Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca3aa2cb-5cff-326b-b319-71d5cde7900f.roa
File: ca3aa2cb-5cff-326b-b319-71d5cde7900f.roa (raw, json)
Hash identifier: Xsn+yOE5DGSgejRMG0GElXBuQ0hFj4nu/6aUO62LC8w=
Subject key identifier: 2D:D0:3E:76:64:E3:E6:73:6E:11:4C:77:46:DC:40:AD:E3:32:B0:0C
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848186A901D8BFDD50A53445880
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca3aa2cb-5cff-326b-b319-71d5cde7900f.roa
Signing time: Wed 04 Dec 2024 14:00:52 +0000
ROA not before: Wed 04 Dec 2024 14:00:52 +0000
ROA not after: Tue 04 Mar 2025 14:00:52 +0000
asID: 36589
IP address blocks: 208.185.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:18:6a:90:1d:8b:fd:d5:0a:53:44:58:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 4 14:00:52 2024 GMT
Not After : Mar 4 14:00:52 2025 GMT
Subject: CN=596a403c-877a-49ce-a8a2-8972ffd76542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:ec:20:22:5a:54:81:95:36:73:92:18:3d:e0:
5e:c9:97:87:b9:a9:46:b6:96:af:d4:1b:db:41:56:
fe:58:c0:7d:77:53:8e:73:c1:9e:f4:fb:c7:32:28:
16:7a:a4:ab:15:07:e3:93:64:3e:a8:15:4b:87:f0:
ca:e2:fa:1f:86:c5:75:8f:64:a9:e5:11:fc:74:01:
89:cb:d7:01:ec:69:8b:06:60:b6:79:af:d3:6e:61:
e6:0d:d1:cf:0c:d5:db:82:25:31:15:56:77:32:1f:
bc:54:10:72:d6:5e:bb:d1:34:47:76:1f:a1:1a:09:
f1:e8:59:41:49:15:4b:49:55:ec:6a:22:bf:d3:d1:
9c:94:55:21:83:12:a3:d2:dc:b5:46:95:7b:6c:37:
30:c8:77:f7:1f:11:c7:58:ba:4f:ff:01:a1:51:aa:
18:79:e2:ec:af:98:f1:f2:2a:44:00:b8:42:75:30:
7a:7e:61:ed:e5:f9:d1:0a:73:e4:02:de:e4:e7:e7:
86:fc:56:36:04:01:78:59:6b:6c:ed:16:b2:ba:df:
02:79:b4:96:58:cd:2f:a4:50:92:20:31:12:b3:63:
a6:7a:66:d0:98:fa:85:e2:51:8a:2c:67:5c:c7:4d:
25:47:dc:7d:c6:84:41:81:fb:a8:f9:cc:05:4e:53:
69:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D0:3E:76:64:E3:E6:73:6E:11:4C:77:46:DC:40:AD:E3:32:B0:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca3aa2cb-5cff-326b-b319-71d5cde7900f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.185.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:16:20:7b:94:96:eb:32:f7:65:0c:0a:fc:1a:84:cf:93:60:
83:9f:26:ab:e5:89:3e:7b:e2:74:36:d7:f5:db:e3:59:48:44:
34:15:3d:fc:72:38:f3:81:59:2f:13:5e:09:fa:8e:97:8a:78:
71:c4:39:42:4e:26:17:ad:b5:17:be:1e:86:3e:26:4f:2c:15:
4d:d1:26:b6:a4:38:77:27:a3:83:f4:84:ae:e6:d3:7b:5a:f9:
f0:1d:d7:f4:c7:7f:92:79:56:85:0d:7f:b9:a3:74:d5:45:08:
e8:b3:3e:b3:d1:c7:73:6b:e4:78:0f:fd:d7:db:76:be:b8:04:
60:e7:c7:0e:ed:9a:cc:e2:26:ce:85:94:dd:63:c5:0d:c6:cb:
84:41:75:43:aa:1c:bb:f4:29:3f:85:cb:3e:83:35:18:af:71:
25:da:de:4a:c2:5f:7d:c5:8d:15:92:7b:c7:fd:5f:78:0a:b7:
c9:03:36:bf:a7:bf:46:ae:d0:ef:45:ee:75:19:c7:d5:e2:8b:
f8:42:4b:e0:e8:23:cb:8c:06:51:89:8a:d8:f8:2f:29:54:cc:
2e:db:4f:4a:fd:04:98:10:4e:50:4d:c7:eb:22:3d:1d:51:c7:
00:42:cc:dc:6f:08:2b:2e:ce:ac:4d:5c:60:51:88:c3:06:60:
aa:56:33:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:20:32 2025 by rpki-client