Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e88ebe16-e648-361e-b49a-7a569d70e0b0.roa
File: e88ebe16-e648-361e-b49a-7a569d70e0b0.roa (raw, json)
Hash identifier: CJBCEIRGeb2CHrTHMVQG2MZMtAaOm5v68SFcTj42WHM=
Subject key identifier: 2D:37:4D:C7:CB:75:27:C7:85:89:64:20:59:E2:89:B8:1D:AA:99:0F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583EDACC2CB131A1C82B6B6E5880
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e88ebe16-e648-361e-b49a-7a569d70e0b0.roa
Signing time: Tue 09 Aug 2022 12:00:00 +0000
ROA not before: Tue 09 Aug 2022 12:00:00 +0000
ROA not after: Wed 14 Sep 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.248.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3e:da:cc:2c:b1:31:a1:c8:2b:6b:6e:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Aug 9 12:00:00 2022 GMT
Not After : Sep 14 04:00:00 2022 GMT
Subject: CN=c480b600-67d4-4b20-bbe2-227054033827
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2c:69:a2:6a:39:0a:d6:15:0d:6c:da:5e:b6:
78:39:22:28:0b:93:2a:f2:ed:e2:e0:0b:77:41:3e:
22:d7:3f:dd:57:4d:84:38:90:bf:09:53:17:e2:e1:
a7:2a:68:93:35:a8:b2:77:01:c4:f9:a7:e5:27:96:
15:29:0a:69:e3:5e:7f:05:e3:52:59:a2:7b:84:66:
9b:d6:ca:46:68:68:4d:7c:51:81:41:a1:10:bc:75:
7f:f8:c5:00:ad:5b:d6:6d:77:19:9b:aa:f3:89:40:
a6:84:58:75:0b:b0:4c:4e:cf:79:d7:02:ea:4c:3a:
37:92:22:b7:d0:f9:9a:e1:d0:80:17:02:28:5d:b6:
fd:9e:0f:5d:3d:05:cf:41:54:fb:3c:b2:a0:40:05:
01:61:f7:3f:ec:fb:0e:ca:b2:c3:3e:a3:9b:75:a3:
fa:41:77:46:9b:94:e4:f5:d0:f3:43:41:c1:a8:8a:
13:3c:e0:a3:b1:af:d4:5a:39:f1:ba:70:74:6c:46:
60:22:6f:30:88:17:53:08:d0:1d:60:1d:9a:36:fc:
03:d5:56:db:b4:c0:dc:be:c6:fb:65:46:d2:db:aa:
47:0a:1d:6d:a7:60:1f:f7:f3:62:e0:64:b7:a3:90:
6f:ff:8c:eb:94:4e:c9:01:4e:3f:28:06:e1:1b:de:
7e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:37:4D:C7:CB:75:27:C7:85:89:64:20:59:E2:89:B8:1D:AA:99:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/e88ebe16-e648-361e-b49a-7a569d70e0b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.248.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:a6:7d:28:b8:93:37:db:65:68:6b:78:18:72:f3:3f:9b:db:
22:84:a5:b4:c4:b7:09:29:cb:6d:a0:15:7a:8e:8f:19:ae:74:
39:59:bf:90:3b:9f:aa:43:ab:de:b3:ce:ac:65:8d:df:07:11:
87:d3:82:5e:47:2a:bb:a4:26:85:39:ec:7e:11:79:6d:28:3b:
4e:89:4f:09:bd:8f:b8:3e:4a:cd:24:23:18:36:4c:02:21:a1:
2f:bb:b7:b1:0d:6b:13:04:16:c0:36:e3:56:7a:04:20:ff:c2:
44:1f:af:3c:be:7b:e1:2d:0e:6e:d4:06:14:4b:91:f5:1b:6e:
cf:ff:96:18:2c:c2:57:aa:f8:fc:8d:89:2a:33:e1:12:26:36:
18:23:45:fe:27:d6:c3:83:c4:9a:52:a3:a4:a3:1d:93:1a:17:
46:78:cb:32:4f:c6:c6:e2:aa:2e:78:31:1a:e0:3c:7d:23:2d:
48:38:01:cd:d4:da:cb:17:e9:d3:3a:cf:22:16:fa:f3:f7:0d:
07:55:01:5f:21:3e:a4:18:39:94:e6:2a:15:94:ee:d5:33:15:
d9:55:e2:a4:b1:bd:97:fc:7c:68:7d:e2:28:eb:aa:54:81:cb:
ba:0d:fe:0d:81:c0:64:07:09:59:6b:06:bc:d1:20:1c:ee:d9:
c5:7f:e3:17
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWD7azCyxMaHIK2tuWIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDgwOTEyMDAwMFoXDTIyMDkxNDA0MDAwMFowLzEtMCsGA1UEAxMk
YzQ4MGI2MDAtNjdkNC00YjIwLWJiZTItMjI3MDU0MDMzODI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSxpomo5CtYVDWzaXrZ4OSIoC5Mq8u3i4At3
QT4i1z/dV02EOJC/CVMX4uGnKmiTNaiydwHE+aflJ5YVKQpp415/BeNSWaJ7hGab
1spGaGhNfFGBQaEQvHV/+MUArVvWbXcZm6rziUCmhFh1C7BMTs951wLqTDo3kiK3
0Pma4dCAFwIoXbb9ng9dPQXPQVT7PLKgQAUBYfc/7PsOyrLDPqObdaP6QXdGm5Tk
9dDzQ0HBqIoTPOCjsa/UWjnxunB0bEZgIm8wiBdTCNAdYB2aNvwD1VbbtMDcvsb7
ZUbS26pHCh1tp2Af9/Ni4GS3o5Bv/4zrlE7JAU4/KAbhG95+ywIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC03TcfLdSfHhYlkIFniibgdqpkPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZTg4ZWJlMTYtZTY0OC0z
NjFlLWI0OWEtN2E1NjlkNzBlMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCDfgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAmaZ9KLiTN9tlaGt4GHLzP5vbIoSltMS3CSnLbaAVeo6PGa50OVm/kDuf
qkOr3rPOrGWN3wcRh9OCXkcqu6QmhTnsfhF5bSg7TolPCb2PuD5KzSQjGDZMAiGh
L7u3sQ1rEwQWwDbjVnoEIP/CRB+vPL574S0ObtQGFEuR9Rtuz/+WGCzCV6r4/I2J
KjPhEiY2GCNF/ifWw4PEmlKjpKMdkxoXRnjLMk/GxuKqLngxGuA8fSMtSDgBzdTa
yxfp0zrPIhb68/cNB1UBXyE+pBg5lOYqFZTu1TMV2VXipLG9l/x8aH3iKOuqVIHL
ug3+DYHAZAcJWWsGvNEgHO7ZxX/jFw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:30:03 2025 by rpki-client