Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de29af7f-46fb-3ec7-bae8-0a83e62f6cb4.roa
File: de29af7f-46fb-3ec7-bae8-0a83e62f6cb4.roa (raw, json)
Hash identifier: IVywtSXXHXZXLjCZdFq63/1lyGYErKqZSo+8UQ1RixY=
Subject key identifier: 45:80:5A:4B:1C:68:D3:B5:84:43:FC:BB:C6:1E:37:93:4D:76:06:B7
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F9267E29ED6116F26DE6AB80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de29af7f-46fb-3ec7-bae8-0a83e62f6cb4.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 4997
IP address blocks: 208.39.232.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:7e:29:ed:61:16:f2:6d:e6:ab:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=1584dc93-ab7f-4089-8537-6a6d1c8067c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:13:2b:ee:7d:20:a5:af:4b:34:ae:a5:81:
0b:26:1a:9d:db:87:e9:a2:ae:bd:0a:26:ea:71:fe:
db:7e:38:4b:81:6f:b2:d7:33:91:54:8a:10:ca:83:
b1:e7:a1:3e:4b:ce:05:6a:fd:15:40:8b:dd:1a:7e:
31:fd:9e:7d:d8:c1:78:90:1b:96:95:31:08:a8:e8:
52:58:c7:b8:23:8e:cd:cf:c5:dc:e4:e1:0a:80:1d:
7b:7c:c8:ed:2c:9c:83:aa:f0:23:27:72:6f:4e:e0:
04:3a:05:a6:45:84:c3:c3:a2:5a:81:44:b8:df:19:
52:3c:58:a9:87:8e:e7:19:82:e1:7c:5e:e3:a1:08:
be:38:e0:99:a6:d6:8f:3b:40:ac:af:4b:d5:71:83:
3c:38:c1:13:80:44:6c:55:04:06:e3:b3:ea:7b:6d:
86:79:0e:28:e8:c5:40:86:ce:bd:c9:ea:53:8c:15:
80:5c:20:24:e9:e9:80:78:2a:99:68:d6:3d:f7:68:
03:3a:d0:45:eb:96:fc:03:54:75:c4:be:ee:cd:aa:
2f:4e:07:14:12:2a:2f:8d:aa:d9:3b:97:39:a7:8d:
7a:80:07:d7:20:eb:b6:c0:71:14:0b:18:93:c2:6b:
f4:93:02:90:bd:2f:7f:57:21:05:13:93:9c:34:b1:
06:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:80:5A:4B:1C:68:D3:B5:84:43:FC:BB:C6:1E:37:93:4D:76:06:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/de29af7f-46fb-3ec7-bae8-0a83e62f6cb4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.39.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:a8:2f:73:23:cd:91:2b:44:fa:58:d7:bd:64:83:bc:e0:94:
63:bf:5f:9a:a7:67:bc:9f:d6:2a:58:d9:4f:d3:91:8c:12:cf:
02:f8:be:d0:f6:e3:3f:f3:54:1e:f2:c1:00:1e:3f:74:9c:a7:
83:dd:69:fe:d7:5c:2f:61:a6:d4:f3:44:76:1c:18:a2:fe:18:
7f:e8:d0:a8:ee:a1:cb:81:b9:c1:94:55:c9:f6:db:56:3d:94:
11:ec:da:f9:5a:a3:8b:0b:e8:46:19:2d:16:82:6f:a0:85:e7:
62:52:25:ba:f1:da:a5:e0:8e:8f:cd:a1:b4:cc:a6:08:f0:d5:
62:b0:4a:a5:97:bb:c7:b9:28:79:f1:5d:60:ac:6f:00:3b:87:
f0:c4:67:95:9d:ba:22:3b:b6:15:b4:08:6d:1f:b3:c8:98:ec:
7b:40:72:d8:03:23:91:5e:42:b3:f4:13:b6:67:22:bd:3b:db:
0f:60:70:e6:e5:53:40:d4:ff:56:43:be:b6:33:8d:d7:98:3e:
7a:25:70:08:d5:74:44:78:de:e9:16:e7:d0:6a:5c:b7:44:bb:
e6:44:7d:29:f7:de:19:44:d5:28:e1:9b:db:28:11:f7:13:bf:
aa:52:84:2b:57:ac:20:69:35:0a:1e:b6:d8:31:f4:64:02:02:
25:1a:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:00 2025 by rpki-client