Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8927b663-71f4-35ee-8e0d-fa0257a74c2f.roa
File: 8927b663-71f4-35ee-8e0d-fa0257a74c2f.roa (raw, json)
Hash identifier: QZ7ZSuPDF4upSqCrPdJqAmL5ESIU66epGc2/bA63wkc=
Subject key identifier: 89:7C:48:33:9E:85:F1:23:76:22:44:C0:65:A3:25:46:5F:2B:6B:A2
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848186A91E118F3E74936941E00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8927b663-71f4-35ee-8e0d-fa0257a74c2f.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 26476
IP address blocks: 208.185.229.0/24 maxlen: 24
208.185.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:91:e1:18:f3:e7:49:36:94:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=7a5f5fce-4516-4150-8dbe-cea5d7f8f13f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fa:b1:d6:48:b6:f3:24:8b:b2:f1:8c:74:d9:
29:76:46:40:60:ac:57:22:1b:f3:c1:ad:e7:90:b5:
65:41:53:c2:43:bd:1f:00:58:3c:6a:e3:2f:6f:6b:
1f:35:73:19:50:1e:cd:80:29:11:83:d0:20:35:7e:
d3:6e:44:33:43:bf:69:a8:b6:8d:f6:73:ac:51:56:
17:a2:a7:99:35:3a:a3:d6:e2:34:3b:d8:a1:e2:4b:
b3:60:16:cf:b0:fa:84:d5:b1:9e:d2:1a:89:25:a5:
01:cd:93:7f:a0:5c:5d:5e:40:9f:fc:65:44:61:b0:
6b:53:fc:02:80:ae:6b:45:03:58:e9:f9:a2:3f:6c:
8d:36:cb:e1:c0:8c:ad:c1:f0:b0:02:dc:d9:75:00:
32:26:2b:28:13:74:80:20:af:9f:59:72:59:df:7b:
5e:39:d5:3e:a4:96:ec:3c:3d:07:06:d3:55:cb:39:
e2:39:76:9e:ea:df:14:6a:54:f5:25:9f:ec:d4:4d:
5b:cf:cd:1e:80:27:df:d6:09:cd:b5:e7:8c:86:8f:
a0:66:9e:84:3f:5b:34:6c:50:49:6c:53:76:3a:46:
b2:64:35:4c:5e:9e:62:b6:50:cc:e7:c2:61:05:ce:
ba:fe:1b:63:2e:db:81:3a:aa:d8:3d:a3:eb:85:c5:
ea:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:7C:48:33:9E:85:F1:23:76:22:44:C0:65:A3:25:46:5F:2B:6B:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/8927b663-71f4-35ee-8e0d-fa0257a74c2f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.185.229.0/24
208.185.232.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:1c:13:71:66:dd:d5:03:e5:d9:b4:91:70:9f:21:7f:65:4f:
c9:f6:44:0c:b6:35:0f:35:18:ed:5c:1a:c6:71:1f:53:3a:f1:
25:e7:b1:64:1e:fe:29:51:3e:58:eb:1a:df:76:6b:09:4b:51:
88:21:18:65:00:3b:71:79:0e:0a:d5:e3:c0:ba:a2:e5:b6:b4:
74:4d:84:28:a8:9a:a4:da:84:aa:cf:2c:6f:ae:60:80:e3:0c:
ac:f5:4a:77:8b:b0:08:28:8b:7e:f9:f8:d2:9c:d4:36:12:c6:
72:a1:3d:58:10:ef:1e:95:e4:11:b4:05:4d:67:51:03:de:c8:
0b:cd:27:5d:35:88:f0:3e:9d:8e:c6:9f:f6:3a:56:f6:bc:8e:
fd:b5:5d:ea:c9:39:6c:5f:9a:5b:83:73:9b:19:b3:08:d9:07:
10:b8:1c:5e:47:55:fd:fc:62:9e:4b:6e:a5:f3:28:57:bf:f8:
9f:55:4b:8f:fb:a8:04:66:a3:88:06:c5:4e:a2:c2:7e:63:5c:
ee:16:04:eb:d5:b6:55:12:90:f6:64:cb:94:07:24:ab:16:d0:
2b:48:b4:6d:4e:f9:9d:fa:bf:90:b3:43:81:b0:67:c0:53:f2:
0c:5e:4b:37:30:b4:cb:ac:fa:d8:bb:af:4e:79:66:48:f2:12:
7e:7c:4b:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:48:13 2025 by rpki-client