Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
File: 3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa (raw, json)
Hash identifier: xj8d4kEAKZbquYHCeAKys3aAVNI9LBA4WZYyVuC6fcc=
Subject key identifier: 32:0C:C2:CB:27:4E:CE:93:FA:1F:AC:82:20:14:D4:00:58:81:C2:B4
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F9267E3D68EAD5288CBB0630
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 4997
IP address blocks: 208.39.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:7e:3d:68:ea:d5:28:8c:bb:06:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=f7ed3fb6-03ae-4cd0-aad2-31c2a61f469b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:09:96:60:ec:b2:61:77:2f:ff:93:e7:9d:bf:
fe:c6:62:f6:e7:86:ba:72:73:38:3a:be:81:01:14:
15:46:af:41:ce:f0:57:15:32:75:fa:37:8f:26:dd:
4a:8e:28:14:2f:ea:b9:73:8f:41:c8:bf:f8:61:e2:
88:6d:78:f5:5c:20:91:7e:d1:c7:38:e4:4b:d5:03:
b7:5f:a2:cf:b7:04:25:1e:13:1e:77:ec:01:89:d9:
cc:93:7a:69:c2:43:ae:74:26:61:56:88:b5:b0:99:
d8:d6:ce:b6:ae:1e:05:3f:e5:9f:40:f2:29:d5:42:
4c:de:07:0a:5f:9d:82:75:99:af:8e:32:dd:da:95:
e1:ea:ba:73:68:61:b7:35:7b:a7:5b:35:87:b6:91:
96:c4:f7:97:22:76:24:da:0d:1c:be:05:f6:a8:62:
b5:32:c7:1f:de:29:ca:90:42:f0:10:91:77:9c:b1:
bf:27:29:6d:44:e0:c5:80:35:17:89:86:4e:5e:66:
4b:db:9b:c8:10:54:c8:ce:3e:ba:08:6e:37:ab:bc:
41:72:7e:5d:3b:ed:0b:63:5a:43:9f:35:76:4e:f8:
51:92:b0:72:d1:fd:6d:9e:2a:f8:fa:7d:cb:b2:7a:
32:27:45:83:1a:51:ae:0d:4d:bd:d6:87:3f:06:f6:
6f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0C:C2:CB:27:4E:CE:93:FA:1F:AC:82:20:14:D4:00:58:81:C2:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/3e5d23d7-ba48-34e8-a74c-a1657b700b7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.39.246.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cd:fa:ac:d9:28:8c:27:01:45:83:93:fd:a9:19:21:02:f6:db:
20:02:a0:2a:01:93:20:f9:53:1f:1b:10:56:41:46:f6:04:f8:
25:77:49:ed:a6:fc:69:bb:3f:2e:b2:3e:f9:33:8d:15:87:b5:
dc:c6:b5:40:4b:7c:29:75:94:78:ed:70:a8:b6:6f:4c:3a:d6:
34:0d:3e:49:2a:d5:1c:81:08:0b:c6:6f:51:85:65:35:32:64:
b0:de:83:f3:78:39:f0:9d:de:b5:89:69:f2:61:ed:93:0e:0e:
42:c8:aa:c2:d5:4e:85:ec:4f:94:fc:b9:f9:e1:c5:7a:5e:4f:
a5:b2:ce:98:72:88:57:b3:81:af:39:a7:a8:31:f4:cf:c1:4c:
47:71:7a:fe:4f:b9:ec:90:61:d1:52:88:7b:fb:6a:93:8a:00:
bc:5f:ff:c9:66:8e:2d:a8:97:a7:85:14:64:c2:be:3a:5a:57:
10:df:11:f9:a5:a6:b4:f8:3d:7d:8a:4c:60:9d:c5:87:c3:3f:
c9:a4:48:df:a8:d5:0b:b0:66:21:a9:48:c6:2f:cf:28:ab:2d:
dc:a0:74:84:4e:ef:15:38:43:84:4c:49:26:30:54:1d:29:cc:
1a:ac:77:43:8a:a1:b0:16:37:3a:03:14:7c:84:6d:0e:ef:9a:
81:3a:dc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:42 2025 by rpki-client