Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6528278-8dd9-3913-8d08-5365bffffeaa.roa
File: b6528278-8dd9-3913-8d08-5365bffffeaa.roa (raw, json)
Hash identifier: ohtxwdkel2uL8HVP1UF5RJbuaKZ+h3CQed/z49yOy5M=
Subject key identifier: D6:DF:D8:32:57:5F:AD:F0:89:3C:00:BF:21:1A:01:1B:BE:50:01:C7
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583CBCE8F31DB664586508F62B00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6528278-8dd9-3913-8d08-5365bffffeaa.roa
Signing time: Fri 28 Jan 2022 05:00:00 +0000
ROA not before: Fri 28 Jan 2022 05:00:00 +0000
ROA not after: Fri 04 Mar 2022 05:00:00 +0000
asID: 16509
IP address blocks: 18.32.0.0/15 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3c:bc:e8:f3:1d:b6:64:58:65:08:f6:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 28 05:00:00 2022 GMT
Not After : Mar 4 05:00:00 2022 GMT
Subject: CN=839b76bd-729c-465b-9d05-26b0825289ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e7:bb:68:73:47:4a:58:97:11:f0:3d:92:39:
36:34:01:1e:3c:e1:23:55:3f:94:ef:15:f4:8f:72:
d1:66:c3:c5:8b:8d:ef:41:0c:51:f7:91:80:a7:6d:
06:91:1b:33:44:1c:ce:87:cd:86:80:6d:ef:d8:06:
e0:88:0a:8d:fc:ec:1c:43:ee:d9:9f:d2:c0:b6:38:
b7:a1:7f:3a:93:bf:72:f3:3a:15:bb:92:ce:49:24:
29:6b:1c:ea:c0:ca:3a:9c:7b:e8:d1:b6:0c:3f:40:
66:24:e0:d6:4b:15:a5:1c:bf:8c:85:20:85:02:69:
e6:35:91:d5:3d:ec:54:7b:14:8d:af:f3:19:37:ff:
9a:45:be:f6:ca:48:24:9e:a1:bd:df:5b:4e:9e:70:
5b:8a:16:bc:d3:d6:34:72:33:75:9d:cd:27:8b:28:
78:ff:88:76:07:32:a3:67:fd:fc:e3:ba:a3:73:c0:
49:c1:9e:f2:5b:fb:6f:22:67:97:29:26:a5:e8:51:
4f:2c:bb:c2:67:3d:de:ce:5d:a0:20:dc:b5:72:17:
cf:81:93:ed:65:9e:20:f1:1a:80:bf:62:5d:4b:cb:
f5:ea:6b:2d:79:21:bd:eb:fc:19:6c:b3:f2:4a:f9:
07:2e:5e:23:0b:64:79:de:46:03:72:2c:8f:91:86:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DF:D8:32:57:5F:AD:F0:89:3C:00:BF:21:1A:01:1B:BE:50:01:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b6528278-8dd9-3913-8d08-5365bffffeaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.32.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:a2:97:8f:3c:85:91:59:3f:23:f7:dd:51:8f:61:63:f9:c3:
7a:3e:94:11:7d:98:d9:3a:e8:f3:7a:3b:8b:2d:04:20:6f:e9:
bb:47:97:a7:37:56:d3:d5:29:e4:82:ad:27:e5:b1:ad:55:40:
d3:de:2d:02:e0:d5:b2:4e:0e:2d:59:53:34:24:da:57:cf:e1:
7d:d8:9f:90:58:41:b3:08:02:40:79:da:41:a5:37:dd:24:9d:
19:2e:a1:86:ad:24:87:17:45:90:31:27:95:14:aa:ce:1b:0a:
a7:99:c6:cd:a2:9e:40:3e:fd:17:45:95:cd:a7:1a:e9:5f:18:
e3:b2:ee:a8:6d:a4:a6:e1:47:a1:b1:9f:92:77:05:c5:d1:26:
d2:ca:ad:c1:40:2c:7e:a1:38:ee:da:5a:30:2a:ce:cf:16:53:
81:e0:3e:22:15:34:4a:df:0b:33:c1:51:65:16:6d:27:e5:af:
17:d3:05:c2:24:47:27:1f:2a:6d:7a:b9:a3:8c:8a:aa:0b:c2:
6d:b1:ba:5b:b5:cd:b2:89:1e:b5:26:6c:b9:30:32:14:67:4f:
25:bc:b6:df:26:50:41:8c:81:87:1e:96:6c:be:a2:8a:b0:a4:
61:79:5e:13:c3:07:6e:c2:43:b9:68:9b:b1:23:60:5b:6a:55:
e9:62:f5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:38:26 2025 by rpki-client