Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be2710e1-9469-3597-b0e6-673d507a8f01.roa
File: be2710e1-9469-3597-b0e6-673d507a8f01.roa (raw, json)
Hash identifier: MrxSlt3t8UmX1SQTqMp1e6dts5rG7caBnjeYtlvWQzY=
Subject key identifier: 13:A7:F1:0C:53:9F:3D:53:90:52:5F:54:BF:47:88:70:53:19:09:C0
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583F9E3F554C4ACE84D644AB2E00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be2710e1-9469-3597-b0e6-673d507a8f01.roa
Signing time: Tue 18 Oct 2022 12:00:00 +0000
ROA not before: Tue 18 Oct 2022 12:00:00 +0000
ROA not after: Wed 23 Nov 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:9e:3f:55:4c:4a:ce:84:d6:44:ab:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 18 12:00:00 2022 GMT
Not After : Nov 23 05:00:00 2022 GMT
Subject: CN=3c22e842-3380-439d-be79-cbfcfd1f67d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f9:5d:85:4b:d7:89:91:56:d9:76:57:d0:8f:
0a:57:9c:c3:ac:68:98:b9:dd:fd:a8:04:b4:68:66:
e0:6b:56:34:bc:7e:e5:2b:f0:36:27:56:09:a9:20:
ab:1e:81:3e:d9:69:71:79:99:03:05:54:17:ed:9e:
f3:b5:af:a6:22:0d:20:8d:34:86:63:49:bc:a5:5f:
73:eb:70:2b:5c:61:22:93:62:18:97:09:88:b6:02:
f2:ee:4d:e7:36:92:3d:27:16:7e:0c:dc:f8:20:f5:
dd:24:17:4d:58:a3:4d:97:94:d2:b0:e5:87:7c:a2:
28:81:7b:21:c8:ef:17:79:c2:a3:31:c3:82:c5:76:
12:b4:ac:31:e3:6e:a0:13:e6:96:ef:a3:3e:99:4a:
10:80:26:06:dd:07:91:fb:51:a2:af:c0:04:25:bf:
a9:f3:74:45:69:41:1b:bb:be:21:c3:0e:bd:fb:cc:
64:5f:4b:dd:13:ef:c0:6f:60:e7:4c:6f:79:b1:a9:
77:20:2a:a3:e0:26:32:32:b9:25:b5:20:19:ab:32:
a6:64:2a:c2:13:47:9e:36:34:7a:9f:6d:51:7c:3b:
1b:df:10:6d:14:c6:96:ff:3b:ed:53:32:03:55:f6:
b6:09:b2:2d:aa:2c:4d:ba:95:e2:4c:fb:83:3e:21:
2b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A7:F1:0C:53:9F:3D:53:90:52:5F:54:BF:47:88:70:53:19:09:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/be2710e1-9469-3597-b0e6-673d507a8f01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:bb:07:d8:e0:7f:68:e2:73:d4:4e:ed:80:2d:4b:d1:a0:f8:
36:f1:b1:d5:46:7a:b8:bb:0a:76:11:75:62:51:15:00:4f:55:
89:8d:73:d1:5a:20:ed:f9:17:ac:30:85:8c:3d:dc:3c:b8:8c:
de:c5:c3:3d:6c:bf:93:d2:9b:70:0c:8f:f2:5f:40:95:1f:49:
08:5f:08:04:80:b8:1a:d9:3a:12:59:1a:81:9d:8c:db:16:49:
f5:25:73:8b:53:1b:23:d7:b1:75:48:4f:f0:e8:c2:6c:7b:90:
e1:63:9a:22:ee:e0:14:2b:1b:73:61:f7:25:98:99:9f:ef:f1:
b1:9e:f2:65:71:48:7b:4c:95:9d:9f:b8:4f:b0:1f:d2:85:10:
33:1b:59:ca:bc:58:d5:10:a3:e8:c5:2c:20:9a:a8:3b:88:66:
fa:55:85:99:1e:ca:27:2d:f8:d5:2d:a1:87:96:d6:86:d1:b7:
34:0c:2d:bc:5e:8e:e8:99:70:ef:39:b7:50:29:f5:75:40:ba:
ec:cd:51:94:dd:d6:bf:d2:26:d1:11:b8:fd:80:7c:40:36:c2:
84:76:22:42:c5:2b:4a:0f:f9:24:37:36:f9:52:7f:27:a7:b3:
3e:57:2e:66:f0:5d:c4:9c:4d:13:f2:59:7f:6b:9d:14:42:a1:
42:b0:12:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD+eP1VMSs6E1kSrLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTAxODEyMDAwMFoXDTIyMTEyMzA1MDAwMFowLzEtMCsGA1UEAxMk
M2MyMmU4NDItMzM4MC00MzlkLWJlNzktY2JmY2ZkMWY2N2Q4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/ldhUvXiZFW2XZX0I8KV5zDrGiYud39qAS0
aGbga1Y0vH7lK/A2J1YJqSCrHoE+2WlxeZkDBVQX7Z7zta+mIg0gjTSGY0m8pV9z
63ArXGEik2IYlwmItgLy7k3nNpI9JxZ+DNz4IPXdJBdNWKNNl5TSsOWHfKIogXsh
yO8XecKjMcOCxXYStKwx426gE+aW76M+mUoQgCYG3QeR+1Gir8AEJb+p83RFaUEb
u74hww69+8xkX0vdE+/Ab2DnTG95sal3ICqj4CYyMrkltSAZqzKmZCrCE0eeNjR6
n21RfDsb3xBtFMaW/zvtUzIDVfa2CbItqixNupXiTPuDPiEr8wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBOn8QxTnz1TkFJfVL9HiHBTGQnAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvYmUyNzEwZTEtOTQ2OS0z
NTk3LWIwZTYtNjczZDUwN2E4ZjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDfgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAOrsH2OB/aOJz1E7tgC1L0aD4NvGx1UZ6uLsKdhF1YlEVAE9ViY1z0Vog
7fkXrDCFjD3cPLiM3sXDPWy/k9KbcAyP8l9AlR9JCF8IBIC4Gtk6ElkagZ2M2xZJ
9SVzi1MbI9exdUhP8OjCbHuQ4WOaIu7gFCsbc2H3JZiZn+/xsZ7yZXFIe0yVnZ+4
T7Af0oUQMxtZyrxY1RCj6MUsIJqoO4hm+lWFmR7KJy341S2hh5bWhtG3NAwtvF6O
6Jlw7zm3UCn1dUC67M1RlN3Wv9Im0RG4/YB8QDbChHYiQsUrSg/5JDc2+VJ/J6ez
PlcuZvBdxJxNE/JZf2udFEKhQrASCw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:32:49 2025 by rpki-client