Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32cbf56a-72e5-308e-b4a4-a69599d39c97.roa
File: 32cbf56a-72e5-308e-b4a4-a69599d39c97.roa (raw, json)
Hash identifier: znMu5lGXwO1+kbp0YRPI8eZDnlnXSfVLMKhUxW4G1qI=
Subject key identifier: 97:BE:47:ED:9D:E5:68:B1:8F:B5:3C:DA:57:B7:6A:FE:33:D4:03:35
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D0B759BC42FCA8B721A3F7760
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32cbf56a-72e5-308e-b4a4-a69599d39c97.roa
Signing time: Fri 25 Feb 2022 05:00:00 +0000
ROA not before: Fri 25 Feb 2022 05:00:00 +0000
ROA not after: Fri 01 Apr 2022 04:00:00 +0000
asID: 16509
IP address blocks: 18.180.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:0b:75:9b:c4:2f:ca:8b:72:1a:3f:77:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Feb 25 05:00:00 2022 GMT
Not After : Apr 1 04:00:00 2022 GMT
Subject: CN=c482c469-1b94-4c16-8266-f6e82bb8faa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d5:d8:e3:57:3b:b8:9a:04:c1:a9:b8:26:54:
dc:97:78:43:74:67:26:1b:07:f8:09:23:6d:96:4e:
e1:40:9b:2e:cc:67:db:fb:90:e0:72:3e:27:d1:59:
a1:5b:02:79:78:e7:8a:08:1d:fe:43:ac:0f:18:b0:
34:0f:c9:35:23:db:60:34:6b:2a:21:ca:d2:68:5d:
3d:29:ad:04:60:fe:99:66:df:72:f3:79:0f:b8:26:
79:15:b8:53:91:e5:3f:cd:09:ac:4a:ee:b4:8c:5f:
38:73:b6:73:ae:55:fd:34:77:1b:2a:14:91:31:9b:
87:94:5a:f6:21:51:c1:dd:01:3a:ce:8e:31:5a:fb:
c4:59:02:1b:a3:ea:08:02:4f:c9:2c:d1:22:b2:04:
15:cb:4a:a9:40:0a:60:28:2d:71:82:34:71:23:8b:
0f:f1:ad:c9:9d:52:65:dd:0d:5e:43:7f:46:82:ca:
fb:87:0b:bc:67:fc:d2:dc:75:d3:a2:da:71:d5:e6:
b7:bb:5f:65:e1:15:e7:01:3f:fa:54:1d:62:f9:8e:
af:e3:89:19:20:d8:7d:05:28:be:7f:04:56:62:08:
36:0a:f6:9b:0c:ed:22:1d:38:ca:00:59:33:50:f7:
54:9b:b0:ca:ea:1f:5c:b8:04:62:34:3a:e6:0b:57:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:BE:47:ED:9D:E5:68:B1:8F:B5:3C:DA:57:B7:6A:FE:33:D4:03:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/32cbf56a-72e5-308e-b4a4-a69599d39c97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.180.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:d3:14:47:c0:5f:b6:17:74:a3:36:1c:a9:4c:e6:db:14:36:
ac:28:fe:84:17:94:40:f1:d5:3c:a3:2f:49:87:f5:b8:70:64:
7d:0a:75:4e:b1:41:f2:f1:e3:3e:50:8c:42:4e:e1:06:7c:16:
48:6d:25:f2:52:f7:11:e3:cb:4e:cd:85:4f:06:ce:39:61:18:
95:99:01:f3:19:01:62:5d:40:1f:ac:91:d3:16:42:45:19:62:
fc:92:26:ae:76:d5:49:25:da:e4:6c:67:a4:68:8a:ca:21:b2:
bb:28:a0:28:0a:f9:1b:2d:70:bd:4e:26:be:67:d7:94:14:a9:
97:dc:5f:41:6f:40:4c:6f:7a:4f:62:52:5d:25:7d:80:31:a7:
7c:25:3a:b1:51:b7:40:57:67:9f:1e:c0:65:5f:bd:bb:80:c5:
51:af:ec:12:ec:8a:9b:b7:49:ff:cc:f9:fb:a7:1a:e0:0e:4b:
8d:7e:2c:15:1f:cf:6f:93:4a:db:05:b2:f7:4c:54:6e:80:e9:
d8:60:5d:12:6a:71:e7:0e:26:a6:77:cd:91:d3:83:23:89:a2:
b7:53:e2:6f:97:5b:24:d9:45:f7:c1:c5:ca:17:fa:4d:dc:85:
0b:e9:77:7c:09:86:8b:56:f5:6c:2c:f6:e6:7d:ad:ae:58:88:
00:8b:6d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 14:54:37 2025 by rpki-client