Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d09c7690-2642-3543-a0f7-ea08bf2d71af.roa
File: d09c7690-2642-3543-a0f7-ea08bf2d71af.roa (raw, json)
Hash identifier: 9b1MLCWc7YKI44FxwS1+BKAwyqoEwx/QGtYdUQCWMNU=
Subject key identifier: 48:F8:26:44:39:99:27:79:F6:0F:89:D7:5F:D8:16:03:6C:58:CB:F8
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F4328584839EAC5A1050DD3D8A629A580
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d09c7690-2642-3543-a0f7-ea08bf2d71af.roa
Signing time: Mon 16 Dec 2024 14:00:51 +0000
ROA not before: Mon 16 Dec 2024 14:00:51 +0000
ROA not after: Sun 16 Mar 2025 13:00:51 +0000
asID: 4997
IP address blocks: 208.39.252.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:39:ea:c5:a1:05:0d:d3:d8:a6:29:a5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Dec 16 14:00:51 2024 GMT
Not After : Mar 16 13:00:51 2025 GMT
Subject: CN=dae36508-3a01-4920-a997-8a1579fd59fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b6:86:3d:41:08:c1:ae:78:a9:46:c0:bd:3f:
92:5c:dc:0b:2c:00:be:1f:66:45:a7:49:64:b5:b7:
89:68:96:ce:9b:c3:8c:a6:a8:7f:ae:dc:de:28:bf:
13:4b:73:55:bc:a6:6c:08:07:60:05:7c:cc:6c:f2:
b7:a5:60:29:2b:71:da:2f:c0:11:02:30:77:23:96:
14:ef:c5:e4:a5:52:45:fe:79:e7:bd:f2:0f:61:46:
f7:b1:bc:e5:53:06:0e:32:3e:91:39:b5:24:b7:ea:
fd:69:3b:8f:d7:2d:d0:59:27:63:67:6d:e9:22:db:
84:c4:22:8b:ce:09:6c:fc:59:7c:df:47:85:9c:c3:
25:c8:16:c8:8f:a4:23:eb:37:81:e6:9b:c9:28:9e:
3a:b2:ce:f5:b4:36:f2:72:f3:c0:fb:3e:25:4e:f1:
c2:eb:d3:bf:64:cd:60:5b:d5:31:b6:71:43:6c:e0:
ef:4b:53:c1:41:ae:f8:2e:ed:72:b7:d1:e8:5e:7d:
db:6c:02:bf:57:30:7a:81:a9:06:31:54:92:0e:0c:
50:fd:a1:11:6c:20:ed:eb:0c:04:7e:09:5a:30:04:
e2:55:2b:45:bc:95:df:35:c6:74:33:17:4a:a4:df:
db:81:8c:59:e1:c5:fd:52:28:0f:d7:d9:5f:b8:21:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F8:26:44:39:99:27:79:F6:0F:89:D7:5F:D8:16:03:6C:58:CB:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/d09c7690-2642-3543-a0f7-ea08bf2d71af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.39.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:30:4d:f2:09:59:d4:25:4e:df:59:24:77:6f:de:7d:3e:13:
f7:7e:66:56:39:db:2f:09:af:c9:ce:24:59:5f:6d:5e:8e:5c:
49:00:cd:24:9b:e9:d1:f9:a0:63:f0:8e:ba:7c:c5:7d:cc:8e:
58:43:09:33:30:2e:5c:7b:2c:66:97:1d:22:5f:3c:01:74:a1:
9d:fc:d3:0a:4e:10:c0:17:72:ef:12:74:7a:71:a9:b3:2a:36:
9d:d5:a6:1e:ad:67:95:fb:b2:17:b0:42:af:dc:0d:ae:86:9c:
63:e7:da:c3:ba:65:88:e5:09:06:81:4c:69:25:c3:cd:1f:47:
5d:f0:5d:b8:4d:51:56:71:66:7b:7c:b8:b9:c6:ea:cb:c5:f7:
8c:5b:e2:9c:cc:ba:24:66:3e:97:0e:11:ad:68:20:2d:5e:9d:
38:6b:65:71:70:3c:16:8e:1d:56:0d:85:c3:20:41:f2:f7:9e:
95:ac:73:fe:f7:99:18:0e:36:89:94:d2:83:0a:10:25:66:db:
1d:ec:6f:93:92:7f:9e:25:71:2e:61:22:12:4f:d1:80:80:3c:
1b:00:72:d9:99:fc:10:67:70:e4:13:03:0e:d4:72:69:8a:37:
8b:0b:c1:40:9f:f6:1d:97:c1:09:de:ac:d3:7b:c1:e3:69:bd:
95:6c:f5:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:02:13 2025 by rpki-client