Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba566aa5-4f6b-35a3-acf3-af6f38414d25.roa
File: ba566aa5-4f6b-35a3-acf3-af6f38414d25.roa (raw, json)
Hash identifier: g9zCvy8V5bOv1QxvGpvkPznnikW6FddSjjVHauJiIZY=
Subject key identifier: E5:CA:86:52:BE:32:C0:88:13:E4:3E:C5:CC:39:A1:74:86:9A:8C:E4
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F4328583D32A17DB410F4782B0B546F00
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba566aa5-4f6b-35a3-acf3-af6f38414d25.roa
Signing time: Fri 11 Mar 2022 05:00:00 +0000
ROA not before: Fri 11 Mar 2022 05:00:00 +0000
ROA not after: Fri 15 Apr 2022 04:00:00 +0000
asID: 14618
IP address blocks: 18.246.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3d:32:a1:7d:b4:10:f4:78:2b:0b:54:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Mar 11 05:00:00 2022 GMT
Not After : Apr 15 04:00:00 2022 GMT
Subject: CN=1069ccfe-b8dd-44ce-acbf-40535c905ce6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f5:db:8e:68:b7:5a:95:28:6d:8f:7b:74:8e:
8c:45:55:c8:03:e1:61:5a:3e:45:47:52:b7:c5:4d:
e8:af:8e:47:d4:5a:50:4f:f6:92:0b:dc:40:06:b7:
53:4f:35:c4:5e:51:95:22:e5:64:57:c4:b8:83:19:
1d:77:96:1b:43:75:b9:34:37:3f:42:5a:ea:64:53:
d2:9f:a4:5c:03:50:4c:8e:3a:56:4f:be:45:b8:e6:
3d:89:bb:ff:96:e8:28:30:4b:d1:36:13:90:c1:9c:
a0:9f:3f:71:16:e6:c7:fc:9f:ba:47:c3:68:26:c3:
ce:62:90:f1:7d:a7:d6:24:de:fb:ee:1d:59:42:8f:
a8:5d:e8:bb:7f:d5:d7:d0:f4:da:70:52:08:27:0c:
12:e3:3e:19:b3:09:a5:b3:3d:38:15:c5:21:55:74:
82:b0:6e:63:b7:6e:b9:be:be:12:29:ae:0e:81:4c:
a0:8f:a7:6c:53:73:bf:12:8a:3e:68:de:1b:9a:c5:
5f:57:23:88:6e:12:37:31:5d:7a:2e:66:ca:82:20:
18:72:33:9c:bb:c2:5a:a9:92:2b:00:96:7c:c6:06:
35:16:53:b9:a4:d2:d7:06:08:b1:d2:02:4f:2b:09:
5f:1c:76:07:eb:41:74:b2:da:11:cd:1e:ee:7c:6d:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:86:52:BE:32:C0:88:13:E4:3E:C5:CC:39:A1:74:86:9A:8C:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ba566aa5-4f6b-35a3-acf3-af6f38414d25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.246.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:43:7e:c0:11:f8:5a:2c:81:45:31:78:3e:bd:52:f0:3f:87:
90:c4:fd:77:02:7e:06:1a:75:2d:33:38:ee:e0:98:29:c4:2e:
e4:d6:a5:52:55:f8:04:44:11:ac:c7:bc:f6:cc:a7:2c:e4:03:
82:28:ea:ae:9b:b7:c7:2d:45:2b:29:ba:15:84:4a:61:29:3b:
2c:de:32:3e:25:89:8b:c6:d6:ac:0a:a8:2b:fa:70:70:36:4d:
e3:8e:f1:84:45:48:7b:98:91:36:ad:0c:e1:b7:f5:18:80:17:
0b:e5:a1:fa:7e:97:15:0b:2b:77:46:21:f0:b5:c7:5a:c3:8e:
34:24:8f:db:ff:ca:2e:89:b6:a4:c4:63:90:b9:eb:42:e4:a5:
c2:c6:e7:a3:62:7c:b7:bb:f6:db:80:28:95:a6:b9:37:2b:46:
75:4d:32:0c:61:fb:f7:cb:76:19:11:c0:79:f8:6c:be:1e:d2:
58:fc:57:b5:ba:7e:4c:2e:43:45:16:53:00:e5:96:8e:09:52:
3e:50:f1:92:c7:12:39:a0:8a:c7:be:37:e8:f4:de:43:51:65:
9b:85:77:f3:c8:42:23:bd:ae:3e:c3:1e:71:3f:0b:be:ab:ed:
ef:d6:25:61:a8:0d:e1:3b:c3:2a:8b:a4:04:76:f9:cf:28:f0:
3b:63:4c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:44:36 2025 by rpki-client