Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd743669-609d-3091-8a97-bfb27a8144de.roa
File: bd743669-609d-3091-8a97-bfb27a8144de.roa (raw, json)
Hash identifier: GMHp0xxCThPeOFw2q1Q0i5D5/dGdcV14AvDmJX1ZqCA=
Subject key identifier: 4C:58:B5:22:1C:40:C5:74:1E:8A:2A:B6:31:39:E7:A7:34:41:33:44
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F4328584839EAC53EE9C710A0F3142A00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd743669-609d-3091-8a97-bfb27a8144de.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 4997
IP address blocks: 208.39.194.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c5:3e:e9:c7:10:a0:f3:14:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=6223d4c7-f78f-4d01-adde-867068f3e3cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:80:e5:3b:3a:e7:79:2a:57:74:74:0b:cf:9f:
9e:a5:7b:ab:f9:e3:51:c7:6a:92:eb:1d:d1:e0:2a:
68:e8:2c:51:b7:f7:d6:71:b5:11:fe:64:47:d4:51:
33:4d:12:1d:f3:f7:3c:01:6b:a8:54:9a:81:99:9a:
f8:54:b1:f4:6a:b5:11:01:8b:57:27:72:2d:b9:66:
db:52:f8:05:98:40:2f:ce:c9:5c:a7:9f:da:a9:4f:
1a:c1:ca:16:24:e4:74:5b:5e:b9:6a:cc:60:f5:1d:
70:0d:5b:5f:da:bf:75:64:d0:34:98:e9:fb:51:07:
ba:82:97:3a:b6:09:bc:30:76:5e:b4:6c:ca:e0:ee:
c7:9a:12:eb:f3:80:2e:b3:f6:ec:ab:f3:3e:5f:d2:
48:99:11:a1:19:4d:41:f9:52:8d:ac:a2:2e:3a:66:
38:96:4d:d4:c9:af:29:01:c5:f9:77:48:60:c1:79:
5e:e7:55:a9:ee:fe:9e:b9:37:8d:f4:65:cd:3e:53:
3a:f1:4b:f0:f3:fd:1f:33:7b:b6:90:99:26:99:de:
01:49:f9:de:b4:87:37:f1:a5:ca:a5:30:f1:03:cb:
44:04:e6:d4:ca:76:4a:1c:90:67:35:fe:d4:86:0a:
b0:45:1b:05:bf:37:0f:ca:3c:6b:fa:7d:03:22:85:
f7:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:58:B5:22:1C:40:C5:74:1E:8A:2A:B6:31:39:E7:A7:34:41:33:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/bd743669-609d-3091-8a97-bfb27a8144de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.39.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b5:c9:86:97:96:4b:8c:35:6b:fa:eb:31:f8:1a:64:31:c5:76:
ec:2f:66:76:93:0f:24:a2:15:60:08:ab:46:1c:d2:e8:b3:ed:
bb:b9:59:f2:d0:c3:71:e8:0f:3a:20:79:d0:83:1d:74:a1:f8:
0b:1e:ed:de:ef:b2:88:c0:20:b3:b6:3b:c3:87:72:a7:f1:3d:
47:07:72:53:2a:75:d0:ab:41:fd:d1:c3:27:9b:41:8a:2e:6a:
6c:81:f5:d2:c9:e9:8c:0f:94:4a:d0:eb:8b:ea:8b:4f:55:38:
d0:4a:95:1d:06:c0:68:68:91:b6:9d:06:15:66:b9:0a:e6:fd:
34:cb:fa:32:60:03:35:91:d1:83:1f:aa:4f:e4:9b:3d:d0:4a:
14:21:b2:36:13:70:59:e9:a0:47:da:e1:29:54:cf:9d:6d:26:
5c:2a:23:0c:ef:1c:3b:b1:ba:bb:d0:c1:8d:a0:42:10:4b:22:
c3:76:26:8d:d4:bd:3b:3f:4d:ef:9b:22:d8:12:76:8b:b3:a5:
e7:ef:a3:a6:ed:a5:d1:2b:db:a5:c5:35:11:39:cb:8c:e5:d7:
4f:b1:e2:43:2a:82:24:93:1e:6d:86:b2:73:4e:87:62:00:ca:
86:30:e6:49:1e:79:66:2f:a3:20:39:fe:0e:54:78:a4:27:23:
9d:78:51:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:26:36 2025 by rpki-client