c1:74:70:d4:6d:ee:12:80:
cd:52:63:c6:fe:db:1c:7f:4c:28:7d:0a:4b:3c:d0:
1a:0e:eb:f0:26:31:13:68:e0:86:b0:55:9c:73:5f:
5c:4b:b3:aa:25:db:04:91:01:54:60:2e:5a:4d:2b:
97:b8:41:ca:5a:a4:b6:9b:4a:10:91:7d:bf:b5:16:
06:8a:5d:8b:29:05:40:14:2e:6d:95:c3:ee:e6:52:
1d:75:da:7c:32:8b:b1:54:8e:a7:a2:ce:82:4a:36:
ca:21:80:87:58:b1:7b:e4:ca:0e:78:17:0e:bc:a5:
29:ed:5c:ab:dd:8d:1f:36:4a:b0:e5:86:d4:f0:3b:
49:d8:46:b1:cc:2a:89:89:b6:8c:fe:c0:05:66:02:
b2:b9:cd:5d:71:69:b2:be:ab:0c:57:ba:30:b9:dc:
d4:4a:f3:b7:f9:99:ec:05:34:47:05:8c:e4:dd:1b:
b1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:18:A9:10:BD:91:65:28:B4:48:F8:C4:3B:A7:AB:A7:AC:62:C6:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/555db92b-d682-3cc1-87b1-a41ffe590257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.228.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:49:40:f2:65:57:7e:d1:7b:b0:e2:89:f9:08:24:c6:5e:8c:
52:dd:9f:1f:f7:2d:1d:98:d3:7a:d7:ea:b8:f1:01:87:d3:de:
a7:6a:28:3b:7f:60:b1:42:3c:c9:b5:62:09:99:21:82:92:31:
c7:05:d9:3a:6d:72:ac:42:23:86:78:bc:42:7a:48:8a:f0:d0:
bf:bf:b2:b0:39:48:f1:7a:db:ae:be:ac:5e:e7:24:62:88:92:
6d:d5:e2:a5:9c:d8:d6:70:20:27:7e:e2:29:b3:ac:ca:29:8a:
75:54:ff:47:2c:cb:0e:ac:01:f2:f2:ba:34:73:0c:d0:63:cf:
6a:76:54:b1:fc:ba:25:7e:9c:1b:f4:dd:52:c2:ae:3b:14:97:
0a:c4:1c:ed:4a:b3:9b:99:68:c6:c1:ca:5a:03:0b:dd:cb:25:
e3:ff:5d:22:a8:2d:95:9e:46:d5:6f:19:02:56:52:3f:89:c0:
b6:50:24:10:a7:2d:db:d6:5f:1c:4f:02:8c:a4:4c:4a:2e:dd:
2a:7d:d7:0e:25:b3:df:78:8d:0b:34:ca:8c:09:fd:de:d4:c0:
f5:ad:06:c3:e5:2f:aa:8c:66:e7:41:3d:ce:40:33:f7:54:a7:
a3:bd:26:88:c3:16:a5:2e:12:c7:94:be:82:64:70:f1:e6:85:
1c:f5:74:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:26:40 2025 by rpki-client