Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa
File: 0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa (raw, json)
Hash identifier: TW70W2t8S8LFamc+qUtbA4Ak9mrENi0cF3dllAc2Hgc=
Subject key identifier: 4B:5F:5A:68:95:C1:9D:11:92:BD:FB:39:B1:B6:48:21:9F:3F:01:93
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285849350E98AD9907D275D1330180
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 33392
IP address blocks: 208.103.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:98:ad:99:07:d2:75:d1:33:01:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=e83dbe55-6bb8-460c-8edd-1ce42f16f926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:cd:81:c0:44:8c:f4:91:3a:c7:a2:8f:3e:
7b:7b:d6:cf:e6:8e:01:35:63:46:54:85:b5:1f:d9:
70:08:7f:91:d9:24:c5:e0:a7:f8:b2:d4:51:d8:ed:
21:d2:5a:1f:1c:54:32:8a:43:12:af:e7:85:75:dc:
a4:58:a5:22:ae:69:31:97:90:a3:3a:de:f1:9a:39:
ba:48:2c:bd:8f:93:fe:ac:a9:c2:71:27:70:03:9c:
18:47:95:99:3d:4f:4a:19:0c:44:32:52:4f:6d:9b:
90:45:5c:14:ac:4a:91:1c:c7:97:93:4f:56:0c:7a:
3c:67:44:60:e1:fb:4a:cc:db:c5:33:f0:be:da:f2:
b7:d4:9e:ae:60:01:7a:7b:2f:24:83:b5:0e:b2:dc:
81:c3:44:57:02:ce:5e:b8:60:d3:af:14:eb:9e:e4:
aa:aa:c1:60:8b:7b:23:72:9e:17:b1:f5:1c:5c:3c:
e6:e0:48:b6:e9:f1:07:c8:0d:3c:86:c5:16:41:37:
b8:4a:a0:f1:7c:b5:31:1a:eb:54:0c:27:18:35:ad:
54:b9:04:66:5d:fd:c6:69:0d:8d:be:e4:74:1f:0e:
2c:6f:77:16:90:8d:22:b3:77:15:98:f4:cb:b8:69:
c5:5d:50:d1:41:53:53:4c:0d:ce:74:bb:e9:be:38:
5a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:5F:5A:68:95:C1:9D:11:92:BD:FB:39:B1:B6:48:21:9F:3F:01:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/0227bc2a-58f7-3d56-80ba-22ad20d7e9da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:20:6b:78:41:20:c6:8b:c1:f6:3d:5f:b6:2c:52:e1:9d:18:
02:f8:61:6c:22:35:0d:1a:3f:1d:52:b2:0d:6a:33:a1:85:9b:
11:18:0a:61:33:12:d1:ed:a5:34:17:eb:06:88:cd:b3:53:4a:
56:e5:b7:e6:21:cb:86:b6:29:05:a8:87:07:1e:be:86:bd:66:
7a:06:3e:b7:c2:b9:8a:f8:4c:14:00:ec:e7:bf:9f:8d:2e:54:
74:74:54:c3:cb:04:d7:cb:b6:76:91:20:56:1f:74:b8:1a:b0:
0f:5b:7d:81:77:03:86:1a:11:a1:71:f1:d2:4d:bb:1c:93:1b:
d9:da:5d:bb:31:26:cb:bf:51:5e:a6:4e:58:c7:65:6f:5e:93:
8d:2b:6d:19:99:40:55:2d:9e:78:8a:2c:95:4f:6d:68:f6:14:
83:0b:98:e4:db:3e:ae:d6:43:b4:d4:e2:12:5d:93:8c:d5:35:
7e:b0:f5:48:6a:52:97:0e:b2:98:02:f8:c8:3f:b1:e9:18:8f:
21:b8:1f:98:a1:db:00:22:49:8b:48:00:53:2c:a2:8e:be:d0:
f0:ba:f2:c8:43:ab:48:03:14:01:24:db:28:bc:01:e6:4e:ba:
c2:e3:6d:7a:21:ec:c3:ac:3c:f5:16:04:7a:b6:ec:c7:50:ef:
21:9d:62:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:34 2025 by rpki-client