Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa
File: db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa (raw, json)
Hash identifier: DtQAsspZPVn1jTtV8Cb5yURROldpJhs7cky3lP6ytOc=
Subject key identifier: C0:AE:C3:98:F0:28:A3:F5:CF:04:9A:C9:A8:52:35:7A:D0:D6:8A:B8
Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial: 010D0C9F43285849350E97E47D6004B89A6DCC80
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa
Signing time: Sun 16 Mar 2025 13:00:52 +0000
ROA not before: Sun 16 Mar 2025 13:00:52 +0000
ROA not after: Sat 14 Jun 2025 13:00:52 +0000
asID: 36511
IP address blocks: 192.149.44.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:35:0e:97:e4:7d:60:04:b8:9a:6d:cc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Validity
Not Before: Mar 16 13:00:52 2025 GMT
Not After : Jun 14 13:00:52 2025 GMT
Subject: CN=73c9c913-2c47-45be-8ad9-7b8be2e1b91a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d7:8b:67:e2:ca:29:95:32:86:9f:10:92:ce:
ec:5e:45:dc:de:0c:56:1d:24:03:90:42:a1:5a:5f:
c5:8e:75:d3:ae:8c:bc:11:7c:bc:03:93:1e:b5:be:
ce:86:82:47:5b:c9:e8:09:01:99:4c:d7:91:29:74:
2e:e7:fc:fc:76:5f:ae:bb:0b:ac:eb:e5:83:c2:cf:
39:53:7c:8b:21:40:5f:56:f7:41:56:8c:20:d5:f1:
89:ff:9f:ee:54:e9:36:09:9c:8b:15:3a:64:30:af:
70:98:70:05:2c:01:54:5a:7a:d3:00:f2:fc:b4:b5:
5f:a5:e0:94:23:4d:98:7c:95:4c:47:97:5a:0c:65:
7c:70:e1:d5:2a:70:d5:d0:8b:0b:3b:ba:d8:50:72:
5b:4b:54:40:8c:cd:c8:b8:49:31:8e:04:30:2a:5a:
5d:fa:c1:a9:71:cb:08:eb:ff:72:57:a5:ab:92:9b:
e7:2a:19:1d:2f:ad:e2:5c:48:27:42:1d:5b:52:9b:
69:09:92:be:d1:f5:da:76:48:67:38:27:36:d5:2a:
ec:e0:ee:d3:f9:9a:df:89:17:7d:07:d6:52:60:fc:
6b:c1:e7:01:da:50:b4:36:3a:32:bd:21:ae:43:96:
25:b0:4f:df:e7:e8:87:87:57:bc:ac:33:39:3e:5d:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AE:C3:98:F0:28:A3:F5:CF:04:9A:C9:A8:52:35:7A:D0:D6:8A:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/db7ea2c9-a7e1-3bc0-b383-2006c725b890.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
X509v3 Authority Key Identifier:
keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
sbgp-ipAddrBlock: critical
IPv4:
192.149.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:cf:4f:c5:8e:bf:e9:0a:10:69:db:df:9e:5b:a8:67:14:ec:
7b:ea:12:4b:5e:77:91:88:a1:3f:fc:2e:55:a5:e6:ab:de:41:
13:00:82:d1:06:cc:ec:36:b5:85:31:1a:24:7b:f7:81:41:6d:
17:4e:36:df:eb:22:47:e7:90:5e:63:f6:39:b3:5d:a5:53:d1:
71:6c:c9:a5:dc:5e:26:6c:f6:9b:23:fc:22:a5:61:85:72:48:
02:16:c2:f5:d4:14:e1:aa:6f:11:1a:32:d8:a0:8e:01:54:ad:
ad:e8:71:75:a9:58:7d:61:8f:60:e1:84:50:90:d8:95:10:d0:
f7:41:6d:19:ee:fd:44:38:55:bb:39:04:f6:34:f2:20:63:eb:
71:ed:7c:3a:4d:47:88:ef:e7:7c:d4:40:b3:44:b2:c3:2a:3f:
e4:21:6f:38:bd:68:19:b6:83:d2:6a:57:20:e7:a9:71:9f:e7:
dd:ac:b4:a1:c2:43:53:f2:f0:b0:50:f3:9d:b0:9f:a1:89:27:
c5:20:0a:4c:5b:73:ff:d2:18:12:56:1e:d1:3f:05:d3:d1:f4:
ec:13:4d:44:6e:96:d4:c3:1d:7e:b6:a5:b2:80:f0:3c:d0:dd:
f3:eb:d5:4b:fc:8f:8a:70:a9:f1:a2:3d:25:8e:6c:65:22:9f:
27:93:51:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:47:16 2025 by rpki-client