Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/29ac1047-8102-30e5-9eb8-5c68f23243b2.roa
File: 29ac1047-8102-30e5-9eb8-5c68f23243b2.roa (raw, json)
Hash identifier: SA6uLZnCGtb3h+y8sUf+gd908dFVqBJbPnCGMJCF9jE=
Subject key identifier: F7:F1:73:C5:46:11:41:DF:68:C3:B3:DD:FA:33:89:5B:76:30:C0:28
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F92682F90B8675A25A15F500
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/29ac1047-8102-30e5-9eb8-5c68f23243b2.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 18602
IP address blocks: 208.184.158.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:82:f9:0b:86:75:a2:5a:15:f5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=90d01cf4-9715-4483-baab-e72de77f34ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:7e:f1:c5:f9:bf:ec:15:19:9b:9c:ae:ce:
57:cf:6e:b8:ad:8a:92:c6:20:a1:61:37:35:80:69:
2d:da:df:6b:7c:ed:cd:56:c0:e2:e2:f7:96:39:56:
1b:1c:9b:cd:05:d2:76:e0:d6:42:2a:f3:ac:53:8b:
fc:f6:00:19:ce:fa:9b:83:4e:41:4b:ad:94:4b:e7:
2b:f2:1f:cc:88:39:e4:d1:1b:4f:6b:18:f2:ed:23:
55:1f:79:0d:96:f7:75:f3:8b:c6:ea:b8:f4:f1:3d:
a0:5f:a2:b2:ce:8f:45:90:4b:f7:ad:cf:08:57:ba:
c4:44:17:b6:5f:79:53:4f:6f:93:2e:62:9d:ee:ba:
b7:61:53:2e:84:c0:0b:6d:60:20:76:55:5e:2d:5d:
2f:89:af:ad:76:09:e4:c1:32:90:27:c9:c3:2e:3b:
97:12:93:9c:8d:25:3e:39:b4:cf:b3:73:f8:94:11:
b3:aa:f9:ee:16:ce:a7:6f:27:d5:e8:32:f3:61:e6:
8a:1d:19:54:e9:23:ec:16:dc:06:b2:46:75:36:ea:
52:e2:6d:04:c5:56:cc:f5:f4:87:5f:62:9f:d5:d9:
96:23:32:de:3c:cc:08:e9:a6:0c:f3:02:69:28:c0:
a9:55:1e:1e:20:8c:84:e3:c9:8b:a5:36:cc:97:c7:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F1:73:C5:46:11:41:DF:68:C3:B3:DD:FA:33:89:5B:76:30:C0:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/29ac1047-8102-30e5-9eb8-5c68f23243b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.184.158.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:24:4b:fc:78:41:95:a2:69:db:35:4e:b1:d5:53:6a:32:15:
9f:9a:ee:24:2f:23:4a:dc:55:2a:1b:75:e7:e9:a6:f4:00:25:
0b:f7:21:0a:e5:73:b9:d5:7b:7a:fc:92:3f:01:53:36:5d:be:
67:15:2a:4a:5e:27:92:82:4c:b1:59:7d:82:fd:a0:60:8a:26:
77:24:10:41:02:00:69:8a:18:2f:42:ad:6d:6d:52:b9:9c:79:
57:09:28:2e:59:2f:c8:89:c5:26:e3:00:ca:0f:63:0f:27:e4:
22:92:1e:77:5c:f3:80:d6:44:cd:55:40:62:0f:e8:62:57:43:
6f:d2:61:a2:2f:5f:0c:e3:3f:85:0d:a0:ef:f8:a6:27:43:4e:
53:e3:40:10:91:00:d7:6d:67:26:6d:d1:98:47:11:21:b4:dd:
18:5b:6a:df:c1:02:63:dc:8e:13:1f:43:f5:9b:8f:4d:49:08:
0b:d3:a7:58:12:a9:9e:9b:58:26:6b:9f:83:88:71:72:3c:db:
a1:3b:b0:29:e6:32:e3:94:01:08:36:bb:35:a2:79:11:91:65:
50:5a:f0:5d:56:0a:3d:e7:27:bf:f8:1f:1d:c7:54:8d:de:42:
da:ed:fc:d9:61:51:58:0c:6c:7d:47:29:b7:80:41:22:95:c6:
00:6b:db:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:35:06 2025 by rpki-client