Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b245c71e-c085-3d80-8c73-3fdf392fecdf.roa
File: b245c71e-c085-3d80-8c73-3fdf392fecdf.roa (raw, json)
Hash identifier: BmM96+N3FhZJntw9z1YNB/ZypM2e62KSdEe7216XtG0=
Subject key identifier: 5B:53:FC:A9:3B:66:1B:58:36:E6:1C:76:9A:AE:63:DE:6C:74:76:6F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D055A12EDF9343903D6969700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b245c71e-c085-3d80-8c73-3fdf392fecdf.roa
Signing time: Wed 23 Feb 2022 05:00:00 +0000
ROA not before: Wed 23 Feb 2022 05:00:00 +0000
ROA not after: Wed 30 Mar 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.208.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:05:5a:12:ed:f9:34:39:03:d6:96:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 23 05:00:00 2022 GMT
Not After : Mar 30 04:00:00 2022 GMT
Subject: CN=b58c04d4-daf8-446f-b250-2ef5305571de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a7:2a:a3:7e:39:d4:42:80:cc:43:53:2d:a6:
e3:56:39:9c:da:ca:bc:65:d4:c8:6e:8d:21:32:6f:
5d:72:15:57:a4:16:5e:a7:09:0e:aa:99:80:ec:3d:
96:b5:74:4a:43:09:ce:3a:26:48:f7:6a:8d:65:27:
33:77:e8:2c:1c:44:c8:52:06:c0:c1:79:d4:d8:1c:
01:c1:49:65:ba:a4:06:6d:ae:5b:52:98:ee:04:b1:
1f:3a:dd:db:d0:ad:0d:93:87:a0:ac:44:2b:2c:a2:
2d:e3:80:6c:a6:bb:bd:0f:f1:8e:e6:e9:35:61:82:
d5:b3:07:99:d3:b3:da:6a:36:a1:f0:8d:e1:ec:9d:
2e:99:04:4f:29:1e:dd:f5:b2:11:fa:99:ff:21:82:
8d:29:f8:51:34:0f:db:52:62:bb:d6:c9:b8:4d:4a:
54:7a:00:4e:5c:2a:0b:64:95:c8:d0:8a:95:de:d4:
2a:1c:a2:3f:29:5c:bc:b3:10:b3:69:47:01:77:d6:
7f:8c:f5:af:13:8c:6f:a2:d9:bd:55:71:9d:a5:37:
ed:b9:e2:22:8c:1b:fc:f7:dc:b6:8d:fa:97:e1:25:
95:d7:02:28:9c:3a:dc:62:f7:6a:e3:1e:67:a0:0e:
e3:fa:a0:6b:35:f2:cc:06:aa:d0:c4:bf:4f:0a:3c:
0f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:FC:A9:3B:66:1B:58:36:E6:1C:76:9A:AE:63:DE:6C:74:76:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b245c71e-c085-3d80-8c73-3fdf392fecdf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.208.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:f4:c6:c9:a3:33:b3:8e:87:34:aa:33:e1:03:9f:b4:4b:74:
cb:4f:7e:64:d6:e2:ab:7b:6d:12:25:45:46:6a:ea:8b:2c:70:
d5:20:99:f9:5f:d6:32:6e:24:51:04:09:91:3b:12:81:3c:b6:
0a:96:1f:1c:73:43:cb:96:39:3b:2c:d2:ca:72:86:bb:1d:c8:
61:b9:b0:7f:04:c2:4d:b6:23:26:a0:a8:c1:21:bf:c9:77:d8:
ff:b0:c2:c6:67:4f:ad:d5:88:60:a4:3e:d5:10:59:97:6a:04:
3c:54:ae:9c:87:62:55:31:54:b4:15:f1:49:97:8a:ed:c4:a0:
a6:42:ec:d8:e5:42:2f:f7:21:8b:8e:73:22:48:65:c0:75:aa:
3d:78:d7:74:8e:7b:7e:22:30:23:2a:de:62:f9:07:59:ba:35:
52:38:7b:37:4d:e8:4e:df:75:0c:a2:8a:5a:90:8a:bc:df:08:
ed:d8:e5:7f:52:6c:67:34:c2:ff:bc:89:17:32:5d:0a:5b:1b:
0a:3b:b4:e5:b3:3b:0c:f2:13:d4:b3:20:72:c1:14:6e:a1:9d:
d7:3c:d4:17:ab:44:9c:23:2e:57:86:76:03:a1:a4:6b:f6:3c:
73:79:a4:ae:dc:67:32:a6:1b:12:3c:c8:4e:2e:d0:e0:96:3b:
89:10:61:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:32 2025 by rpki-client