Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
File: 696be498-e165-346f-bdfa-eba3ceb26950.roa (raw, json)
Hash identifier: Sk2YHCX8bpcYUU9IBGQ6InTXm47PmPNb1NnyvJGF6JY=
Subject key identifier: 92:72:7A:1B:D5:F1:F6:68:E8:60:31:3F:E4:C0:8C:1E:FF:E2:BC:96
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F4328584937D9330D02E76AE0DF36D280
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 36511
IP address blocks: 208.103.148.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:33:0d:02:e7:6a:e0:df:36:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=c2a86f79-85a6-4f15-9a06-966d4734ea75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:b9:36:82:dc:cb:e0:3d:f6:53:1f:ec:da:
2e:19:7c:e1:26:de:84:5f:f4:bc:d2:ea:9a:6d:4b:
f9:2e:8a:10:9b:8a:05:79:53:6e:f7:72:6b:49:99:
6c:53:86:09:b8:1f:99:2d:2f:95:d7:a6:ee:f0:48:
19:2f:36:7a:6a:2c:e6:6e:f9:56:f5:dd:07:c7:ae:
9f:26:73:90:30:00:b1:ff:1e:1d:bd:15:93:de:18:
f0:70:5f:39:8b:e7:18:6b:d1:d0:ca:44:5e:4d:1c:
a5:ab:26:fb:62:8a:78:0f:df:62:06:ca:e6:74:ba:
08:9b:09:86:ee:34:c3:1e:95:e9:52:29:37:12:e6:
e9:7f:67:ba:f0:5a:f4:c4:ca:62:5e:39:45:46:40:
54:2b:7e:7a:21:0f:1d:e0:0d:90:a7:26:2e:eb:3c:
dc:dd:f0:0d:71:5a:5c:22:1c:33:97:f9:76:5c:97:
f8:ae:d8:12:d0:01:42:e2:9e:b6:23:10:55:72:67:
ca:43:04:00:5c:5b:44:67:92:73:ca:c7:d3:0e:11:
fb:0e:51:9a:2a:ae:25:21:08:9e:bf:df:ad:f2:ab:
e3:23:b3:26:ce:3a:83:68:de:ec:6e:3a:c7:b3:43:
23:37:5c:84:0a:1e:05:1a:b9:8c:51:ea:de:60:dc:
eb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:72:7A:1B:D5:F1:F6:68:E8:60:31:3F:E4:C0:8C:1E:FF:E2:BC:96
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/696be498-e165-346f-bdfa-eba3ceb26950.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:75:8e:5c:c8:39:b7:8b:8c:c5:05:28:b9:20:e4:bc:f5:d8:
5c:0f:49:62:a5:fb:08:74:52:ef:17:29:01:a2:ae:97:97:75:
2f:28:18:a6:d2:58:2c:6b:a6:f8:57:7b:87:f2:55:9a:10:c1:
42:03:06:3f:4b:8b:c5:cd:9e:5a:01:a6:ba:92:32:e1:55:7c:
77:f9:62:dd:c2:69:e2:d5:85:5f:b2:3b:b7:9b:f7:31:cc:9c:
42:78:ef:b9:7b:48:b8:d4:4c:ef:d4:f4:e4:ed:9f:d2:4e:24:
d5:0e:d9:6d:74:52:3b:86:41:3a:61:35:43:00:59:b7:ed:a1:
1d:9b:fe:28:2c:80:19:a3:13:3a:94:f8:40:ca:95:51:42:0a:
75:8b:99:ae:b5:d0:98:ee:9a:55:5a:87:c6:31:62:38:51:e4:
20:a4:df:11:fc:25:36:fb:1b:1b:e3:cb:30:96:67:d4:d7:7b:
8a:f3:a6:ec:c6:e6:e6:c3:81:f4:73:b7:29:36:0c:35:05:4a:
f8:ef:12:20:78:45:3a:74:c1:b2:ea:fb:b9:5d:d4:d9:40:a7:
6f:13:02:e0:7c:4b:74:c9:fb:6b:3f:02:0c:b1:77:96:b2:bb:
bd:05:21:ce:4e:66:92:5c:1c:42:99:49:ba:00:df:98:c1:c8:
66:41:9d:12
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk32TMNAudq4N820oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI1MDMxNzEzMDA1MloXDTI1MDYxNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzJhODZmNzktODVhNi00ZjE1LTlhMDYtOTY2ZDQ3MzRlYTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D25NoLcy+A99lMf7NouGXzhJt6EX/S80uqa
bUv5LooQm4oFeVNu93JrSZlsU4YJuB+ZLS+V16bu8EgZLzZ6aizmbvlW9d0Hx66f
JnOQMACx/x4dvRWT3hjwcF85i+cYa9HQykReTRylqyb7Yop4D99iBsrmdLoImwmG
7jTDHpXpUik3Eubpf2e68Fr0xMpiXjlFRkBUK356IQ8d4A2QpyYu6zzc3fANcVpc
Ihwzl/l2XJf4rtgS0AFC4p62IxBVcmfKQwQAXFtEZ5JzysfTDhH7DlGaKq4lIQie
v9+t8qvjI7MmzjqDaN7sbjrHs0MjN1yECh4FGrmMUereYNzrWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJJyehvV8fZo6GAxP+TAjB7/4ryWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNjk2YmU0OTgtZTE2NS0z
NDZmLWJkZmEtZWJhM2NlYjI2OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0GeUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIV1jlzIObeLjMUFKLkg5Lz12FwPSWKl+wh0Uu8XKQGirpeXdS8oGKbS
WCxrpvhXe4fyVZoQwUIDBj9Li8XNnloBprqSMuFVfHf5Yt3CaeLVhV+yO7eb9zHM
nEJ477l7SLjUTO/U9OTtn9JOJNUO2W10UjuGQTphNUMAWbftoR2b/igsgBmjEzqU
+EDKlVFCCnWLma610JjumlVah8YxYjhR5CCk3xH8JTb7GxvjyzCWZ9TXe4rzpuzG
5ubDgfRztyk2DDUFSvjvEiB4RTp0wbLq+7ld1NlAp28TAuB8S3TJ+2s/Agyxd5ay
u70FIc5OZpJcHEKZSboA35jByGZBnRI=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:01:21 2025 by rpki-client