Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f04db305-79fd-30c4-9728-85a4ef572102.roa
File: f04db305-79fd-30c4-9728-85a4ef572102.roa (raw, json)
Hash identifier: +uI0oZ4HsAbUp3f/wi+JrS8YZxfCmGyvVHC1u1769QM=
Subject key identifier: F1:F5:F1:66:EF:A8:D0:95:20:5F:1A:C5:B8:FD:81:AC:7F:2B:6D:72
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858407B15CC05641572660878E300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f04db305-79fd-30c4-9728-85a4ef572102.roa
Signing time: Thu 05 Jan 2023 12:00:00 +0000
ROA not before: Thu 05 Jan 2023 12:00:00 +0000
ROA not after: Fri 10 Feb 2023 05:00:00 +0000
asID: 14618
IP address blocks: 13.216.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:7b:15:cc:05:64:15:72:66:08:78:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 5 12:00:00 2023 GMT
Not After : Feb 10 05:00:00 2023 GMT
Subject: CN=10887dae-a44c-4d9c-9165-c561ed15294a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:eb:f2:26:fe:c8:be:ed:a5:7d:d4:9c:d9:37:
a3:c7:cf:f7:74:b3:b6:8c:5c:25:f5:4a:36:1f:3b:
71:af:09:a2:40:c9:3d:c6:d9:d6:2d:ef:20:38:bb:
28:16:c0:73:81:e4:5e:96:50:5b:4a:2a:56:ac:2b:
d5:cd:48:55:f0:7a:f8:db:9d:e5:48:79:41:86:64:
66:39:8c:b0:08:dd:a8:da:e5:90:1e:48:23:c7:5a:
bd:01:1d:d9:67:fe:ab:35:d6:11:5a:f3:68:17:b2:
45:fa:2c:e5:68:86:ae:06:1a:70:6d:6f:39:62:51:
46:bf:8f:85:d1:74:ae:82:e8:6d:74:f1:6e:08:e5:
47:29:74:83:a7:37:de:6f:7f:d2:d7:70:2a:7c:45:
b6:45:a5:ed:3f:f1:38:c7:39:1e:91:6a:43:b3:c2:
a1:9e:96:7e:0a:81:60:6a:f0:69:8f:31:41:32:b8:
9f:1a:33:39:93:22:8c:5a:30:9f:4f:1c:37:7a:c8:
d6:17:e5:e4:a7:e8:84:82:2e:88:bf:37:c6:ca:1f:
1c:8d:04:a4:fc:27:9d:40:4f:85:b5:c1:d4:7e:8a:
12:92:6d:a9:b4:31:ee:56:9b:f5:a6:c3:6e:de:b6:
cd:1f:8a:34:13:fc:56:63:e5:99:32:e4:d4:f5:96:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F5:F1:66:EF:A8:D0:95:20:5F:1A:C5:B8:FD:81:AC:7F:2B:6D:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f04db305-79fd-30c4-9728-85a4ef572102.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.216.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:ad:e9:3b:07:61:4f:b0:78:cc:c5:5e:b3:a0:58:66:91:d5:
ef:a5:04:02:25:56:62:f2:bf:93:e3:ca:cd:0d:24:48:55:0f:
d2:96:90:16:88:7f:de:db:ab:14:e9:b2:4c:b7:80:9f:63:d2:
74:65:27:23:7b:20:51:48:b9:cb:ea:5f:b9:f1:d3:db:a2:d4:
b7:3e:d4:d3:de:ef:09:f0:b7:31:2a:cf:58:75:6f:d3:b5:1f:
9a:25:c4:24:ae:91:20:12:4e:cb:55:89:eb:0e:ae:41:8e:b5:
9f:ed:98:08:cc:ae:4f:8f:27:28:af:8e:03:bb:b6:18:7e:17:
e4:1b:f5:0f:58:63:45:fd:e0:e3:f5:4e:9d:3a:cc:37:17:5f:
de:cc:60:9d:7f:b7:66:19:d1:dc:b1:2c:a6:e9:02:14:1d:7c:
9f:24:f6:96:64:ad:e6:6e:42:92:d2:b9:22:98:1f:5c:4a:c4:
dc:65:62:51:85:a4:bd:02:d5:f9:a0:49:c2:79:a8:42:a1:80:
d1:91:65:4b:9b:4f:61:05:cc:14:b4:23:9a:fd:c9:5c:09:37:
74:c0:dc:33:ff:ed:45:61:d2:85:de:6e:44:21:9c:9e:59:3c:
0d:d1:fe:07:37:39:00:ff:97:3a:a9:06:d3:77:d5:94:2b:ad:
d7:12:a2:cf
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEB7FcwFZBVyZgh44wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIzMDEwNTEyMDAwMFoXDTIzMDIxMDA1MDAwMFowLzEtMCsGA1UEAxMk
MTA4ODdkYWUtYTQ0Yy00ZDljLTkxNjUtYzU2MWVkMTUyOTRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3uvyJv7Ivu2lfdSc2Tejx8/3dLO2jFwl9Uo2
HztxrwmiQMk9xtnWLe8gOLsoFsBzgeRellBbSipWrCvVzUhV8Hr4253lSHlBhmRm
OYywCN2o2uWQHkgjx1q9AR3ZZ/6rNdYRWvNoF7JF+izlaIauBhpwbW85YlFGv4+F
0XSuguhtdPFuCOVHKXSDpzfeb3/S13AqfEW2RaXtP/E4xzkekWpDs8KhnpZ+CoFg
avBpjzFBMrifGjM5kyKMWjCfTxw3esjWF+Xkp+iEgi6IvzfGyh8cjQSk/CedQE+F
tcHUfooSkm2ptDHuVpv1psNu3rbNH4o0E/xWY+WZMuTU9ZaQDwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPH18WbvqNCVIF8axbj9gax/K21yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjA0ZGIzMDUtNzlmZC0z
MGM0LTk3MjgtODVhNGVmNTcyMTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDdgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASa3pOwdhT7B4zMVes6BYZpHV76UEAiVWYvK/k+PKzQ0kSFUP0paQFoh/
3turFOmyTLeAn2PSdGUnI3sgUUi5y+pfufHT26LUtz7U097vCfC3MSrPWHVv07Uf
miXEJK6RIBJOy1WJ6w6uQY61n+2YCMyuT48nKK+OA7u2GH4X5Bv1D1hjRf3g4/VO
nTrMNxdf3sxgnX+3ZhnR3LEspukCFB18nyT2lmSt5m5CktK5IpgfXErE3GViUYWk
vQLV+aBJwnmoQqGA0ZFlS5tPYQXMFLQjmv3JXAk3dMDcM//tRWHShd5uRCGcnlk8
DdH+Bzc5AP+XOqkG03fVlCut1xKizw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:43:38 2025 by rpki-client