Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a41acdce-fe94-3f95-8c78-a6e98c1a8e97.roa
File: a41acdce-fe94-3f95-8c78-a6e98c1a8e97.roa (raw, json)
Hash identifier: l62PqlrLh8Kh9a6MsRVEH3R/xhFrk+qio/Ke02NlTdE=
Subject key identifier: 66:A5:D8:68:CB:3E:FE:71:E0:EB:9C:0B:43:71:28:FB:E4:29:9B:62
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858402CEAA0D6175D7673179A6560
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a41acdce-fe94-3f95-8c78-a6e98c1a8e97.roa
Signing time: Thu 08 Dec 2022 12:00:00 +0000
ROA not before: Thu 08 Dec 2022 12:00:00 +0000
ROA not after: Fri 13 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.216.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:2c:ea:a0:d6:17:5d:76:73:17:9a:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 8 12:00:00 2022 GMT
Not After : Jan 13 05:00:00 2023 GMT
Subject: CN=73d03566-cd5c-433a-b81d-4e4eed7b3e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e7:fa:00:3d:44:cb:0a:0f:da:7b:ad:6b:6a:
2f:b8:5f:9f:59:d4:9c:06:bc:99:a9:95:64:38:55:
ef:22:ba:c6:ef:f5:ba:a7:55:88:5a:0f:95:32:79:
fe:8d:6c:1b:2b:bc:e5:c0:8b:21:66:a6:25:19:c2:
c0:0b:ab:c1:b7:43:dc:28:ca:00:33:f9:1d:42:9e:
1a:f5:9c:61:c8:e6:7b:1a:9e:da:69:9a:26:83:bf:
cd:e1:f2:b0:00:7e:8e:33:f8:8d:0c:01:72:e9:7a:
a9:b7:ee:67:a8:bf:34:e2:91:68:7f:ea:32:b5:1e:
23:ec:9e:1d:2d:07:85:14:d1:82:03:d5:b5:17:6f:
97:47:cd:b6:d5:1b:23:99:8d:60:b6:e0:df:82:67:
e7:50:d0:5b:98:04:03:75:88:01:5c:b4:70:81:0b:
3e:94:cb:3f:22:33:1b:f0:04:7e:63:eb:70:af:a4:
2d:b5:a5:33:8b:d2:60:88:dd:c0:53:55:bb:94:7b:
30:70:16:22:69:b5:f8:b6:03:23:d3:22:47:6f:7c:
1a:b2:83:89:50:b1:18:32:d7:4f:31:0c:35:8d:29:
50:60:e6:5d:88:c3:f9:ba:9e:96:a9:63:45:8c:63:
f0:e7:0f:17:3e:06:e2:a4:b0:3f:27:dc:fd:68:b9:
cb:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A5:D8:68:CB:3E:FE:71:E0:EB:9C:0B:43:71:28:FB:E4:29:9B:62
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/a41acdce-fe94-3f95-8c78-a6e98c1a8e97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.216.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:b5:e4:01:b4:c2:f1:ec:67:c5:29:2e:c9:c2:84:0b:68:99:
bc:ac:60:0b:5a:5c:33:ed:a9:57:6e:56:bf:e6:29:9a:19:e0:
88:3f:ad:35:89:9f:72:16:d1:e2:3b:87:32:92:65:9f:1e:3e:
b7:08:ea:03:7c:2a:b2:c6:13:b3:99:62:4c:31:54:d8:b6:fa:
dd:86:07:2d:e0:4d:a8:b3:39:53:95:f1:05:d4:7c:5c:b6:87:
a8:a0:05:4f:6c:31:5b:cf:9d:d4:36:fd:3a:1b:1a:ec:25:be:
46:39:8b:7f:93:00:04:2d:8d:44:87:85:b1:c4:1a:7c:8e:a8:
cb:16:1f:0a:81:df:d5:83:29:02:23:01:b9:ae:4b:26:c8:85:
8a:74:8d:76:fa:b2:55:89:7b:52:a3:95:51:e9:d9:b7:ea:79:
9f:fe:6f:82:11:c2:2c:e0:a4:8a:fa:70:68:95:89:9b:dc:39:
f9:bc:46:4c:be:9e:1d:8b:c2:5b:7b:5e:ab:46:98:07:be:5c:
a1:59:68:7f:c3:03:79:d7:4b:01:f3:8e:d2:14:4a:21:b0:16:
d7:39:44:8d:3c:db:33:1a:b6:a2:c1:a7:98:e2:c5:02:5e:b6:
bf:7c:d3:2a:7b:da:3f:e5:a3:12:9f:6d:ca:79:48:ea:56:43:
9e:0d:9b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:27:12 2025 by rpki-client