Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6ef5c2d-04ef-36f9-98c7-6407691227a8.roa
File: c6ef5c2d-04ef-36f9-98c7-6407691227a8.roa (raw, json)
Hash identifier: sNc+GOokZLicUw9BS1FVOuWYqQyHDcqPRsimEs/L1k0=
Subject key identifier: AE:03:31:85:E1:3B:08:74:9A:08:C5:BF:F3:06:5B:81:A0:AA:13:0C
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328576D51CC73C042CFC1669652E6E4
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6ef5c2d-04ef-36f9-98c7-6407691227a8.roa
Signing time: Sun 21 Oct 2018 11:11:47 +0000
ROA not before: Sun 21 Oct 2018 04:00:00 +0000
ROA not after: Tue 30 Sep 2025 04:00:00 +0000
asID: 16509
IP address blocks: 13.248.0.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:96:52:e6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Oct 21 04:00:00 2018 GMT
Not After : Sep 30 04:00:00 2025 GMT
Subject: CN=f4665e22-d360-406c-b0a3-edb922c217f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:19:35:4a:e1:18:8e:78:80:e5:6e:96:78:85:
e9:a6:bc:5c:95:d5:4a:cf:64:8d:7b:ab:d8:2f:d3:
98:36:5b:72:64:6a:4e:f2:99:9c:76:57:8b:aa:70:
1f:64:52:c7:a0:ab:df:d9:28:5f:22:c2:c4:0d:e0:
24:1b:c4:98:ae:fb:f1:19:a4:62:59:54:7f:c1:93:
e9:65:e0:6a:b7:74:18:cd:61:8e:b3:ce:3f:81:97:
9f:a8:e9:8c:ba:d0:72:ef:8a:b9:e1:63:90:bf:60:
ec:54:85:fe:d2:69:92:3d:01:f9:73:01:f6:b4:56:
11:4d:19:1e:70:f1:63:c5:04:51:13:3e:b4:2e:e0:
12:75:87:a6:d1:2a:61:0d:94:f6:d0:13:e1:d4:21:
7a:39:3b:09:a6:b6:d2:fb:bb:80:3f:d7:25:e6:43:
2b:34:9a:31:89:96:ac:10:f8:2c:2d:a6:4d:33:6e:
bd:04:d7:62:ef:8d:2c:c4:3f:8f:d4:41:f8:c1:8f:
5f:53:3c:72:71:c2:cb:59:9d:e3:ee:cb:f1:f5:f4:
85:77:d5:45:25:12:40:bf:db:3f:f8:75:00:de:10:
4f:33:8f:78:5e:c7:2f:02:63:54:12:bc:11:45:9b:
72:bf:aa:52:07:c8:c1:23:e9:10:ae:1f:0a:b0:32:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:03:31:85:E1:3B:08:74:9A:08:C5:BF:F3:06:5B:81:A0:AA:13:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/c6ef5c2d-04ef-36f9-98c7-6407691227a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.248.0.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:e9:89:4c:0e:c3:af:33:fe:70:43:02:01:c1:8c:6d:d6:fb:
8f:be:a6:fb:0b:ab:68:44:4b:52:b1:3f:76:3c:3e:9a:20:e2:
22:29:22:11:83:11:15:60:cd:d3:f5:cd:2e:3f:24:13:cd:b2:
dd:4b:c7:9c:5a:e2:e4:eb:b5:3e:60:3a:31:10:f9:a8:5e:00:
b5:8f:32:42:6a:4d:e0:ce:52:e6:b7:f5:ad:14:70:2e:18:e3:
44:c0:f8:09:6c:d0:50:31:53:1f:c4:ae:29:35:e0:55:76:e9:
2a:5e:25:33:15:a2:2e:34:65:46:f1:55:b5:69:22:f5:b1:70:
64:90:bc:11:3e:05:ab:eb:ee:1d:39:01:0a:7e:1d:e4:00:a5:
41:bd:bc:25:b2:0a:2a:e9:10:a5:20:45:9f:d7:82:28:f4:58:
bf:30:93:16:44:ae:d5:9b:31:1e:48:06:44:d0:68:9f:34:de:
ff:a2:08:c9:bf:39:b9:a2:68:6d:a1:4c:49:06:ac:bd:9f:e3:
12:79:38:d2:53:df:b8:b6:34:4a:ee:7c:09:03:a3:39:b2:bc:
6c:89:f4:09:0d:63:96:3f:eb:9b:34:8c:80:9e:52:26:98:06:
33:9a:c4:ec:3b:a9:bd:7d:06:ea:71:21:fd:8c:df:43:55:73:
d4:cf:d3:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 23:15:26 2025 by rpki-client