Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa
File: 90a9dec8-a24a-3de0-9901-58e74af63e3e.roa (raw, json)
Hash identifier: SBfyDSfghV9ii2lsBA7chkzEqEb9uOOX+2RA/kXyBxw=
Subject key identifier: E8:E0:23:91:FF:5C:5D:38:47:40:F2:3F:F9:1C:57:53:E9:A3:BC:1D
Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial: 010D0C9F432858480BDA6F3A7B40A7556AF25300
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa
Signing time: Sat 30 Nov 2024 02:00:39 +0000
ROA not before: Sat 30 Nov 2024 02:00:39 +0000
ROA not after: Fri 28 Feb 2025 02:00:39 +0000
asID: 22147
IP address blocks: 208.118.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0b:da:6f:3a:7b:40:a7:55:6a:f2:53:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Validity
Not Before: Nov 30 02:00:39 2024 GMT
Not After : Feb 28 02:00:39 2025 GMT
Subject: CN=7e07c745-ac6f-41a5-b9fe-7dc60f5ea307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:42:66:cd:e4:ef:6d:54:40:a5:3c:15:2c:52:
4f:83:b3:f1:0d:59:bb:30:43:9f:6a:82:6d:4f:6a:
54:e0:b8:29:9d:84:01:38:d2:a3:5f:82:d5:91:5b:
52:42:18:d1:34:d6:17:8c:4c:65:20:a7:9d:f9:c8:
32:8e:f0:64:ea:ef:d8:33:4c:fc:c4:75:3a:6f:18:
e8:54:bc:fe:69:07:d6:1f:9e:be:69:43:26:92:92:
79:9a:ca:36:63:62:44:22:dc:63:77:d2:17:94:39:
c4:41:9d:01:15:9c:6b:3f:6b:bb:f0:a8:e8:26:d4:
9c:ee:9c:c3:f2:db:0c:95:ea:d6:e0:1b:3f:b1:df:
16:71:83:87:1e:07:1b:57:ad:6d:7c:72:cd:56:99:
e5:ae:cf:54:d5:6f:44:7c:cc:c1:2e:13:22:a9:1d:
cc:b8:a8:e9:aa:3a:e4:6c:d7:82:0b:e0:21:25:27:
73:b4:eb:47:e7:7e:9b:a7:bf:67:e6:39:cf:fb:04:
eb:10:6a:04:16:da:ce:f1:d6:a8:c7:44:7f:d4:02:
25:9d:63:ba:15:44:66:74:45:11:4f:c3:0d:91:93:
9f:7e:df:d0:ad:dd:df:2a:c5:f3:46:07:45:3e:17:
cd:a5:f5:2d:37:3e:41:39:48:a7:e0:ce:90:ca:03:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:23:91:FF:5C:5D:38:47:40:F2:3F:F9:1C:57:53:E9:A3:BC:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/90a9dec8-a24a-3de0-9901-58e74af63e3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
X509v3 Authority Key Identifier:
keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
sbgp-ipAddrBlock: critical
IPv4:
208.118.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:6b:16:48:fd:2c:61:36:73:dd:86:6f:dd:42:db:bb:da:8e:
24:ac:b2:bb:90:7f:c7:ae:04:f9:80:d2:b2:d8:97:23:13:9c:
77:05:5b:b4:00:47:68:e5:a0:b0:fc:6f:4d:f2:11:39:dc:f7:
e2:fa:6b:7c:e5:dd:ea:41:c6:fa:d5:30:35:de:3a:01:7b:0a:
8b:44:4a:43:6c:60:a5:72:db:af:8d:47:14:19:ec:c2:a2:cf:
36:4a:ed:6b:a6:28:ff:b9:8b:e2:79:f2:dd:e5:43:3d:79:83:
a5:b1:16:7e:35:07:23:83:72:af:d0:23:dc:e0:d7:0d:10:89:
da:a8:8b:c0:08:af:58:14:78:d5:ee:e2:87:72:5b:93:66:fa:
c8:72:98:31:28:84:8c:a8:be:33:ba:7c:72:75:14:be:8b:72:
a0:25:24:2c:c9:12:77:f9:56:3c:6d:c7:95:97:27:32:72:88:
bc:0a:6f:ef:e7:1b:2f:04:be:ac:ab:0f:34:52:fb:e4:48:c6:
ce:e6:fb:4a:74:3b:b3:db:15:9b:90:5a:d7:6b:2d:7e:d1:5d:
48:db:ae:26:11:0d:94:0e:1b:3e:61:3c:e7:f2:96:76:53:e5:
97:01:00:f7:53:5a:4a:48:9a:78:0e:5f:85:2d:ad:56:e0:58:
c5:a0:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:48:15 2025 by rpki-client