Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b8390a8a-51df-39ad-8e03-0b53d174778e.roa
File: b8390a8a-51df-39ad-8e03-0b53d174778e.roa (raw, json)
Hash identifier: yvtumX2mbIewguuyGBylP6UcWSoI+XlKBmfepv6Zdwk=
Subject key identifier: 82:77:35:6A:00:C5:C5:E9:BB:39:8B:E5:9A:62:17:00:51:EA:BA:B6
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848186A8FF937763AA1F6DB2500
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b8390a8a-51df-39ad-8e03-0b53d174778e.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 17002
IP address blocks: 208.185.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:8f:f9:37:76:3a:a1:f6:db:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=e001c46f-70e9-4204-8215-880222ae7458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ae:10:1d:33:df:5e:69:bb:bc:bd:87:bd:a5:
f0:31:8b:b5:99:80:fc:6e:66:f1:80:0d:d9:d7:df:
0d:dc:ce:b1:01:68:e4:ba:2f:93:be:b4:8c:f1:2d:
e4:56:27:dc:79:bd:5a:f1:d4:5e:b4:fa:6f:9d:13:
5e:b5:55:5d:e0:a5:9a:e6:8c:c0:e6:fc:2a:28:ef:
17:af:dd:4e:00:28:c0:81:f8:c7:8d:48:56:4e:fa:
9b:be:60:f6:2c:ea:b3:b5:8e:c2:28:f1:87:3c:77:
8e:42:18:58:1e:7e:0d:fa:ef:48:ef:8f:dd:64:e2:
b6:bd:66:a8:f2:f0:1a:3d:51:02:07:98:ca:0c:d7:
f4:73:a5:70:e6:fd:28:bb:39:94:dd:98:02:1c:b9:
7b:8d:13:14:2e:65:7b:35:b3:8f:3d:0b:cc:47:43:
cc:f0:e5:cd:a0:0f:6d:9f:ae:2a:66:12:dc:e9:b1:
b3:29:3a:f7:dd:97:d1:6b:fe:ea:17:5a:17:f5:2c:
aa:04:2f:9e:ec:f5:3a:b5:14:e5:80:aa:84:23:78:
94:06:ac:33:52:77:e5:c9:e9:a5:02:d8:58:94:cb:
c9:3a:8a:a6:0f:d4:10:0a:48:bf:ea:45:a2:a6:13:
2f:2d:3d:eb:e2:81:a8:18:bc:2e:f5:1b:b1:00:ab:
4c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:77:35:6A:00:C5:C5:E9:BB:39:8B:E5:9A:62:17:00:51:EA:BA:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b8390a8a-51df-39ad-8e03-0b53d174778e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.185.8.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:55:f8:6c:12:73:ca:97:f0:a8:ff:7e:f2:5a:cc:88:f1:1f:
10:f4:42:8d:5e:0e:a1:a7:fc:bc:c2:f6:34:e9:d2:78:32:bb:
1d:9a:15:66:72:93:42:5c:1b:f2:03:54:1e:00:58:e4:8a:14:
ee:98:3a:a8:2d:dc:32:b4:e8:40:8a:4f:f2:74:8e:35:42:e4:
5e:91:86:1f:3d:5e:1e:d4:9d:84:be:f8:38:85:26:55:14:f4:
f1:3b:99:db:2e:21:05:f7:86:05:35:6c:53:84:cf:e7:62:c0:
24:f5:99:54:eb:ef:9e:14:fa:d5:c5:44:52:d0:9b:41:58:70:
81:d9:ea:22:37:c1:90:d3:d9:70:73:de:4d:4b:f4:09:91:27:
2e:8a:35:34:af:33:d8:e0:0b:34:fd:94:ff:21:8d:85:e1:00:
53:b6:75:fb:22:03:3a:a3:bb:a5:e0:92:99:cb:a9:20:bf:ef:
e1:d3:c4:d6:85:8f:38:8d:45:e7:f2:e8:13:65:6e:b9:bd:ad:
e3:f0:47:20:34:31:24:c0:ca:a5:d4:fa:cb:b4:59:f6:91:f9:
a0:85:e9:65:43:c2:ba:56:20:28:cc:45:fa:19:47:04:45:15:
be:37:1b:5f:13:71:93:45:64:c1:e9:d3:6b:29:e0:d7:ca:f7:
c7:a1:54:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:41:34 2025 by rpki-client