Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfc25a09-9335-379e-9188-e6eb4e4764fc.roa
File: dfc25a09-9335-379e-9188-e6eb4e4764fc.roa (raw, json)
Hash identifier: mfW45PTGIcuv+62yp/cKa80Km9HPrNt8NNSI+8kegeA=
Subject key identifier: 35:4C:7B:FE:65:46:F2:CE:D8:84:E1:6B:BB:93:C0:0D:BB:5A:9E:31
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CDE44406BFCEA10CE3A35AD80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfc25a09-9335-379e-9188-e6eb4e4764fc.roa
Signing time: Wed 09 Feb 2022 05:00:00 +0000
ROA not before: Wed 09 Feb 2022 05:00:00 +0000
ROA not after: Wed 16 Mar 2022 04:00:00 +0000
asID: 16509
IP address blocks: 13.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:de:44:40:6b:fc:ea:10:ce:3a:35:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 9 05:00:00 2022 GMT
Not After : Mar 16 04:00:00 2022 GMT
Subject: CN=22b4122f-6bb4-4a8f-84da-ee6314e523a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:b1:6e:b5:db:4f:a2:08:08:fe:00:10:c2:
5e:9f:1f:94:74:90:0a:1c:08:9b:70:09:5b:f8:1d:
64:39:f3:45:c9:30:92:02:67:f9:66:fe:97:44:52:
8f:e6:3f:97:7f:24:e5:04:aa:b2:71:8d:0b:aa:79:
f8:11:23:08:3b:55:b8:ce:95:f6:b6:7d:2e:cd:48:
4c:2b:30:65:d0:67:4f:38:f8:54:c9:10:f7:c2:0b:
5c:84:87:f9:14:89:d5:22:dd:29:53:b1:5f:89:21:
3f:eb:3c:75:65:23:2f:31:1d:3b:7f:4c:5b:a1:74:
87:ab:1e:3f:cb:dc:fa:9b:bb:fc:83:de:e7:af:0b:
51:3e:30:27:ee:e0:f8:b5:fb:f0:9f:af:08:6d:ac:
5e:a1:77:ef:ec:b9:21:a0:cb:39:0b:fd:b0:b5:84:
9c:b5:74:3d:2b:82:5a:d7:a5:0a:7c:72:ea:9b:48:
84:cb:ae:06:6d:ca:d3:eb:f4:9d:ee:50:a6:31:30:
0f:cb:1d:54:c9:3e:dd:f2:a0:a6:29:96:3e:0b:22:
7d:f0:1c:e4:31:a8:31:57:3f:20:1a:e0:9b:e2:54:
90:2b:7e:19:ad:13:5e:34:a0:98:20:2c:5f:3a:cd:
98:fe:3f:ec:bf:08:a4:7c:0e:dd:30:d4:c5:5b:1d:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4C:7B:FE:65:46:F2:CE:D8:84:E1:6B:BB:93:C0:0D:BB:5A:9E:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/dfc25a09-9335-379e-9188-e6eb4e4764fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:f3:7e:67:1f:84:86:2f:23:30:a7:eb:cb:ba:73:57:af:02:
25:f2:24:05:a2:cb:0a:5a:68:0d:4c:d0:91:36:97:f3:3c:03:
f3:af:7b:96:9f:e1:7b:94:b8:84:7f:a6:65:ae:72:87:74:63:
3b:3d:23:97:1e:2b:d1:d7:a6:dd:dd:31:6c:74:67:aa:5a:2a:
78:50:17:94:dd:66:b3:94:6d:fe:6e:ab:8c:a0:f6:7c:91:76:
d6:3b:36:97:63:72:c9:3d:20:0c:49:99:05:01:a9:45:97:65:
cf:61:93:be:94:51:25:8a:6b:c2:59:10:df:e2:e8:1b:bb:74:
2b:e8:1d:3c:f9:5e:3f:45:c4:cb:65:85:ba:f6:0f:cb:eb:31:
ef:53:95:f7:d7:9c:a9:ad:fe:0d:06:04:82:94:ce:ac:c2:ca:
8c:32:1e:c5:b2:19:a6:ac:b2:c8:d6:08:5d:1a:c7:d5:b4:b6:
1b:1a:2c:93:06:bd:5a:b7:d5:b3:ba:77:28:4c:3d:27:8e:88:
2b:a8:59:69:62:e3:06:44:a7:c8:57:5f:bd:19:63:87:11:aa:
1c:3d:a7:cc:67:7c:eb:2a:6d:52:d0:fd:7c:b7:1b:91:e1:17:
39:28:bb:d8:85:7a:39:ac:08:dd:86:11:b3:6f:47:df:1d:42:
16:af:2b:46
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDzeREBr/OoQzjo1rYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDIwOTA1MDAwMFoXDTIyMDMxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MjJiNDEyMmYtNmJiNC00YThmLTg0ZGEtZWU2MzE0ZTUyM2ExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfuxbrXbT6IICP4AEMJenx+UdJAKHAibcAlb
+B1kOfNFyTCSAmf5Zv6XRFKP5j+XfyTlBKqycY0Lqnn4ESMIO1W4zpX2tn0uzUhM
KzBl0GdPOPhUyRD3wgtchIf5FInVIt0pU7FfiSE/6zx1ZSMvMR07f0xboXSHqx4/
y9z6m7v8g97nrwtRPjAn7uD4tfvwn68IbaxeoXfv7LkhoMs5C/2wtYSctXQ9K4Ja
16UKfHLqm0iEy64GbcrT6/Sd7lCmMTAPyx1UyT7d8qCmKZY+CyJ98BzkMagxVz8g
GuCb4lSQK34ZrRNeNKCYICxfOs2Y/j/svwikfA7dMNTFWx2+QwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFDVMe/5lRvLO2ITha7uTwA27Wp4xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZGZjMjVhMDktOTMzNS0z
NzllLTkxODgtZTZlYjRlNDc2NGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDfgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAj/N+Zx+Ehi8jMKfry7pzV68CJfIkBaLLClpoDUzQkTaX8zwD8697lp/h
e5S4hH+mZa5yh3RjOz0jlx4r0dem3d0xbHRnqloqeFAXlN1ms5Rt/m6rjKD2fJF2
1js2l2NyyT0gDEmZBQGpRZdlz2GTvpRRJYprwlkQ3+LoG7t0K+gdPPleP0XEy2WF
uvYPy+sx71OV99ecqa3+DQYEgpTOrMLKjDIexbIZpqyyyNYIXRrH1bS2Gxoskwa9
WrfVs7p3KEw9J46IK6hZaWLjBkSnyFdfvRljhxGqHD2nzGd86yptUtD9fLcbkeEX
OSi72IV6OawI3YYRs29H3x1CFq8rRg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:07:27 2025 by rpki-client