Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c54b3846-303b-3aa7-8c60-f0b25d387609.roa
File: c54b3846-303b-3aa7-8c60-f0b25d387609.roa (raw, json)
Hash identifier: 94IHreTzDuxOGM+DwusJ4uEPv2B0UuSRMUyI+ZzYZXI=
Subject key identifier: 69:6F:67:B0:99:0D:63:FE:0E:11:BC:3E:0D:67:F6:63:AA:E1:64:FD
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F4328584937D932F2FF99F9E6006EB180
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c54b3846-303b-3aa7-8c60-f0b25d387609.roa
Signing time: Mon 17 Mar 2025 13:00:52 +0000
ROA not before: Mon 17 Mar 2025 13:00:52 +0000
ROA not after: Sun 15 Jun 2025 13:00:52 +0000
asID: 36511
IP address blocks: 142.202.112.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:37:d9:32:f2:ff:99:f9:e6:00:6e:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 17 13:00:52 2025 GMT
Not After : Jun 15 13:00:52 2025 GMT
Subject: CN=2b54f7ca-d997-490d-b626-7a90a5bd4eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:42:91:31:f1:e2:be:de:73:69:ea:f0:36:81:
7c:9e:ae:9f:1b:3b:8f:bc:ff:7b:0c:dc:32:c2:cc:
37:84:4d:5b:34:eb:7f:77:97:15:ae:15:8a:b9:07:
fb:79:82:08:59:54:38:89:01:fd:96:a1:ef:9f:30:
e4:e5:e9:06:7e:47:be:87:83:75:ad:18:ad:75:7d:
87:4a:5a:aa:63:15:35:f6:35:d7:4d:68:f6:c8:04:
69:77:72:dd:df:af:db:3d:0a:d0:b1:0b:ea:3b:72:
86:8d:1a:24:53:90:8a:02:1e:60:5a:58:ee:f6:9f:
73:fd:05:75:47:bc:ae:fc:65:5b:ef:36:46:2b:f2:
88:25:25:78:50:9b:43:af:86:0b:aa:53:74:47:99:
e1:d8:45:4a:a8:71:e2:7f:5f:db:6c:01:a8:ec:db:
e2:5d:4b:c6:c3:97:52:ba:69:85:6a:08:ac:94:2f:
a8:92:c4:a1:51:b9:86:21:40:37:12:f4:04:67:b8:
d3:1e:ae:c0:03:f8:9a:e4:b8:7c:6e:61:9f:10:be:
bc:6c:1c:c0:73:fb:9e:b3:0a:87:b3:90:6b:d1:ab:
a0:5c:b0:21:ae:29:1f:43:78:ec:ca:d9:65:bd:1f:
be:6f:1b:12:dd:09:a9:46:6b:3f:04:3d:54:9c:d1:
6c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:6F:67:B0:99:0D:63:FE:0E:11:BC:3E:0D:67:F6:63:AA:E1:64:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/c54b3846-303b-3aa7-8c60-f0b25d387609.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
142.202.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:ec:f4:95:b9:e3:51:2c:ce:51:2a:12:23:82:e3:bb:13:b0:
c0:1e:e4:d4:0b:41:a5:69:c8:c3:0f:fe:ad:b4:e8:fe:3b:55:
bd:7d:ed:fd:d3:f2:2b:bd:dc:67:4f:e7:0a:33:ee:49:6e:01:
5e:e8:fe:87:d8:90:f3:a9:d2:34:bd:b9:a2:73:2a:00:69:a4:
de:2b:a7:57:4f:1b:ac:bf:19:7e:a9:a2:fd:5b:24:09:4c:7f:
0b:85:27:9d:85:ab:3e:45:7c:af:f9:5f:86:b8:4a:e7:b7:21:
7b:95:2f:fc:22:f8:ce:6d:e3:38:27:d9:fa:02:25:3e:5c:5c:
94:78:8a:c1:d4:20:97:a6:01:c8:92:db:bc:a7:c0:a4:0a:31:
ed:c6:04:be:44:d2:1d:b2:ff:d6:81:34:21:b6:89:14:62:38:
12:5b:47:0d:92:e7:86:ba:f8:d2:5d:6e:2a:89:68:75:ae:a8:
64:30:bc:c0:cb:59:73:25:3f:91:f2:70:37:6e:74:a3:f1:32:
e8:2e:59:a3:49:a8:f1:fe:25:35:dd:ba:71:ed:67:62:ea:90:
34:81:ec:a7:56:45:4c:3f:78:a2:d2:5a:c8:c7:fb:f6:a5:54:
4e:f9:ba:af:e6:a2:7d:a0:1c:17:33:4d:0e:0f:18:6c:f4:e5:
32:31:1e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:46:58 2025 by rpki-client