Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c64a6a9a-57dc-3624-a6ff-52939df2c177.roa
File: c64a6a9a-57dc-3624-a6ff-52939df2c177.roa (raw, json)
Hash identifier: APyw5qloZ8w2qIFGNDaKG0Eja4mSQo9Y3rzB/FM1fb0=
Subject key identifier: 67:3E:D9:F5:02:10:6F:09:D7:66:4A:79:78:6F:17:EE:16:E6:32:61
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DBB131EFE127672F408D5FC80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c64a6a9a-57dc-3624-a6ff-52939df2c177.roa
Signing time: Thu 28 Apr 2022 12:00:00 +0000
ROA not before: Thu 28 Apr 2022 12:00:00 +0000
ROA not after: Fri 03 Jun 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.216.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:bb:13:1e:fe:12:76:72:f4:08:d5:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 28 12:00:00 2022 GMT
Not After : Jun 3 04:00:00 2022 GMT
Subject: CN=2a4dbf31-0248-43b5-8835-fa0d80a13fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:14:07:e1:54:94:7c:10:09:85:aa:40:33:5e:
1d:c8:b0:d3:34:f3:08:68:88:1c:6e:18:e8:4a:42:
04:62:58:ea:99:d4:a8:18:10:f5:25:fb:19:dd:46:
ee:56:f2:d4:11:ec:94:49:05:8b:51:e9:39:d6:e3:
3b:3d:8b:21:32:74:82:9e:d8:85:92:43:14:03:a8:
ec:81:15:2e:74:ac:1b:50:86:0a:62:dd:1d:18:52:
3f:f8:fd:9b:f3:3c:2f:f8:8c:26:55:71:cc:05:29:
47:d6:f5:d3:58:6b:d3:a8:b0:60:c0:d7:c1:b0:ea:
06:c7:75:03:83:ea:78:34:42:d1:8e:25:64:78:2c:
c3:f6:4f:23:99:17:8e:a9:29:9f:87:25:ab:03:4f:
a7:d1:2d:11:fc:75:5e:1f:b8:f3:6a:44:24:e4:6b:
5a:ad:1a:90:bd:2f:8c:fb:42:2d:ec:90:79:cf:7c:
55:fb:36:db:e7:fd:69:a0:9f:c0:f2:e4:a5:5d:3c:
2b:5f:61:fb:95:ff:5b:0e:1b:ea:0c:64:0c:9e:45:
d5:e1:df:a0:1b:18:b5:0d:83:90:1b:f9:ce:ce:5d:
5c:55:f3:bf:d5:35:22:9a:0c:71:0f:a4:5c:c8:2c:
26:e1:6a:28:23:af:bb:03:f2:b8:b3:1a:d7:d4:83:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3E:D9:F5:02:10:6F:09:D7:66:4A:79:78:6F:17:EE:16:E6:32:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c64a6a9a-57dc-3624-a6ff-52939df2c177.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.216.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:a1:34:e8:8d:d8:90:25:c5:60:a7:fc:d7:05:f8:8d:22:46:
7a:13:9f:b6:ca:f8:b2:bb:4f:e7:16:6b:7a:58:74:d0:13:21:
85:d4:d3:ef:12:d3:86:20:db:0e:34:b4:98:4e:63:82:f3:8b:
ae:7a:00:8c:19:22:6d:05:be:e2:8a:4e:7f:59:d5:42:6e:9e:
22:29:52:81:c7:bd:95:d6:da:b9:a9:c9:99:4d:a8:56:54:97:
04:59:ee:87:fe:35:4d:5c:df:d5:30:12:c0:3a:ed:ba:79:df:
af:4c:fa:e9:9d:37:c0:38:6e:56:4a:4d:db:15:52:d4:2a:d6:
ae:98:77:d9:11:f6:c7:71:9d:35:dd:58:c4:6c:55:02:b0:7e:
21:50:62:81:3e:89:69:bc:97:4f:41:bb:b7:74:2a:f2:7b:23:
d6:92:3f:3f:f9:96:22:73:16:a3:36:6b:95:6c:7d:e1:1d:5f:
48:43:ec:90:3d:d1:4a:ac:63:f0:e0:8a:16:f6:5d:0c:59:57:
7c:d1:83:5a:2a:fc:bc:0e:12:33:41:cf:51:b5:95:7d:77:82:
9d:1f:28:1f:6a:25:ba:e5:9f:cb:d9:92:82:40:4c:fb:57:c0:
ad:2c:db:3d:22:6e:a2:2c:82:aa:7e:a6:70:1a:9c:32:37:37:
24:ca:fa:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:06:33 2025 by rpki-client