Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7567109e-eca2-3e6a-ba6a-43cdd9299b6c.roa
File: 7567109e-eca2-3e6a-ba6a-43cdd9299b6c.roa (raw, json)
Hash identifier: iaM9T5J1oTRZgTzgHuLKuGQ78Xx7Qs79S+sA1IhBr1s=
Subject key identifier: 70:1D:33:AC:1F:F4:29:A9:6C:A9:D7:7D:D8:1C:6C:86:E2:A2:21:5F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583C68EDCAC80B85643FFE1C3700
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7567109e-eca2-3e6a-ba6a-43cdd9299b6c.roa
Signing time: Wed 29 Dec 2021 05:00:00 +0000
ROA not before: Wed 29 Dec 2021 05:00:00 +0000
ROA not after: Wed 02 Feb 2022 05:00:00 +0000
asID: 8987
IP address blocks: 13.224.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:68:ed:ca:c8:0b:85:64:3f:fe:1c:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Dec 29 05:00:00 2021 GMT
Not After : Feb 2 05:00:00 2022 GMT
Subject: CN=3088bff1-1383-461a-9134-9a8b8398f782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:55:db:2f:e8:0c:61:4f:41:5f:cb:cf:d8:3e:
d7:2d:b6:03:ab:8e:e4:8e:d3:16:36:f7:50:6d:95:
b0:3c:31:b8:5a:35:4b:6a:77:57:d1:3d:a2:24:2f:
4f:d2:ce:d6:45:08:a3:b0:00:5c:57:ec:be:2a:f3:
bb:68:26:18:5c:7f:bf:9b:ce:37:2c:10:34:0d:73:
5b:04:7a:0b:d9:eb:31:64:2b:4e:a3:a8:1f:a4:9c:
7e:63:8c:b7:7f:5c:7e:1f:6c:69:30:aa:58:ea:40:
51:10:ff:b4:1b:ea:d0:07:d0:3c:ba:cf:6d:56:38:
1f:97:71:c5:7a:5e:f0:31:f7:56:0e:55:57:f4:62:
39:1c:b1:2d:92:c9:f6:48:43:89:f7:0c:60:d3:70:
7d:a4:c6:c8:64:c7:8f:b5:f7:b5:1c:29:19:4d:4a:
12:cd:94:05:36:42:18:c1:ce:30:c3:d8:dc:92:bc:
ba:cf:66:1a:00:b6:68:72:7a:54:40:f7:fe:02:7b:
cd:5b:36:fc:2c:f3:ed:e5:fb:c6:e5:ba:94:4a:0d:
3a:83:1c:2c:be:bc:12:25:c2:a4:83:30:c9:3b:c2:
79:30:ce:6a:41:8c:2d:19:cf:3d:7a:e1:18:34:03:
9c:61:f2:05:bf:54:17:64:8f:67:c9:90:85:96:e9:
59:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:33:AC:1F:F4:29:A9:6C:A9:D7:7D:D8:1C:6C:86:E2:A2:21:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/7567109e-eca2-3e6a-ba6a-43cdd9299b6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.224.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:0e:2c:3d:61:e9:61:57:a2:51:36:40:5d:ca:60:27:16:08:
17:68:c3:38:7c:8a:46:53:28:1e:1d:f7:2e:1f:8a:70:1c:4b:
9e:bd:46:a3:4e:fe:5a:f5:05:eb:90:63:2d:e3:ca:2a:76:b2:
9a:2f:8a:ad:03:e5:52:9d:09:58:17:e8:79:7d:1a:79:b5:b7:
ff:a1:14:c6:09:80:fc:94:51:31:f1:b6:ae:4d:95:94:e8:51:
4c:66:67:9c:3c:34:8f:d2:73:80:d2:07:30:c6:3f:d0:43:8a:
85:f9:69:7c:3b:8b:25:d0:78:7e:f4:06:71:1d:6b:12:00:17:
4b:b4:cd:45:66:c1:8b:4f:ea:4e:bb:4c:1b:41:19:17:84:5a:
93:52:e8:75:f9:5e:90:d9:49:c1:70:4d:d9:6d:7f:af:68:c9:
59:40:8b:f2:b2:91:00:a7:eb:e0:2e:cd:b8:04:1b:58:a6:f1:
48:9b:36:3c:5b:45:02:a1:5f:23:30:61:09:de:be:87:c6:a1:
57:c1:0d:f1:a3:9a:aa:71:85:81:d8:53:b4:39:23:66:b8:6d:
02:a2:d6:34:b0:ed:fa:2f:95:8b:34:5b:3a:11:a4:76:88:7a:
6b:3a:44:a9:74:94:12:55:d5:af:70:51:57:25:be:28:68:5f:
00:a0:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:56:36 2025 by rpki-client