Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f281b07-4e70-323c-a32c-77138959d4ea.roa
File: 6f281b07-4e70-323c-a32c-77138959d4ea.roa (raw, json)
Hash identifier: 4xL/2P7HmHfIQQOBdqlYIVCxKq3f88gImUAozJ1lXx0=
Subject key identifier: 6B:48:26:FE:54:C6:BA:B6:76:C0:25:16:E2:D7:84:61:CA:2E:FB:AE
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FC5A6E6D26A3E1F574A5BC980
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f281b07-4e70-323c-a32c-77138959d4ea.roa
Signing time: Tue 01 Nov 2022 12:00:00 +0000
ROA not before: Tue 01 Nov 2022 12:00:00 +0000
ROA not after: Wed 07 Dec 2022 05:00:00 +0000
asID: 8987
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:c5:a6:e6:d2:6a:3e:1f:57:4a:5b:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 1 12:00:00 2022 GMT
Not After : Dec 7 05:00:00 2022 GMT
Subject: CN=2d3a3b60-f562-4776-8c51-4db6961938ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:f2:ce:ef:98:78:84:de:0a:b8:8e:68:4f:
dc:5a:1b:e7:cc:85:53:f0:b0:d2:86:2a:47:38:03:
4d:3c:26:cf:54:37:dc:06:6e:ae:5f:6c:2d:87:26:
d8:71:12:38:bb:ab:50:49:7c:11:e7:dc:35:96:19:
f3:0d:90:89:93:90:1f:55:1f:56:db:25:12:eb:47:
a0:45:ae:00:17:8b:75:ce:42:e2:70:5e:c2:20:8e:
8a:85:51:dd:a5:d5:c8:7d:88:aa:a9:ec:59:f2:3c:
fe:27:bf:ed:ec:33:0b:63:8b:32:7b:03:f8:b3:ca:
c6:ac:bf:77:88:1b:70:dc:42:54:9c:40:91:0d:96:
95:5a:11:7a:47:7e:3b:f3:04:7d:c9:c3:22:6a:8b:
ac:fb:cd:5d:01:1f:42:33:8a:87:60:95:10:d0:a5:
22:f0:c1:52:70:ad:db:d0:50:f9:14:e3:32:d0:08:
da:17:a3:fe:40:2b:c2:d8:9b:ad:29:b7:88:83:a1:
4a:10:37:88:ac:e4:6e:d3:29:81:4c:16:6e:f9:f3:
81:53:fe:08:16:f2:42:33:a2:d6:7d:1e:08:a0:0a:
90:af:7a:07:d3:45:5a:ef:3e:0f:c5:9d:f9:45:46:
78:a6:bc:b3:5a:02:f1:bc:7c:93:78:44:02:e5:67:
fd:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:48:26:FE:54:C6:BA:B6:76:C0:25:16:E2:D7:84:61:CA:2E:FB:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/6f281b07-4e70-323c-a32c-77138959d4ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:01:67:49:0d:d5:15:64:e6:72:fa:d8:c3:f9:7c:20:1b:73:
e4:3a:dd:59:c7:52:f1:6f:55:8d:b1:d9:fc:bd:fc:68:8b:30:
fe:8d:d4:4b:88:e7:2e:a4:a0:3b:d3:58:9e:5c:8d:ca:94:cc:
e4:25:12:82:ed:c5:b6:6e:48:0c:9f:9c:70:a9:14:77:c9:08:
dd:79:e3:e0:cb:dc:d7:7a:00:66:15:ed:91:de:b8:4a:c0:5c:
86:26:d7:1e:e0:8a:a1:08:52:1b:a3:8e:75:40:94:47:31:1b:
6f:69:e8:f5:7e:f9:51:08:05:8e:de:b1:81:5a:97:60:d2:eb:
05:18:7c:be:9e:68:11:5e:7a:37:8c:f8:dd:65:e5:38:79:5b:
30:f1:6a:2c:77:db:d7:2c:c0:6d:db:b8:6c:a9:83:04:ad:dc:
c9:a5:4d:4f:88:56:43:8c:88:f7:75:2d:21:74:dc:25:2f:74:
17:0f:bd:17:1f:f9:5d:1a:f4:67:16:09:c8:15:08:d0:09:94:
a8:10:4b:4f:29:e6:3e:dc:ce:70:5d:6c:8b:7a:c7:9e:f7:08:
42:63:23:f0:a0:39:bf:00:40:60:b1:e7:25:1f:4c:81:0a:8b:
4e:27:0c:3a:14:ad:8c:28:bc:0a:31:8e:64:9e:89:ab:e5:b3:
33:7e:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:29:24 2025 by rpki-client