Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
File: 9db44533-de07-3bd6-a689-efec080bd048.roa (raw, json)
Hash identifier: XNWIwBUXqyp1gEMO+EjtoHUFzFrGYuy9gu4KgQHAlks=
Subject key identifier: 43:18:28:04:4C:6B:A9:D5:24:66:D5:1B:22:3A:F2:21:C5:4F:9A:91
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285848547032B5326511856C22AA34
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
Signing time: Thu 26 Dec 2024 02:00:40 +0000
ROA not before: Thu 26 Dec 2024 02:00:40 +0000
ROA not after: Wed 26 Mar 2025 01:00:40 +0000
asID: 36511
IP address blocks: 208.103.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:54:70:32:b5:32:65:11:85:6c:22:aa:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Dec 26 02:00:40 2024 GMT
Not After : Mar 26 01:00:40 2025 GMT
Subject: CN=0defb8a7-eecb-4237-ba31-4fd5e580b480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:10:27:51:81:32:8b:36:e2:52:13:81:74:
f1:38:26:3d:f1:73:a8:e1:c2:13:66:17:44:4d:94:
76:47:70:95:65:d3:28:25:a6:36:be:64:38:3a:be:
b4:fe:62:a9:64:45:14:3d:2a:a3:2a:82:31:24:94:
27:bd:2e:96:3f:16:c7:18:ce:e5:3c:df:07:ea:78:
f1:74:ed:6c:38:ad:54:68:3b:8d:9a:a3:81:c8:0c:
c9:b5:87:0f:c1:44:67:b1:cd:19:73:e0:bd:18:d7:
96:73:3c:09:87:2f:97:b7:5b:49:f2:d1:ca:69:ce:
e8:a1:35:e5:9a:08:8b:6a:d5:91:46:e6:eb:d9:57:
3e:13:5e:37:48:b3:92:b5:b7:24:ac:86:97:1f:b4:
ad:7e:91:0e:a7:d0:f7:ed:bc:d4:ca:04:b9:57:fb:
da:b7:22:d1:52:ac:14:d9:a6:8f:50:a8:28:aa:31:
27:28:90:e4:67:88:fe:43:8e:ec:e0:8b:98:50:cf:
c8:e2:c2:aa:95:ab:b3:4b:75:2f:bf:1d:1d:e6:5d:
c0:28:07:c8:6c:8d:f9:6f:68:57:3a:ab:d9:2e:41:
11:7f:07:95:14:72:96:9e:65:e0:cb:6a:d4:1a:ed:
b0:6c:53:54:6b:ee:c3:0a:38:35:eb:3b:c8:60:15:
7f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:28:04:4C:6B:A9:D5:24:66:D5:1B:22:3A:F2:21:C5:4F:9A:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:08:d5:33:ad:38:88:d2:44:90:7a:98:21:74:0c:c6:45:e9:
ec:d4:e5:3d:7a:55:5b:16:a4:04:a0:fd:2a:8e:e6:d1:0f:2e:
e8:ff:4b:ec:2c:88:45:81:59:40:4a:50:34:0a:d2:07:68:e9:
47:17:38:98:2e:24:e3:7f:c8:d8:5c:62:2e:a7:65:4f:6d:4c:
e3:86:5d:c1:ea:dd:7c:0e:6c:23:07:ae:6b:c0:78:d0:e0:5d:
ba:46:70:81:4a:90:0c:21:ee:95:87:91:94:6e:e7:94:b2:86:
95:ea:3b:95:21:1f:93:f3:31:22:73:41:ca:99:d8:31:a2:c5:
fd:ca:36:d9:05:2c:18:96:0e:9f:be:e0:21:1f:3a:6d:87:aa:
aa:3f:3a:53:37:35:67:3e:60:84:8e:a2:b8:81:24:8b:f5:b0:
5c:a3:f8:69:0a:d5:52:76:42:1e:62:97:9e:97:e9:24:de:39:
37:23:bc:5c:0e:6e:7e:e6:14:3e:68:d1:63:40:bc:93:60:c0:
22:27:09:84:18:ac:9e:fe:e6:ba:24:48:66:3a:48:a5:db:df:
af:e3:c0:a2:71:1d:29:5c:27:83:ab:dc:9f:31:fe:8e:af:93:
a5:43:3d:fa:ea:80:39:c8:c2:3e:2c:54:a1:53:e1:74:49:3c:
ef:88:60:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:28:11 2025 by rpki-client