Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c577373-462b-3e9f-b40c-7cd77c088321.roa
File: 2c577373-462b-3e9f-b40c-7cd77c088321.roa (raw, json)
Hash identifier: OeabHAVYQpdX30VPgF2PWidQNLu1/tCgY54g/bivH0I=
Subject key identifier: B3:FD:4A:3D:8A:67:CD:D6:8B:B0:B1:9F:8C:71:D1:BC:54:46:7A:D6
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CB71FC52A0DABFF3AEB793180
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c577373-462b-3e9f-b40c-7cd77c088321.roa
Signing time: Wed 26 Jan 2022 05:00:00 +0000
ROA not before: Wed 26 Jan 2022 05:00:00 +0000
ROA not after: Wed 02 Mar 2022 05:00:00 +0000
asID: 8987
IP address blocks: 13.244.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:b7:1f:c5:2a:0d:ab:ff:3a:eb:79:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 26 05:00:00 2022 GMT
Not After : Mar 2 05:00:00 2022 GMT
Subject: CN=776d9b0e-7e27-4a19-bc7a-acf10589b241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:35:27:40:46:f7:8d:ce:1a:14:b1:01:ec:00:
0b:dc:62:07:2f:4c:a2:4a:71:45:21:e0:09:41:37:
82:b6:0f:a9:4e:d6:0b:b1:21:9d:8f:7b:2a:97:14:
ea:da:eb:d4:dd:71:48:8e:f3:0b:31:b8:1f:05:f7:
aa:13:52:3a:09:96:09:13:36:55:20:30:6f:8a:f9:
59:57:4e:c9:8a:1f:79:9f:a6:07:06:21:d3:fb:7c:
fb:f6:78:db:83:9d:cf:91:fd:87:db:db:02:82:76:
c0:ac:c2:9c:01:26:0c:70:72:a0:b8:f1:48:cd:88:
c9:e2:06:42:bf:e4:81:fb:b8:31:14:54:35:15:04:
2c:2c:ed:19:95:c2:53:c4:f6:f8:95:b6:15:75:7b:
0f:15:9b:92:81:cd:55:d2:f9:37:d0:d7:ee:2d:48:
6e:b6:69:b1:33:ad:08:ed:7e:a0:a4:80:b5:da:7a:
ba:bd:4a:37:af:e3:da:bd:a9:d4:79:27:fe:be:77:
19:54:a7:0f:fd:33:e5:d1:cb:93:91:b3:42:0e:8c:
6d:c8:89:1e:a5:79:12:38:5f:61:e5:de:8d:b0:2c:
81:78:d1:a3:18:c3:35:4c:2b:1b:23:61:5b:1a:65:
8f:57:52:af:d8:0d:32:f4:e4:85:2c:61:8d:26:e4:
05:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FD:4A:3D:8A:67:CD:D6:8B:B0:B1:9F:8C:71:D1:BC:54:46:7A:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/2c577373-462b-3e9f-b40c-7cd77c088321.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.244.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:df:82:52:c3:37:da:96:b1:aa:d9:67:fd:90:67:94:d1:e2:
06:40:12:8c:6f:3a:b9:9a:44:af:ce:f9:ee:09:18:f9:ac:a9:
64:96:8e:a4:95:8f:82:05:5a:1e:62:3d:7a:ed:45:04:75:4f:
91:32:1c:a4:b6:fa:4d:64:d5:6e:bc:65:45:54:c0:6e:d5:a1:
d1:5e:34:db:2d:a5:4a:f1:68:4b:35:58:b2:34:e5:44:63:e1:
ce:23:91:50:d9:32:ee:ef:91:9f:bd:1c:9d:d3:bd:1e:23:f7:
46:9d:c5:fb:0e:0a:c8:3b:39:d2:e5:58:69:88:44:b4:5c:0a:
54:5d:fc:87:61:0f:19:e6:60:36:f7:b2:27:11:97:0c:eb:08:
8a:a5:00:d9:e6:be:51:12:d6:c7:0b:44:b7:4f:9b:77:37:c9:
62:44:72:f4:78:4f:80:3d:9d:f8:95:eb:de:1b:84:c5:52:78:
2c:f0:b2:fb:c9:5a:b7:3f:2b:69:ac:df:0d:50:02:eb:63:e3:
88:3b:6e:53:e5:34:74:ca:23:fb:95:20:d4:b3:10:1c:36:8f:
42:8b:b1:9c:df:b7:a7:11:bd:5e:c2:10:8f:22:58:5a:d3:62:
50:b4:40:e7:ab:50:22:e9:4e:04:b9:72:a0:f7:30:7e:1d:ab:
26:dd:73:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:13:28 2025 by rpki-client