Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db60db2c-0e2a-3f15-83c4-d1546003cfee.roa
File: db60db2c-0e2a-3f15-83c4-d1546003cfee.roa (raw, json)
Hash identifier: qukGSUt7yLUqtqMW2uG7RXO7yis9pCb7ycw9CP/PY+k=
Subject key identifier: CD:A9:83:00:5C:92:DA:48:A5:85:32:54:7B:5E:FB:E5:98:77:C2:AD
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D2C76C5CA2C51F2D259F27279
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db60db2c-0e2a-3f15-83c4-d1546003cfee.roa
Signing time: Wed 09 Mar 2022 05:00:00 +0000
ROA not before: Wed 09 Mar 2022 05:00:00 +0000
ROA not after: Wed 13 Apr 2022 04:00:00 +0000
asID: 8987
IP address blocks: 13.244.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:2c:76:c5:ca:2c:51:f2:d2:59:f2:72:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 9 05:00:00 2022 GMT
Not After : Apr 13 04:00:00 2022 GMT
Subject: CN=377cb9a1-96d6-4ddb-a5de-5a1fd5bec53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:75:ff:55:0c:64:b4:61:4c:76:e1:1c:b4:43:
7c:54:f2:64:5e:28:f6:8a:2b:e3:94:06:c6:57:4d:
f6:65:55:b4:81:ae:f1:4a:d0:56:aa:bb:ee:76:a5:
8a:63:be:ad:a7:3e:ce:ef:d3:1a:4d:ef:e8:ea:e5:
19:e5:99:fe:dd:02:e0:6b:1c:b7:8e:3c:a6:18:29:
39:90:d4:2b:98:b7:c7:60:16:be:8b:df:2e:98:30:
bb:4d:fe:08:9a:78:25:0c:63:73:13:c6:c6:b1:68:
7d:d0:5c:d7:ce:80:50:af:a8:40:47:de:37:32:50:
01:e8:32:d4:cd:60:01:e0:2b:df:3b:de:89:e6:36:
84:99:aa:22:1b:d2:54:4b:11:34:56:06:99:d4:89:
61:89:ab:53:80:de:59:f8:b6:ce:13:82:8f:57:fb:
66:78:a7:b3:10:90:b6:81:9f:02:fb:7d:da:33:2f:
5e:a6:a7:c5:cc:ef:88:30:df:fa:a5:1f:cf:27:b6:
c4:8d:fe:85:44:0f:71:b4:14:ed:4b:57:cf:cb:86:
80:8b:fd:33:95:3f:d1:58:55:bc:02:7c:b2:54:ab:
54:67:68:41:38:9d:22:44:41:98:27:cf:13:b7:45:
d2:b5:93:05:f1:06:b4:d3:90:8c:a7:d9:5d:86:a1:
25:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A9:83:00:5C:92:DA:48:A5:85:32:54:7B:5E:FB:E5:98:77:C2:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/db60db2c-0e2a-3f15-83c4-d1546003cfee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
13.244.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:29:29:33:c6:de:b2:00:3d:71:bf:63:dd:ab:26:06:69:28:
bf:9a:49:9f:9d:64:31:7b:88:1f:0b:82:6a:c8:0d:7d:d8:46:
70:3c:bd:b7:0a:c5:a1:6d:1c:61:9f:d6:87:e2:e5:f9:34:b5:
d0:a1:fe:e2:cd:32:4c:a4:35:db:af:2b:0d:44:ee:2f:e4:a0:
8e:de:10:e1:eb:89:62:3d:d6:9c:1e:b3:ef:51:83:67:0f:50:
99:27:5f:f2:fd:b2:b2:55:a0:ac:82:00:04:00:a9:1a:b5:44:
4d:b2:e2:11:0f:7b:65:3e:a5:8a:16:bb:01:1f:18:d6:77:5a:
88:92:19:a3:2a:9d:03:96:68:1c:bf:df:d6:98:b1:bf:d2:e5:
33:e0:fd:f2:90:1d:e6:31:1f:b9:bd:0c:9f:66:fc:88:c2:7f:
18:a8:26:c3:03:32:03:63:dc:92:f5:72:95:13:e9:57:18:2e:
4b:cd:8f:2c:a6:00:a2:96:96:90:83:5c:69:5a:1b:bf:2a:b1:
95:82:15:ca:7e:84:ed:60:ab:49:20:67:17:b5:2f:4d:7d:d7:
0d:5d:0d:1b:06:62:f8:29:70:c2:f2:6f:a0:06:41:08:b5:8f:
73:04:c0:7b:ad:1d:a6:1c:80:49:26:24:d1:d5:36:05:c5:66:
14:28:d9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:41:04 2025 by rpki-client