Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d29a1ad-581d-3430-ace2-c79fc27c345b.roa
File: 3d29a1ad-581d-3430-ace2-c79fc27c345b.roa (raw, json)
Hash identifier: ZOSXowtxGxox4AQAM05yF+Fhf0x+sGGY3Nvg/hy0rek=
Subject key identifier: 98:DD:46:FD:87:76:C5:BA:5D:91:78:19:B2:54:63:FB:6D:3D:B2:68
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F432858403AE7B96F264BC5379F58D300
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d29a1ad-581d-3430-ace2-c79fc27c345b.roa
Signing time: Tue 13 Dec 2022 12:00:00 +0000
ROA not before: Tue 13 Dec 2022 12:00:00 +0000
ROA not after: Wed 18 Jan 2023 05:00:00 +0000
asID: 8987
IP address blocks: 13.244.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:3a:e7:b9:6f:26:4b:c5:37:9f:58:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 13 12:00:00 2022 GMT
Not After : Jan 18 05:00:00 2023 GMT
Subject: CN=114ab293-0fe9-400c-a511-501bd52b0b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2c:b3:58:9d:c7:49:35:b3:09:3f:61:4a:df:
95:ad:8d:d4:b0:94:4f:16:7e:a3:be:ac:fd:65:28:
b0:29:b1:1b:42:66:fa:66:d5:fb:8f:a0:70:5a:1c:
39:c4:50:62:d2:34:94:73:a7:ef:3c:39:28:3f:ef:
5a:fa:78:3f:6f:ca:10:83:a5:10:36:05:a9:17:76:
57:bb:25:3f:1d:42:c9:0b:60:ec:35:89:df:71:5d:
10:4f:eb:75:eb:65:ce:19:fa:43:f9:53:c0:05:77:
a9:c9:9b:61:28:1a:33:9f:97:67:94:c6:e8:a8:b0:
ae:50:c6:e6:ba:eb:ea:14:ee:3f:d3:06:cb:ab:9e:
4c:dd:2f:cf:63:ad:29:a5:08:c6:c7:42:fa:3a:57:
3c:02:79:31:f5:68:b6:c0:e1:b8:4c:73:fd:62:ad:
31:f7:c7:70:ae:43:78:c2:9c:1b:4f:5e:7c:71:18:
b7:45:62:e2:3d:64:d6:77:b6:fe:f0:eb:fb:99:4d:
e4:38:6a:c0:e6:ac:f1:85:12:8f:75:a8:d0:88:d8:
bc:9a:54:72:47:e4:df:b5:a0:d0:ce:59:ce:c7:41:
29:ef:dd:95:c6:54:c2:24:58:35:f9:86:07:2f:f4:
df:25:21:2c:10:ca:cb:9a:15:ba:21:ae:96:0f:aa:
3d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:DD:46:FD:87:76:C5:BA:5D:91:78:19:B2:54:63:FB:6D:3D:B2:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/3d29a1ad-581d-3430-ace2-c79fc27c345b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.244.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:e4:95:97:04:fd:27:2e:89:ec:26:1e:29:02:1b:19:e8:cf:
13:cf:a6:9a:e4:7c:55:75:ff:65:48:dd:5d:db:81:09:c8:f8:
01:22:7c:d1:1e:a8:db:03:00:8d:a8:36:fb:1b:5d:a0:0c:6e:
4a:63:3c:d2:8a:3f:45:9a:52:20:98:ab:0d:b7:db:23:4e:b2:
3c:2f:ec:74:de:fa:3e:5c:85:38:c4:ae:58:a6:2e:e0:2e:61:
63:9e:f4:a2:3f:3b:d5:9d:4f:79:99:0a:93:ae:54:ee:10:a0:
7d:a4:ec:6f:23:d8:d9:6c:c5:88:11:97:e2:9c:ca:08:3c:36:
3d:9b:f4:df:07:87:b8:ea:d9:4b:37:ce:66:12:57:da:dd:ee:
7a:7b:23:3c:2c:e5:1c:69:13:31:1d:7e:9c:79:02:ac:89:b4:
1d:43:7d:ea:b2:a2:b1:81:a5:d9:ec:83:50:48:e5:8f:90:8d:
e5:3f:f8:a5:98:24:4d:71:e0:9d:24:13:05:d3:5f:4b:4c:9d:
b1:48:ab:7d:2f:13:c8:38:6c:8d:4a:e5:bf:17:68:59:55:1a:
0c:e0:20:0d:48:e1:7c:cb:0a:a3:57:64:81:ba:f0:48:bd:d1:
be:ee:52:d1:8f:d0:4d:bb:3e:30:a0:fd:b6:06:0a:bc:fc:ae:
c9:c2:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:03:06 2025 by rpki-client