Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
File: 696be498-e165-346f-bdfa-eba3ceb26950.roa (raw, json)
Hash identifier: u3HQYquBTgck2qGCkLzO25ybwrBEaYTZuQY4kC9pkAs=
Subject key identifier: 50:3B:73:1D:94:34:95:48:9A:DC:A3:FA:4E:07:C2:26:5D:74:32:B1
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848573AD6950D213F9B28E10F00
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
Signing time: Fri 27 Dec 2024 02:00:40 +0000
ROA not before: Fri 27 Dec 2024 02:00:40 +0000
ROA not after: Thu 27 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 208.103.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:57:3a:d6:95:0d:21:3f:9b:28:e1:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 27 02:00:40 2024 GMT
Not After : Mar 27 01:00:40 2025 GMT
Subject: CN=8a1acf2e-3253-4812-baf5-e3b84c7b36c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4f:97:40:29:6c:d4:7b:5a:62:c2:c2:32:2b:
35:ce:70:2c:d9:b7:63:ca:9a:bf:b5:4a:ae:fb:04:
85:29:f6:9a:52:b5:61:dd:f8:cc:12:61:3c:ef:5b:
bb:2d:3d:97:cf:3a:d7:7d:b7:8f:3b:3c:93:5c:84:
eb:2b:33:b6:f1:a6:56:e1:46:96:05:f1:42:d3:df:
6a:25:ea:85:7d:f4:e3:6f:23:d2:2f:b2:c6:a1:ca:
40:64:27:bb:41:8a:0e:6b:46:1b:4c:84:32:99:f3:
45:0c:99:7d:2b:22:81:78:52:39:dc:95:c2:eb:c7:
14:fb:d4:e1:d9:4f:d7:c1:b6:36:dc:be:de:91:5e:
93:28:fb:4b:5e:94:6a:1b:d5:fa:62:b6:a6:47:95:
04:f7:21:af:41:8b:01:0f:c2:b2:47:69:76:4c:da:
dc:e7:37:88:93:c5:47:14:53:81:36:56:43:e8:22:
5a:b0:3d:d4:f6:c5:9c:ce:7d:d4:5a:2c:c6:ed:1c:
a8:18:42:bd:1f:7b:7f:cd:10:a1:a4:9d:a6:7a:34:
93:fb:e4:6e:b0:00:e1:81:36:36:4c:a8:85:3f:cc:
a6:c4:76:ca:33:05:02:6e:38:41:76:0c:e0:58:71:
b0:3c:58:f8:18:4f:c3:29:cf:4e:a0:00:c2:7c:85:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:3B:73:1D:94:34:95:48:9A:DC:A3:FA:4E:07:C2:26:5D:74:32:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:01:a0:6c:bc:42:de:c0:b9:6b:7a:34:d1:0e:84:37:56:18:
88:79:7e:10:20:3b:e1:4d:a0:f9:f4:dd:a0:82:01:c1:26:e3:
d3:66:96:a6:13:c6:55:d6:b0:04:fa:60:65:31:1e:dd:16:36:
f9:11:5b:3b:5b:aa:d0:d1:78:9c:05:5a:04:d6:bc:a5:11:f5:
af:56:1b:99:2d:8f:ec:6d:9a:9f:9f:84:c5:7a:87:79:19:a3:
4b:c5:19:df:9a:1d:57:a2:e8:f3:af:f3:17:1a:98:c4:05:1b:
0e:6d:4a:26:e4:4f:00:49:8d:0e:07:3a:f4:7b:9c:af:f6:13:
89:f9:28:a6:7e:74:b8:ed:fc:51:4d:75:85:52:3c:77:50:0e:
d1:5a:60:5e:02:13:49:bb:dc:b5:4f:f8:40:ba:e7:15:9e:4d:
ef:42:95:2e:3f:1a:8a:df:80:b4:17:d9:7e:7e:da:9b:63:af:
ef:9b:3f:14:36:2b:cc:ee:e6:b3:e7:12:55:dc:42:69:42:c0:
43:76:e2:c8:5c:97:73:6e:f8:4e:8c:b2:b1:c6:d1:34:a2:25:
4d:5d:57:98:21:9f:d2:52:b9:57:32:cc:4f:79:d8:06:98:f5:
d7:10:ae:1b:01:61:97:c5:f1:c6:9b:e2:3d:72:ea:d7:9e:ce:
bd:67:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:14:43 2025 by rpki-client