Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69e620fe-230a-3bcd-a968-8ba5aa19f791.roa
File: 69e620fe-230a-3bcd-a968-8ba5aa19f791.roa (raw, json)
Hash identifier: hHQHAOz3t+jpR2ZXBobgYsRo/LMMCAXRm8aRzES2xvY=
Subject key identifier: 5D:D3:A6:B6:8A:7B:8E:EC:AB:4A:A8:9F:8D:0C:46:03:A0:41:A0:CD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C90035CD6A9B174A9A3BAC5C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69e620fe-230a-3bcd-a968-8ba5aa19f791.roa
Signing time: Wed 12 Jan 2022 05:00:00 +0000
ROA not before: Wed 12 Jan 2022 05:00:00 +0000
ROA not after: Wed 16 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 13.228.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:90:03:5c:d6:a9:b1:74:a9:a3:ba:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 12 05:00:00 2022 GMT
Not After : Feb 16 05:00:00 2022 GMT
Subject: CN=2b060e0e-1951-4b00-ae61-233bfcfc7df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:91:7b:bb:ea:b1:39:3b:23:89:3f:b8:be:e2:
42:f0:e1:55:13:bd:8c:19:49:da:5e:83:ca:fb:42:
d0:62:70:17:80:86:06:54:b7:73:ff:c1:4c:ca:7f:
dd:94:c9:54:72:3d:1b:88:8a:cb:8d:88:45:92:00:
40:d3:57:9c:9a:c1:c1:d8:3d:45:c2:8f:d3:9d:1c:
e7:79:82:6a:05:76:8c:37:2e:05:ac:bd:27:0f:27:
85:b7:33:fb:87:59:d1:6c:88:ed:84:92:53:ca:13:
76:4a:87:05:3f:da:bd:af:68:c2:55:90:65:52:51:
48:e2:f2:82:f0:4c:76:3c:74:ae:7c:64:12:82:65:
78:ac:66:fb:a0:17:60:58:44:32:95:9a:3f:8c:95:
a4:5f:77:b2:41:65:4f:7b:c0:1b:51:ed:51:08:8c:
bc:a5:05:70:59:85:05:f8:3b:af:83:67:a9:61:21:
5f:2d:5b:af:71:5c:bb:07:36:7e:1b:bf:5e:02:d0:
b7:b1:80:c4:3f:72:b9:d1:cf:11:58:b7:12:5b:1f:
71:d6:49:1b:37:9a:ba:da:ce:c5:32:48:16:c2:9d:
c4:68:d1:4b:cb:34:bc:f1:d0:f6:e5:41:eb:d8:9e:
40:08:93:36:2f:02:ae:ae:f8:ec:95:89:4a:1d:4b:
f5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:A6:B6:8A:7B:8E:EC:AB:4A:A8:9F:8D:0C:46:03:A0:41:A0:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/69e620fe-230a-3bcd-a968-8ba5aa19f791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.228.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:75:4d:90:ae:82:09:e9:ce:53:4b:77:f1:05:80:b5:b7:a0:
82:84:a8:44:20:5a:20:17:66:38:00:0b:c4:53:df:69:ad:59:
a8:39:73:5f:39:89:4f:28:a0:b7:0f:21:85:86:cd:16:be:c1:
fe:ac:36:71:17:26:54:59:11:38:63:47:d4:1f:8f:6d:9a:9f:
a1:8b:36:b4:77:d7:e7:74:42:ca:3a:96:a4:f5:5c:fb:e9:20:
c6:40:31:ba:b1:0c:c7:59:6e:20:25:aa:9b:11:e7:0d:91:51:
f4:e5:80:a9:a6:a7:f3:46:05:c3:e2:3c:84:f3:a5:45:24:6a:
d8:43:1b:30:2e:7b:c7:19:d5:9d:52:d8:e7:43:4d:43:70:81:
18:b3:c7:b6:ad:9f:bf:27:0c:c7:19:4c:0b:4b:b4:34:2b:64:
31:71:49:88:df:35:0c:bb:ce:32:ff:ed:6e:4d:4b:6c:49:0e:
2d:d3:56:a6:28:3b:23:40:2e:c6:b7:76:db:9a:a3:84:8a:16:
a2:1a:d5:55:08:71:10:53:91:0f:27:cd:3e:20:57:ba:04:b2:
c1:92:64:92:f9:72:0e:d1:46:86:a2:c3:3b:0c:a6:8e:a6:8b:
ff:4d:58:cb:94:80:b7:d5:63:07:9d:42:21:d5:f3:88:b8:84:
68:79:b6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:52:43 2025 by rpki-client