Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa
File: 2a622dab-3a0e-3d38-8261-020cde7acaa2.roa (raw, json)
Hash identifier: bHY4dRf0OxtTvGMwr+NSWUpxtECeF01rn+W/uner1wE=
Subject key identifier: 55:66:1D:6C:B0:0A:55:CA:9B:70:1A:4C:D3:E8:4E:10:0E:1F:8E:31
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F432858485470322509719FA4BC6D7480
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 33392
IP address blocks: 192.149.46.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:32:25:09:71:9f:a4:bc:6d:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=9554b14c-6236-4bff-85b0-fea8fa28d6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:48:8d:66:38:fa:d5:bb:b0:27:84:1f:89:
6a:d0:6c:86:c4:87:e3:b6:96:87:ec:76:55:79:d0:
9d:d0:53:a4:c1:83:4c:c9:af:55:ed:8d:2d:63:63:
cf:5e:46:29:ca:27:e7:05:19:9c:2b:d3:aa:0a:78:
17:b3:c9:8b:2b:96:62:7f:11:20:1e:98:90:a8:8d:
a3:ad:e7:92:37:44:ef:c9:ea:d7:a0:a0:37:3f:26:
86:b5:d0:ef:18:1d:d4:1d:4d:fe:01:7b:3a:5d:a3:
3c:ea:93:59:92:2c:e1:d4:1a:9b:9f:8d:38:db:1f:
82:7d:45:95:ef:a7:93:ed:4d:29:cb:d4:18:99:f8:
62:f7:ff:dc:fe:c2:55:54:fc:2f:bd:98:72:95:9c:
4c:ce:fb:fa:09:87:3f:b9:e0:82:e1:08:a9:6c:05:
fb:75:fc:64:04:ed:75:a9:a9:b7:7c:82:c2:59:59:
48:9b:f5:5b:3a:82:a0:48:3d:23:6a:95:55:87:47:
16:46:de:f2:98:34:82:ab:c7:6d:08:c5:c7:9c:5d:
f4:57:c6:ff:29:e7:16:ff:97:86:4e:9e:0a:79:7a:
e5:b8:22:11:b7:f8:39:69:00:78:d5:c3:fb:df:d8:
f8:4a:ac:29:6a:24:43:22:73:1a:fc:11:96:0e:91:
e3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:66:1D:6C:B0:0A:55:CA:9B:70:1A:4C:D3:E8:4E:10:0E:1F:8E:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/2a622dab-3a0e-3d38-8261-020cde7acaa2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.149.46.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:28:18:44:4d:45:f8:8e:51:0f:41:30:ae:0d:3f:da:83:7e:
f4:ad:46:1d:5c:e5:11:bc:fe:37:01:3d:52:a5:ed:99:fd:ed:
47:81:1d:79:4d:e3:eb:8e:f2:3b:b9:66:1a:d8:14:40:21:ad:
f4:92:a5:5e:f8:d7:50:fd:a5:ae:19:0f:ed:45:95:ef:4e:a6:
34:3f:f4:99:fc:30:26:ac:bb:21:c5:83:f7:f1:11:3b:79:e0:
b0:f9:f2:d8:d0:d6:1a:9f:99:a2:9a:ef:66:c9:25:6d:bd:f5:
31:6c:a3:14:2d:14:b7:7e:30:3a:d4:a3:2a:27:0d:24:8a:1a:
05:6b:9c:ff:de:9d:18:5f:1a:cd:30:07:bc:6c:8c:e6:01:47:
ae:8e:10:ed:a2:95:b4:83:55:b3:0d:11:9e:50:7d:31:04:7f:
da:d3:5d:ca:fc:e3:d6:58:ea:81:a0:c1:7f:7a:97:3e:33:56:
a6:00:ff:89:a6:0c:4f:26:d1:9e:ea:33:d8:d5:6f:e3:96:18:
9b:59:b0:9b:91:48:fa:30:86:33:86:e3:d0:12:7b:4d:79:58:
0c:fd:9d:41:e0:7f:16:81:25:69:ab:98:04:48:de:09:48:77:
7b:5a:b3:d0:fc:12:9e:25:92:6e:a5:71:71:db:7f:aa:0e:02:
1e:2a:55:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:02:20 2025 by rpki-client