Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63216966-be33-379f-aa2d-efb81c70b007.roa
File: 63216966-be33-379f-aa2d-efb81c70b007.roa (raw, json)
Hash identifier: ntB8rqNWdQLEomI59kjBuYLAMkHbbZsE/au4Z0CNTZI=
Subject key identifier: 71:BD:3F:E9:B1:EC:44:56:10:FC:82:62:83:EB:3A:4E:07:D1:A9:D4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EB3A0114F36E722F1CD44CE80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63216966-be33-379f-aa2d-efb81c70b007.roa
Signing time: Tue 26 Jul 2022 12:00:00 +0000
ROA not before: Tue 26 Jul 2022 12:00:00 +0000
ROA not after: Wed 31 Aug 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.212.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:b3:a0:11:4f:36:e7:22:f1:cd:44:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jul 26 12:00:00 2022 GMT
Not After : Aug 31 04:00:00 2022 GMT
Subject: CN=131847c6-c94f-44b6-8bfc-592c99264641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:ae:7c:16:86:a5:24:11:34:28:db:f2:18:
f9:3a:5b:11:28:6b:29:6d:d2:ed:4d:3f:61:b6:c1:
4a:cd:b0:5c:79:e1:0c:dd:d7:60:ab:b7:bc:67:23:
82:60:23:84:21:49:00:31:d8:a2:ce:05:0f:74:87:
0e:cb:96:ac:27:19:64:0b:3c:ee:64:28:97:1b:b1:
da:81:2c:53:75:44:c1:c7:a2:3e:ae:bf:a0:9b:ce:
a7:84:25:26:c6:11:f9:51:33:c9:ef:0f:05:83:a5:
ce:39:45:35:a9:53:59:f3:84:04:90:f1:60:91:70:
d0:b9:fd:82:b3:72:18:ff:11:57:bd:0d:ff:6e:2f:
06:d0:8b:1d:88:36:a9:62:73:c6:48:df:c6:04:f3:
4f:8c:23:7a:2a:77:f1:f1:44:96:09:1c:c9:ec:e7:
c8:ec:ce:11:62:9e:0b:6a:49:26:53:39:83:cf:f8:
b4:5b:53:6f:7d:5a:b4:42:e0:d7:fb:1d:cd:14:47:
40:be:49:51:2b:23:84:3c:1c:a7:34:65:69:5d:f6:
b4:c7:96:60:6f:0e:5d:bd:6c:62:0d:08:7b:a5:6e:
aa:e3:de:10:ee:f3:bd:bf:69:0f:f3:dd:ec:70:13:
9b:54:c7:a6:e1:bd:9f:45:b4:e0:f7:87:7a:1c:a7:
a2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:BD:3F:E9:B1:EC:44:56:10:FC:82:62:83:EB:3A:4E:07:D1:A9:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/63216966-be33-379f-aa2d-efb81c70b007.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.212.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:d4:02:1b:47:06:f4:b6:03:7f:a6:e0:fa:be:b3:bd:f6:91:
c8:42:ae:bd:ae:31:2c:6a:c6:1a:3b:e0:16:af:01:de:ed:a4:
5a:af:e7:93:1e:d6:3f:68:d8:65:df:af:5d:be:72:08:bf:9c:
8f:eb:ec:f9:aa:9b:e9:6c:14:98:ae:d0:20:f3:34:2f:9e:4c:
e4:b1:b6:f1:ef:1e:50:ba:78:04:0c:aa:8c:02:4b:a0:44:7d:
92:b7:0e:06:34:68:b2:ac:33:28:bc:3d:5b:4e:a8:de:79:a3:
e0:14:a7:b2:68:70:57:20:99:4b:0d:6f:e0:c0:3b:02:f3:cf:
e5:25:5c:05:05:3f:ed:09:3f:b5:fa:dd:81:b3:fd:2b:43:73:
03:ea:4f:80:5f:fd:63:57:1d:96:78:12:90:8f:bd:4a:48:36:
d1:23:4c:80:94:da:2d:c8:4b:c0:c5:ed:60:4c:8d:b0:5e:35:
fb:c8:23:38:0c:ae:81:0e:c7:97:c7:1a:7d:f0:84:72:26:fb:
d3:0d:9d:95:68:dd:c7:5c:09:f3:5b:80:fe:ca:f1:c4:1f:ab:
ca:56:8f:db:26:8f:f9:13:58:79:51:22:e0:44:e0:cf:f2:74:
3c:f1:50:81:77:b9:39:75:3e:67:ff:53:df:fe:56:04:0a:aa:
83:ea:71:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 17:59:53 2025 by rpki-client