Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/26c10138-599e-3d23-b6b5-85ffeb78006a.roa
File: 26c10138-599e-3d23-b6b5-85ffeb78006a.roa (raw, json)
Hash identifier: EWpZPfd8J+/xNuN61qV/SDTE7qMeGA/A+E14R/loUl0=
Subject key identifier: 28:F7:D9:B4:33:14:94:54:5B:88:43:DA:3F:8B:0D:73:62:CB:E6:AA
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F432858491941833B11F8895B6D9FA4C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/26c10138-599e-3d23-b6b5-85ffeb78006a.roa
Signing time: Thu 06 Mar 2025 14:00:52 +0000
ROA not before: Thu 06 Mar 2025 14:00:52 +0000
ROA not after: Wed 04 Jun 2025 13:00:52 +0000
asID: 4997
IP address blocks: 208.39.196.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:19:41:83:3b:11:f8:89:5b:6d:9f:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Mar 6 14:00:52 2025 GMT
Not After : Jun 4 13:00:52 2025 GMT
Subject: CN=84c88a28-9735-47b9-8adf-9b9449a6aac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f7:51:66:2c:9d:e1:80:84:c0:c0:d5:30:bb:
ef:89:3f:c4:1b:22:e1:2e:43:2c:bb:cb:33:38:61:
d1:67:00:d7:fc:e2:be:9a:e7:f2:d9:b1:0f:f1:91:
cd:fc:f0:9c:0a:34:88:d3:51:6b:f0:91:dd:59:e1:
59:9c:11:6a:af:e0:13:be:11:8f:a8:1d:6d:9f:06:
5b:18:15:f0:7e:b6:0c:9b:62:06:f7:6f:17:dc:e7:
6a:0f:d6:2c:22:e1:eb:6d:f0:9c:e1:c2:f0:bd:23:
ff:1b:82:21:27:53:91:98:35:a4:ee:b0:8f:d8:2b:
7a:22:10:c7:98:85:a3:09:fb:fe:df:4e:f7:c4:cd:
c8:f8:ec:24:7f:49:d2:96:4c:02:db:75:3a:e7:5a:
46:e3:c9:5b:84:be:0b:25:e5:7b:73:aa:d0:06:76:
71:37:5f:d4:fe:0e:39:4d:4c:5d:0c:ef:f2:c0:db:
5c:8e:06:d0:7b:ed:c8:48:09:d7:b5:45:79:df:c7:
8d:00:f4:90:bc:03:ae:5a:f4:78:4a:f8:68:2e:2d:
da:51:51:57:49:c1:2c:30:b1:fc:5d:4d:6a:f5:ec:
d5:c4:15:9f:c1:e9:bf:bc:e7:62:9a:bf:09:90:e9:
91:b9:1f:fb:5c:37:71:71:d5:07:fd:16:bf:e6:70:
25:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F7:D9:B4:33:14:94:54:5B:88:43:DA:3F:8B:0D:73:62:CB:E6:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/26c10138-599e-3d23-b6b5-85ffeb78006a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.39.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:8b:b1:85:8a:44:05:a1:e9:3e:50:12:32:29:62:81:27:1b:
55:f2:80:84:bd:4a:65:4f:53:1b:b5:ad:7d:5c:1f:cc:0e:59:
bb:c4:a1:26:aa:70:9e:97:0a:b0:a0:41:15:d4:5a:85:83:82:
aa:6d:69:dd:24:b5:9f:61:42:73:a1:f5:8d:37:37:5b:70:6e:
29:da:4b:95:c1:2f:ba:fa:85:fc:a6:32:16:97:b3:3b:dd:0d:
cc:cc:34:bf:bd:24:5a:4e:e7:7d:b2:b3:0a:41:37:d6:b4:74:
77:e5:bd:34:62:07:1b:67:bc:71:ad:79:c7:60:e0:cb:74:7c:
9a:ab:f9:de:59:eb:b7:8d:fc:b7:23:0e:0c:8b:37:17:2d:e2:
6e:21:ac:9a:10:b1:f6:59:c1:8b:f9:76:9d:4c:3d:d3:71:73:
55:46:5b:ee:17:18:8e:23:cb:56:ac:4c:84:f7:42:90:65:10:
03:70:ae:58:22:d7:b8:90:d5:18:9b:20:1a:39:5f:01:a7:88:
ea:9a:ae:c4:a1:00:ca:01:6e:56:01:62:04:b7:2f:f7:66:a3:
96:e2:f2:33:00:52:1c:79:8c:52:a9:a4:9a:8f:e7:b3:28:f3:
a5:34:25:ce:b4:5c:f5:37:fa:13:8a:bf:dc:fb:30:a0:b4:b4:
20:3d:03:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:41 2025 by rpki-client