Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7d07d34-f014-3fdc-956d-dc1f5970cf1f.roa
File: d7d07d34-f014-3fdc-956d-dc1f5970cf1f.roa (raw, json)
Hash identifier: +O4pZ3j6Agj+0qD43Ly+2PQdmkJZHdMSUpmjzqNoZck=
Subject key identifier: E9:9E:4C:FE:E7:44:5A:9D:91:CD:F7:08:F0:08:3E:F0:B7:67:EE:EB
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583DBB1313B7EEE5781270BAD380
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7d07d34-f014-3fdc-956d-dc1f5970cf1f.roa
Signing time: Thu 28 Apr 2022 12:00:00 +0000
ROA not before: Thu 28 Apr 2022 12:00:00 +0000
ROA not after: Fri 03 Jun 2022 04:00:00 +0000
asID: 14618
IP address blocks: 13.216.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:bb:13:13:b7:ee:e5:78:12:70:ba:d3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Apr 28 12:00:00 2022 GMT
Not After : Jun 3 04:00:00 2022 GMT
Subject: CN=0487fdc4-f943-4511-89db-8f61bf50ff39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:df:15:64:fc:53:a1:e9:a7:38:ed:a6:b5:04:
ff:cb:b4:0a:9f:05:2f:3d:f6:43:01:9d:27:68:ca:
43:a5:47:55:80:cc:8b:5a:a3:11:c6:6c:92:18:3f:
4b:96:6e:02:60:17:82:07:d7:0a:f4:96:e9:fd:67:
0e:87:9f:1e:67:b0:c4:fc:e8:6c:20:cf:2e:c2:2b:
1b:ac:39:4d:02:8c:12:18:74:0b:45:bb:c2:27:ba:
5a:0d:21:8c:aa:4d:e6:3b:b8:62:27:2c:af:2a:5f:
c5:c5:13:fe:24:08:22:97:a1:cc:ca:f0:c8:27:3b:
b2:1f:eb:09:df:97:02:56:a0:2a:2a:c6:c1:63:b5:
7c:4d:e1:ae:67:de:b5:b4:26:b2:5b:52:9e:d0:8a:
9e:1f:d3:eb:81:7b:f8:6c:7f:c3:5b:c3:87:ac:6d:
11:d5:06:91:c7:c9:56:32:78:7a:df:27:c2:f9:d0:
ed:a2:1c:3f:97:b3:8f:6b:d7:13:b8:8a:d3:70:99:
a8:c4:64:46:f0:ab:8a:f9:8d:f6:81:d4:00:6e:50:
97:37:83:30:e6:1b:6b:26:c0:1e:f4:59:e8:43:02:
3c:42:89:7c:bb:48:43:6d:5e:2d:3f:bc:82:14:85:
da:6c:c0:17:e9:51:d8:90:ac:56:36:d0:4c:cf:8d:
fd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:9E:4C:FE:E7:44:5A:9D:91:CD:F7:08:F0:08:3E:F0:B7:67:EE:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/d7d07d34-f014-3fdc-956d-dc1f5970cf1f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.216.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:fa:0d:a5:c0:ec:d6:92:e0:60:22:34:4d:b1:b3:b5:d4:db:
b2:73:3a:d8:4d:b2:fa:fc:9d:c5:1f:71:65:d3:16:60:b1:02:
e9:bf:e9:46:76:8b:b8:37:a9:ef:4b:40:06:aa:eb:a0:ac:d3:
e0:45:19:bb:69:b2:e8:f8:38:bb:aa:57:24:ce:96:2d:d6:2c:
e1:b0:77:32:c2:2c:14:ab:dc:9f:a8:58:28:e0:e8:92:1e:b3:
74:c1:c1:3c:45:10:b1:38:f0:f9:d4:e8:bb:71:ec:8d:a9:3c:
fa:d6:77:fc:34:b8:4e:c7:b9:e4:17:d3:b9:98:52:e2:17:f9:
65:bb:bc:f7:cc:9f:05:93:1d:47:53:81:f6:eb:b7:47:c6:f5:
b0:8c:76:ce:c4:67:8b:27:ea:35:b8:89:e2:c6:5c:a2:b4:74:
4e:f5:6e:10:4c:32:07:b7:3d:55:d6:03:0a:b4:63:62:53:7b:
5b:41:e1:92:3f:f0:20:2d:b3:76:09:dd:3b:ec:65:60:d4:04:
46:c6:1c:1e:b7:3e:04:ef:d0:d1:11:66:6b:da:46:52:1a:1d:
a2:9a:0f:90:aa:25:4e:0e:93:3f:5d:1a:ca:24:81:c1:22:a2:
9e:ab:64:a4:46:0a:9b:da:2a:35:13:22:67:8e:41:d0:2b:ee:
0c:a1:0f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:00:15 2025 by rpki-client