Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b40bfac0-1d54-34d3-8b9d-36c0cafc0410.roa
File: b40bfac0-1d54-34d3-8b9d-36c0cafc0410.roa (raw, json)
Hash identifier: pLEmSBxd+c6j8fm+JcZ0rbuKBcSWPnGi+QLvxe53H6k=
Subject key identifier: DB:3F:0F:BA:3C:C2:40:CD:CC:43:01:87:E9:B0:24:A5:FD:62:2F:40
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328584013D21577FF1FB6D9C78825C0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b40bfac0-1d54-34d3-8b9d-36c0cafc0410.roa
Signing time: Tue 29 Nov 2022 12:00:00 +0000
ROA not before: Tue 29 Nov 2022 12:00:00 +0000
ROA not after: Wed 04 Jan 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.244.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:13:d2:15:77:ff:1f:b6:d9:c7:88:25:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 29 12:00:00 2022 GMT
Not After : Jan 4 05:00:00 2023 GMT
Subject: CN=94d28ce0-933b-4613-a048-70610c770bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:56:a3:22:16:0b:ae:22:2e:d4:a3:a3:d0:
35:3f:e4:66:32:fd:be:f1:7d:98:4d:1c:7c:e3:1c:
53:c4:1c:74:c8:58:c9:3d:d5:b1:43:4a:88:6a:43:
0b:38:6c:06:58:17:60:bb:6c:ec:56:f0:a0:40:d7:
43:52:e9:4d:0a:9d:3e:43:7e:7c:83:0a:19:b9:d0:
b0:0a:fd:a2:43:af:36:44:3f:29:5c:c3:22:70:e8:
a2:8a:03:98:45:f4:df:51:fd:08:c4:de:0c:cd:2a:
3d:b9:5e:31:1c:ea:31:e0:83:98:e0:b9:cc:da:91:
c5:52:25:b6:74:f9:08:d7:67:e4:29:b9:45:26:71:
36:00:72:bc:fd:80:3f:5a:b6:2f:cc:bb:32:d7:b5:
0c:66:87:66:af:cd:c1:a2:c2:95:3a:fd:13:ea:8b:
f8:02:f1:2b:62:8e:54:52:72:24:10:9d:68:07:8e:
b3:c4:33:09:b5:3b:54:9c:0f:90:ab:f0:fd:74:3e:
46:09:6d:2f:94:9c:27:1e:b5:df:7d:7c:ea:c0:3c:
40:c7:47:ca:54:12:e6:ef:65:da:23:21:9e:53:68:
9c:40:b9:29:7f:00:e0:58:e5:cc:41:07:ba:aa:a5:
18:2c:b3:cd:98:19:71:d8:92:2d:72:e0:6c:ab:fc:
5f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:3F:0F:BA:3C:C2:40:CD:CC:43:01:87:E9:B0:24:A5:FD:62:2F:40
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b40bfac0-1d54-34d3-8b9d-36c0cafc0410.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.244.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:6e:a6:ad:43:8c:a1:72:73:a9:53:46:4e:4d:c4:37:6b:1c:
d9:b7:b4:eb:64:83:d5:0d:95:78:96:7f:26:c5:db:6e:92:61:
93:88:7a:81:05:33:47:21:e6:fc:96:e5:5e:12:b2:50:b0:1c:
50:af:7d:9f:46:d8:46:31:e0:55:43:a9:99:cc:c1:c0:bd:da:
c1:59:5c:ec:72:ec:c1:22:50:b5:98:81:56:c7:ff:2e:58:a1:
17:79:70:75:4b:3c:f8:38:34:bb:c6:b6:70:ac:fa:f5:9a:0c:
3e:3c:ff:e2:47:b1:c6:26:f6:a5:59:7b:a5:11:ac:81:c2:2e:
f8:0b:31:95:c9:2a:8e:11:a1:17:2c:d4:6a:db:55:8a:df:36:
b5:51:20:c9:a1:5c:5a:16:fc:b2:e6:b0:20:98:1a:62:ab:92:
23:e0:ba:e3:65:a4:bc:05:0e:97:a6:e0:e1:f2:ed:33:f1:f6:
b6:37:20:dd:ac:f5:26:80:f5:43:d2:c9:bc:3e:27:f8:61:e8:
88:bb:db:53:cb:6d:c6:e9:72:68:84:38:c6:1c:00:d8:35:b5:
60:d4:fd:91:27:7e:69:ca:5c:4b:08:e3:f4:92:31:ae:34:bd:
c8:0f:80:bb:14:54:2b:d6:cd:83:51:ae:03:19:2d:5d:e1:2e:
85:69:06:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:57:22 2025 by rpki-client