Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f569562d-1059-3cb9-8dd7-440a0f0cd052.roa
File: f569562d-1059-3cb9-8dd7-440a0f0cd052.roa (raw, json)
Hash identifier: 9gCv5JSt4QdoAKAXdVZ2QJ+Y5A/RqFP0ivuGZe0whgE=
Subject key identifier: 10:80:18:43:1B:13:28:8C:AB:CB:D0:35:76:C0:1C:F0:04:EB:82:A2
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C822AEA0D37768C67E0B77362
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f569562d-1059-3cb9-8dd7-440a0f0cd052.roa
Signing time: Fri 07 Jan 2022 05:00:00 +0000
ROA not before: Fri 07 Jan 2022 05:00:00 +0000
ROA not after: Fri 11 Feb 2022 05:00:00 +0000
asID: 14618
IP address blocks: 13.216.0.0/13 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:82:2a:ea:0d:37:76:8c:67:e0:b7:73:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 7 05:00:00 2022 GMT
Not After : Feb 11 05:00:00 2022 GMT
Subject: CN=0fe44f6f-6b0b-48df-acc5-59800bc66ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:68:4e:8f:2c:2a:11:3b:02:fb:08:71:d2:30:
5f:3e:6e:a2:c9:6c:03:41:7d:13:9f:dd:56:10:ea:
2a:65:4a:45:63:99:a8:e6:ec:a4:1a:f9:ce:4e:9e:
e8:fb:0a:1e:8f:ad:75:7e:dd:28:9e:36:38:99:0d:
4e:d8:78:70:4f:e0:a9:f1:16:ab:47:30:16:62:d2:
6b:9d:62:31:d6:17:ff:86:42:f3:36:c8:ad:6c:c6:
b1:1c:2b:07:d7:7f:66:a3:8f:a8:58:5b:95:c3:18:
89:38:0c:e1:4b:29:41:e4:5d:02:22:50:32:d6:fd:
b7:74:5a:85:62:ff:54:77:69:95:e9:a2:19:93:5e:
82:81:5c:b9:11:e4:5d:db:da:63:49:23:3a:ea:e7:
b4:56:5f:3c:86:39:68:21:f1:29:6c:e1:c6:5d:c1:
4b:30:1b:d9:cb:39:d0:a2:2e:97:7c:3c:32:3e:6a:
02:7c:30:f6:cb:73:0e:1d:72:b6:d6:55:98:cf:1d:
0a:3f:16:bb:52:c5:07:f0:34:dc:11:af:25:7f:4b:
67:c8:bb:d6:c7:35:70:e2:79:d9:99:0e:af:85:e9:
e7:3b:36:7f:8c:00:8d:49:c0:c9:2d:34:b4:95:33:
1b:78:86:10:4d:0c:7c:e1:18:ae:26:a2:30:56:a3:
57:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:80:18:43:1B:13:28:8C:AB:CB:D0:35:76:C0:1C:F0:04:EB:82:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/f569562d-1059-3cb9-8dd7-440a0f0cd052.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.216.0.0/13
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:98:24:c9:27:f6:65:42:3e:19:1b:3e:b0:9e:42:29:7b:9d:
ff:95:1b:09:bd:85:41:8e:83:b1:20:73:5b:c6:52:e8:8f:4f:
2e:a3:f3:c2:f5:9c:4f:f3:c2:4f:e7:a3:bf:8f:0c:b0:35:0e:
b6:98:57:de:b1:dc:16:dd:0f:1f:5b:f4:fa:a0:86:e7:28:3b:
ce:49:a7:4a:a9:09:a8:81:3b:4b:20:70:4f:71:72:23:13:d1:
64:96:1a:72:2e:e1:7a:a5:88:e1:01:6d:db:93:93:ee:5a:3a:
9a:df:cc:ac:7f:db:b7:84:0d:63:cb:e1:3e:60:23:03:24:4d:
7d:f7:e2:52:08:c0:d6:d9:9a:3a:c3:0a:e7:7b:37:66:da:e8:
63:ff:64:8b:f3:7a:f2:43:8a:fe:b6:3d:2f:9b:2b:52:68:14:
e4:8d:19:68:75:8a:78:db:13:06:8a:d5:7a:d3:46:5e:20:0b:
60:a3:94:fe:21:db:9c:77:2b:06:88:fe:a6:85:ca:26:83:d6:
5f:5a:76:0a:3d:63:80:bb:ea:66:fb:3a:5b:43:52:b5:db:1d:
7e:c8:8b:36:00:25:99:0d:7e:25:36:d0:bb:29:bb:d8:e9:a2:
91:7d:87:5e:04:b4:7e:a5:ec:f7:13:21:fc:8d:5d:be:51:13:
f1:c1:83:56
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWDyCKuoNN3aMZ+C3c2IwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMDEwNzA1MDAwMFoXDTIyMDIxMTA1MDAwMFowLzEtMCsGA1UEAxMk
MGZlNDRmNmYtNmIwYi00OGRmLWFjYzUtNTk4MDBiYzY2ZWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAimhOjywqETsC+whx0jBfPm6iyWwDQX0Tn91W
EOoqZUpFY5mo5uykGvnOTp7o+woej611ft0onjY4mQ1O2HhwT+Cp8RarRzAWYtJr
nWIx1hf/hkLzNsitbMaxHCsH139mo4+oWFuVwxiJOAzhSylB5F0CIlAy1v23dFqF
Yv9Ud2mV6aIZk16CgVy5EeRd29pjSSM66ue0Vl88hjloIfEpbOHGXcFLMBvZyznQ
oi6XfDwyPmoCfDD2y3MOHXK21lWYzx0KPxa7UsUH8DTcEa8lf0tnyLvWxzVw4nnZ
mQ6vhennOzZ/jACNScDJLTS0lTMbeIYQTQx84RiuJqIwVqNXswIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBCAGEMbEyiMq8vQNXbAHPAE64KiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvZjU2OTU2MmQtMTA1OS0z
Y2I5LThkZDctNDQwYTBmMGNkMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMDDdgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWZgkySf2ZUI+GRs+sJ5CKXud/5UbCb2FQY6DsSBzW8ZS6I9PLqPzwvWc
T/PCT+ejv48MsDUOtphX3rHcFt0PH1v0+qCG5yg7zkmnSqkJqIE7SyBwT3FyIxPR
ZJYaci7heqWI4QFt25OT7lo6mt/MrH/bt4QNY8vhPmAjAyRNfffiUgjA1tmaOsMK
53s3ZtroY/9ki/N68kOK/rY9L5srUmgU5I0ZaHWKeNsTBorVetNGXiALYKOU/iHb
nHcrBoj+poXKJoPWX1p2Cj1jgLvqZvs6W0NStdsdfsiLNgAlmQ1+JTbQuym72Omi
kX2HXgS0fqXs9xMh/I1dvlET8cGDVg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:58:32 2025 by rpki-client