Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa
File: a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa (raw, json)
Hash identifier: UbeqDxndSSIi1wu3mH25iaWRtrO3lP9e7lrcZ/twvSg=
Subject key identifier: 79:1E:93:D7:B2:C1:C2:5B:7A:17:4A:28:19:90:85:F5:37:74:00:82
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F92685ABA44008AB42ED0EF0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 7767
IP address blocks: 208.185.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:85:ab:a4:40:08:ab:42:ed:0e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=aed198cc-a9f0-43c7-a046-4a46357dfa3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d4:86:35:36:08:4a:1d:64:d0:4f:3a:f6:f9:
be:f5:d6:56:84:e4:4e:20:dc:1d:c8:9e:3c:89:7f:
ba:43:6e:63:2d:69:87:7d:1a:6f:75:60:2c:d7:54:
85:91:dd:93:3e:0b:9e:0d:1e:e7:97:22:a6:89:cf:
e1:89:f0:d8:ce:58:b7:f1:17:4e:8e:54:2e:4e:e4:
f7:1e:11:b0:b3:bc:aa:2f:4e:ac:30:88:87:df:a8:
7e:33:60:60:6f:d2:50:34:5a:b0:94:76:06:ff:da:
4d:5e:0c:21:b1:32:00:62:2c:c5:90:c9:5f:bb:bb:
1f:3f:df:c8:b0:49:74:92:18:55:74:0b:a3:ce:7a:
51:8f:67:06:69:21:7b:75:96:86:09:28:00:64:21:
dd:5e:f9:ce:08:23:35:86:35:0f:a1:93:b0:67:9d:
af:4b:33:43:3a:84:87:27:79:99:c0:39:de:d4:3a:
58:56:27:86:e7:4a:62:d2:4f:d3:18:12:d1:07:31:
c6:4e:32:4d:72:83:c1:ee:fa:3d:c7:17:ea:b7:17:
7f:2b:2c:c2:42:cd:b1:34:4c:17:76:22:9e:a2:57:
d5:f8:5e:8b:65:28:8e:e3:7d:07:9f:4b:53:67:f3:
e5:92:4e:1f:d1:f7:ce:f8:b7:dc:13:cd:18:22:a1:
1f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:93:D7:B2:C1:C2:5B:7A:17:4A:28:19:90:85:F5:37:74:00:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/a5b7be38-d001-3a7f-a90a-42bc5394d4a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.185.238.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:5e:e5:e9:51:4d:d0:3a:24:d6:ed:7e:90:1e:e1:70:98:e9:
f1:31:f6:65:59:7c:4f:91:1a:e0:ae:32:d0:cd:02:75:6e:90:
3e:67:66:00:39:4c:69:54:16:94:dc:f3:3a:f8:ae:3f:76:76:
eb:dd:a0:fd:3a:c1:ac:f1:24:40:13:5c:2b:71:66:2f:24:e0:
e0:c8:1c:da:33:bc:04:84:20:6d:dd:24:70:8e:12:58:3c:1a:
44:90:3d:9c:ab:33:1a:a2:d9:44:4d:b2:a2:40:d7:57:30:63:
70:df:ca:83:3f:b3:01:a3:cb:70:8e:35:91:7c:9f:77:93:f1:
20:77:a9:0e:8b:b8:83:f2:2d:14:5f:fd:95:85:b6:66:23:72:
96:ee:81:c4:68:ae:05:9c:9c:5a:09:16:0c:63:7c:01:de:7c:
a9:f4:96:53:e1:2a:10:fc:73:f5:61:db:22:94:b4:c3:aa:20:
d5:f3:2b:2b:49:ce:f5:87:35:ab:9e:b8:b1:e2:aa:5c:75:d7:
c6:9a:e3:b7:36:9f:97:59:c7:c6:dd:b0:71:7c:d6:62:aa:9a:
ab:f3:10:35:7b:8a:00:38:62:57:b1:8e:59:82:62:ac:a8:93:
5b:f0:1e:ef:a4:43:ee:ef:e8:aa:c0:ae:35:b0:29:4e:15:cc:
8b:3c:d7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:52 2025 by rpki-client on console.sobornost.net