Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8865c36-b70c-372d-8dd1-a85996896425.roa
File: e8865c36-b70c-372d-8dd1-a85996896425.roa (raw, json)
Hash identifier: HKHpBfjmnkabN598slmTuZleTPfYDEkt6pKe/mZgs+Y=
Subject key identifier: EF:2D:71:DA:49:B6:A2:BC:A0:A4:8C:95:A4:FC:F6:BF:28:B9:5D:A3
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583FECCB6E38C4D015D11DE39C80
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8865c36-b70c-372d-8dd1-a85996896425.roa
Signing time: Tue 15 Nov 2022 12:00:00 +0000
ROA not before: Tue 15 Nov 2022 12:00:00 +0000
ROA not after: Wed 21 Dec 2022 05:00:00 +0000
asID: 16509
IP address blocks: 13.228.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:ec:cb:6e:38:c4:d0:15:d1:1d:e3:9c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Nov 15 12:00:00 2022 GMT
Not After : Dec 21 05:00:00 2022 GMT
Subject: CN=41e4bc34-1268-4f9a-bded-ab57421110fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fd:f5:b3:7f:64:2b:66:5d:18:a1:9f:50:b1:
cd:e3:0a:70:3c:93:12:5f:fc:2c:de:02:95:14:55:
82:c8:08:9f:c1:31:8a:7a:ca:a7:7f:87:e2:05:bc:
1c:35:d0:29:86:54:85:a4:c0:f8:34:10:05:21:65:
eb:93:31:57:ec:e4:60:18:57:17:c3:33:6d:d1:80:
b3:f7:ab:80:03:d7:6d:f1:bb:00:8f:70:9b:cd:8e:
c1:a2:ac:69:c1:c9:3b:da:4a:f0:09:9a:73:16:92:
8d:33:5c:90:2d:24:1a:b4:ba:74:57:7f:39:57:2b:
b9:64:97:26:19:fe:93:bf:ee:21:45:99:14:fc:94:
22:87:fa:74:75:f3:2e:eb:00:ed:28:41:d2:e2:bd:
7c:fa:ae:e5:6f:77:65:b3:bf:f8:b1:00:af:db:89:
0a:c5:e5:a3:cf:09:75:14:61:d3:6b:42:04:bb:cd:
a6:35:6a:ac:f7:65:40:b5:25:de:5d:10:20:82:1e:
2b:ce:c0:3b:8a:cf:0f:b2:20:2c:88:d2:e2:7e:dc:
95:20:a4:bf:81:c8:65:51:cd:a2:2d:a0:14:f1:c4:
b7:86:2f:21:01:85:83:1a:80:6b:eb:b0:7e:93:ed:
09:d9:f4:5b:d1:c3:48:dc:9e:d1:6c:4b:5b:ef:45:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:2D:71:DA:49:B6:A2:BC:A0:A4:8C:95:A4:FC:F6:BF:28:B9:5D:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e8865c36-b70c-372d-8dd1-a85996896425.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.228.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:48:e4:15:b3:0d:9a:1e:5d:46:3b:2b:4d:8c:6b:f7:9e:54:
9c:9f:5f:dd:4b:78:20:3d:bf:22:49:75:55:07:8c:8f:11:3f:
ae:84:f4:fc:2a:7e:a1:55:76:86:43:5d:30:2b:fa:db:8a:e6:
27:75:a8:e3:b7:87:a5:c8:20:cb:c0:4c:4a:b1:aa:bf:7e:17:
71:e6:ff:75:6f:55:10:77:62:bd:a7:86:4d:fd:8d:fb:f7:1b:
1e:36:61:0c:1e:ed:f8:ab:81:20:62:d2:15:b9:f9:d1:97:ba:
60:32:aa:70:10:09:6e:93:f0:4f:81:00:6b:21:15:73:64:d6:
f0:38:b1:61:a4:57:ce:8c:ee:03:26:80:e4:b8:9b:e6:c3:89:
41:ac:6f:11:7e:b3:47:e2:1f:9c:fa:ce:f6:40:92:39:4d:5b:
2b:2e:61:b9:8c:f9:56:b7:65:9a:93:d6:bf:ff:26:83:6e:99:
b4:cc:59:99:10:93:10:a3:9c:f3:0f:9a:ce:72:bc:78:b1:4b:
61:c9:a9:41:b5:1e:0e:72:09:ec:c4:3f:2d:1a:ba:0b:5a:46:
d1:57:07:a7:00:9c:4b:1b:c7:0b:2d:f8:3f:80:ea:00:89:37:
fe:2c:0b:f9:ce:18:ba:a7:e0:8d:85:26:d7:14:35:52:99:5e:
cf:9d:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 16:09:46 2025 by rpki-client