Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
File: 9db44533-de07-3bd6-a689-efec080bd048.roa (raw, json)
Hash identifier: Mhu30HGGspaf+8sg//42nCM4JaVdGr5MrZx5JWxRd98=
Subject key identifier: 9B:A2:E0:42:10:18:DB:18:2A:A1:26:86:B9:B7:92:6F:2F:78:CF:AC
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285849350E989B21F2741E951CED40
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 36511
IP address blocks: 208.103.149.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:98:9b:21:f2:74:1e:95:1c:ed:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=1d4aed0d-0383-4e48-a012-4c74a94fe915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:4a:13:7b:95:55:20:ab:8e:8b:21:4b:9a:
54:2e:31:fa:df:e1:91:ac:1c:8a:dd:0a:04:37:1d:
b9:f1:72:5d:63:9b:bc:1e:48:0a:db:89:28:ba:6d:
3a:03:e5:c0:ce:16:34:64:8e:1e:cb:2f:c1:21:68:
89:be:5b:45:89:92:8c:44:77:ff:d1:27:35:e6:cb:
fa:db:6b:84:19:17:60:cf:bc:8f:cc:13:55:7a:29:
4b:28:f0:42:5a:cf:c6:94:ba:3f:3b:2f:dd:35:46:
f4:dd:55:c9:53:c8:d5:6b:dc:6e:de:3a:f5:84:b5:
ee:62:aa:ab:6b:03:a1:85:ab:e4:55:bc:10:ad:28:
84:4a:12:16:48:00:a7:bc:f1:b0:6b:85:52:70:37:
9f:d4:b9:33:ce:f7:a4:23:40:a9:ea:7b:85:f2:0f:
13:13:73:f2:12:45:00:d4:ae:f6:c9:6c:0a:05:95:
26:a1:04:0d:45:25:99:f0:0d:b3:d6:3d:0a:d4:dd:
b5:c8:ac:7c:21:61:4e:89:7f:ff:68:ab:6b:2a:23:
49:b1:7a:4a:e2:7e:14:11:98:78:75:7d:47:71:12:
1e:3b:87:95:b1:97:c5:28:88:4a:2f:6d:7e:68:08:
52:de:89:2f:29:0b:3a:b0:56:7d:26:97:ee:8d:82:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A2:E0:42:10:18:DB:18:2A:A1:26:86:B9:B7:92:6F:2F:78:CF:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/9db44533-de07-3bd6-a689-efec080bd048.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
208.103.149.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:33:50:68:54:ac:f9:89:53:9e:2a:22:e2:f9:14:25:cc:18:
ed:10:ed:e6:8b:20:16:fa:d4:c7:c8:43:f1:c7:c2:b3:97:33:
6a:4c:7e:db:59:0f:d5:59:d3:12:9b:90:d2:24:95:ed:c7:e3:
3b:d5:be:5a:14:fc:f7:b1:eb:69:91:10:29:49:3f:18:19:a6:
03:c5:57:f1:b3:8d:c6:62:01:0c:7a:b4:ca:63:5b:dc:d9:4e:
73:3d:12:28:c5:3d:75:db:c5:69:de:03:f1:2d:f4:cf:27:7f:
af:6d:f6:36:0d:7a:c7:b2:5e:1e:0d:8b:eb:67:47:ff:ef:d9:
30:5d:0c:df:46:a1:b9:43:98:c2:3b:f1:0b:02:c7:8c:e0:e6:
f0:a0:cf:50:ea:fc:d4:75:a4:9b:6d:ba:4b:41:df:37:48:a1:
07:8a:a1:b4:7f:5b:52:6d:65:fd:4f:78:74:21:4a:79:65:b9:
a5:f3:3e:58:94:46:d8:2e:73:10:de:f9:2d:88:4c:dd:40:7e:
ca:4c:bd:9b:1e:6c:86:de:85:bb:7e:45:a8:a3:d1:ab:c1:54:
7f:d0:9a:17:84:70:84:6a:c7:78:d5:2e:c6:ee:8c:ac:19:cc:
67:d1:04:8b:91:1e:75:05:9b:8d:8c:00:a9:7c:fe:01:da:fc:
b1:e9:04:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:49:13 2025 by rpki-client