Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58cc81d5-a368-3262-83a6-9aabb3a703b0.roa
File: 58cc81d5-a368-3262-83a6-9aabb3a703b0.roa (raw, json)
Hash identifier: zNicvYrn17e4gnhWDwfPOyZZ1J1NKliXy2KCQ8sX0e8=
Subject key identifier: A5:FC:29:C8:43:DE:54:9B:0C:D7:2C:F0:47:4F:4F:E7:C1:F3:82:51
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F01F065E8171AE1A36EF53300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58cc81d5-a368-3262-83a6-9aabb3a703b0.roa
Signing time: Tue 23 Aug 2022 12:00:00 +0000
ROA not before: Tue 23 Aug 2022 12:00:00 +0000
ROA not after: Wed 28 Sep 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.56.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:01:f0:65:e8:17:1a:e1:a3:6e:f5:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 23 12:00:00 2022 GMT
Not After : Sep 28 04:00:00 2022 GMT
Subject: CN=468ca884-f385-4d6c-af61-d4b3363b51f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:9d:6a:0b:4d:bb:f1:a2:e8:81:93:47:e2:
1f:79:dd:21:7c:6a:f0:1e:dc:2a:7b:a9:14:22:39:
1c:f3:cd:21:69:e6:38:ae:e5:4e:ad:74:b1:d3:4c:
cb:87:67:fe:da:b4:2c:24:bc:0d:fd:eb:1c:35:7f:
c2:08:6a:75:c3:8d:6f:3b:b1:a2:60:cf:de:4f:3f:
3f:88:9a:d3:2a:ab:3b:44:06:db:aa:a4:5a:46:55:
b4:c5:26:fd:74:b3:91:5f:c5:91:06:5c:15:62:be:
a7:d1:b1:40:4c:a4:5d:f8:b0:f2:26:61:f5:a9:91:
02:a5:c2:61:d7:91:5d:d0:f9:5e:f6:7a:31:41:f3:
47:e0:3b:f2:d8:3c:62:c9:7d:c9:35:a0:dd:d8:ce:
b9:73:44:21:75:b3:45:2f:24:ff:7f:21:9b:dd:66:
3e:bd:4b:41:ac:27:28:74:79:cf:c0:12:86:74:ba:
78:58:90:97:2a:c9:3a:c3:74:a7:59:be:e4:53:13:
6c:94:51:d4:ff:0b:c4:4c:fa:38:3d:ab:f4:81:81:
9a:7b:e7:cf:3c:fe:de:f0:0e:c1:d8:c1:75:f9:b1:
9d:34:de:e3:db:44:4b:a0:f1:c2:21:6a:45:9f:26:
f1:02:0f:3a:b2:d5:60:5e:c5:19:c3:cb:9c:66:9a:
29:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FC:29:C8:43:DE:54:9B:0C:D7:2C:F0:47:4F:4F:E7:C1:F3:82:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/58cc81d5-a368-3262-83a6-9aabb3a703b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.56.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:82:61:01:70:1b:3c:a2:de:1d:f4:81:b1:a2:b6:25:e7:31:
59:64:71:e3:77:af:38:5f:08:9b:5c:01:77:20:d4:3b:03:ce:
90:b6:fd:6d:4f:3b:74:2c:93:cf:10:c2:a8:4d:93:35:ee:77:
0f:6b:63:9f:ae:9f:69:67:a8:a5:7e:34:9d:6b:6f:e5:1d:75:
37:04:24:69:59:04:f9:3a:fb:c2:7b:cd:69:c6:41:cd:44:13:
cc:9b:42:a5:65:55:6e:86:93:f1:af:fa:60:83:1c:03:5b:54:
08:94:2e:73:ab:33:7e:3d:2b:97:42:d6:8d:1f:b0:f6:91:da:
89:a5:fc:81:65:01:7c:0b:98:ba:1d:e8:dd:ad:d1:d1:34:e7:
23:9c:7c:cc:be:72:a7:87:8e:25:7d:84:db:5f:2d:4f:11:e6:
4c:07:0d:23:4f:c8:67:6f:9f:bb:51:08:d8:64:99:e7:31:03:
fe:dc:36:c9:da:70:b1:25:98:73:fc:3a:1a:21:c9:ba:fa:f9:
9a:d9:30:e6:fe:5d:46:13:10:36:91:42:f3:aa:e8:b3:dc:d5:
3a:c3:b7:fa:1d:bd:38:56:73:7c:c6:c5:16:63:73:55:05:0a:
f0:b9:c9:96:f2:8e:7c:59:24:21:88:2a:75:e9:f7:53:cc:a5:
7b:25:2f:99
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD8B8GXoFxrho271MwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgyMzEyMDAwMFoXDTIyMDkyODA0MDAwMFowLzEtMCsGA1UEAxMk
NDY4Y2E4ODQtZjM4NS00ZDZjLWFmNjEtZDRiMzM2M2I1MWYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzSdagtNu/Gi6IGTR+Ifed0hfGrwHtwqe6kU
Ijkc880haeY4ruVOrXSx00zLh2f+2rQsJLwN/escNX/CCGp1w41vO7GiYM/eTz8/
iJrTKqs7RAbbqqRaRlW0xSb9dLORX8WRBlwVYr6n0bFATKRd+LDyJmH1qZECpcJh
15Fd0Ple9noxQfNH4Dvy2DxiyX3JNaDd2M65c0QhdbNFLyT/fyGb3WY+vUtBrCco
dHnPwBKGdLp4WJCXKsk6w3SnWb7kUxNslFHU/wvETPo4Pav0gYGae+fPPP7e8A7B
2MF1+bGdNN7j20RLoPHCIWpFnybxAg86stVgXsUZw8ucZpopIwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFKX8KchD3lSbDNcs8EdPT+fB84JRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNThjYzgxZDUtYTM2OC0z
MjYyLTgzYTYtOWFhYmIzYTcwM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDTgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEApYJhAXAbPKLeHfSBsaK2JecxWWRx43evOF8Im1wBdyDUOwPOkLb9bU87
dCyTzxDCqE2TNe53D2tjn66faWeopX40nWtv5R11NwQkaVkE+Tr7wnvNacZBzUQT
zJtCpWVVboaT8a/6YIMcA1tUCJQuc6szfj0rl0LWjR+w9pHaiaX8gWUBfAuYuh3o
3a3R0TTnI5x8zL5yp4eOJX2E218tTxHmTAcNI0/IZ2+fu1EI2GSZ5zED/tw2ydpw
sSWYc/w6GiHJuvr5mtkw5v5dRhMQNpFC86ros9zVOsO3+h29OFZzfMbFFmNzVQUK
8LnJlvKOfFkkIYgqden3U8yleyUvmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:59 2025 by rpki-client