Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cea122a8-c512-38e8-9d32-3a24d3f89c6d.roa
File: cea122a8-c512-38e8-9d32-3a24d3f89c6d.roa (raw, json)
Hash identifier: 8Bl5lA3leFpNmrj26LCCOHObn8b6rPDdWUwH2LvTTOw=
Subject key identifier: 6C:11:53:E0:EC:B3:53:E1:7A:71:50:90:F9:48:96:96:70:EC:82:6D
Certificate issuer: /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial: 010D0C9F43285848F926847B0745898514EAA600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cea122a8-c512-38e8-9d32-3a24d3f89c6d.roa
Signing time: Sun 23 Feb 2025 02:00:39 +0000
ROA not before: Sun 23 Feb 2025 02:00:39 +0000
ROA not after: Sat 24 May 2025 01:00:39 +0000
asID: 47063
IP address blocks: 208.185.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:f9:26:84:7b:07:45:89:85:14:ea:a6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Validity
Not Before: Feb 23 02:00:39 2025 GMT
Not After : May 24 01:00:39 2025 GMT
Subject: CN=925678ad-08b0-4440-a4ad-00dfa4b4b9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:b4:95:89:97:64:ab:a3:36:83:02:4f:b6:
cd:59:ba:01:d2:78:7f:c1:85:59:3a:b9:59:9d:8c:
d3:5f:d8:f7:82:22:50:62:84:51:60:a2:2c:60:ae:
1d:7f:58:ea:5a:4c:21:dd:46:da:25:7a:1c:66:e8:
3d:83:df:b5:c3:fd:52:49:be:49:c8:04:73:26:4f:
ed:e0:2d:d0:c6:e6:ff:22:d0:4a:4d:98:21:d5:38:
2d:aa:21:ef:b0:2d:dd:e7:25:59:d2:db:ad:0e:8f:
a9:4d:62:26:7b:cb:f0:80:06:2c:4c:9a:b9:ce:5a:
38:af:df:d4:5a:60:44:9d:89:a9:7d:87:13:0c:0f:
3f:00:1f:37:df:92:8d:59:37:79:ad:d7:22:25:d1:
fd:15:a4:97:67:2a:91:b1:d0:2d:f5:4f:a9:f3:19:
95:e5:a5:81:71:b6:a4:8a:9f:f3:ab:79:8d:2d:41:
4e:b1:a8:f9:bf:f5:59:6b:73:1b:d0:b1:83:af:75:
45:94:d8:77:0c:69:4a:f6:40:12:42:6e:3c:0c:1a:
ab:10:04:45:30:31:b8:ec:1a:e7:20:83:9b:56:bb:
d7:aa:b9:15:38:c1:97:4f:f4:01:bb:67:b4:78:4e:
9f:5c:96:11:35:39:09:04:5b:ce:90:92:a7:a4:11:
06:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:11:53:E0:EC:B3:53:E1:7A:71:50:90:F9:48:96:96:70:EC:82:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cea122a8-c512-38e8-9d32-3a24d3f89c6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
X509v3 Authority Key Identifier:
keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
sbgp-ipAddrBlock: critical
IPv4:
208.185.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:f8:5d:12:bb:04:02:5b:ab:0a:ca:44:8b:ba:de:bd:4d:68:
b7:8e:f7:7a:09:bb:12:44:64:1c:1b:bf:90:54:cb:99:f7:b3:
88:61:71:41:af:46:00:f7:2e:8a:68:96:be:92:bb:dd:2f:bf:
81:00:41:85:5c:9c:df:34:9d:59:a2:82:45:8d:9b:59:98:e1:
1f:e9:1f:2c:f0:00:c5:f8:82:54:15:c7:95:fe:6d:f4:c9:ce:
d3:23:ef:92:cd:4d:3b:55:f5:29:dc:1b:20:dc:00:57:ee:2f:
e3:43:8a:b4:76:6e:33:11:82:48:13:a0:ab:1d:ea:6a:fc:6d:
96:24:64:1a:18:bb:e5:03:32:59:cb:b2:38:c6:bd:ce:d7:54:
57:eb:bf:b4:b7:61:88:95:90:da:2c:db:e5:72:9c:24:e4:3c:
3d:37:03:40:70:0b:5a:a1:e3:d3:85:fb:cf:c3:f0:c9:0e:24:
7b:4c:cc:e2:89:d7:43:f7:c6:3b:31:16:36:2b:9e:17:cc:81:
ea:b5:9b:1d:d4:39:21:90:c0:3a:92:ae:3c:47:47:7d:ea:d7:
53:af:9f:73:8f:a5:6b:74:bf:4f:88:8b:90:70:4b:0b:8c:ac:
fd:6c:a8:0e:c7:ab:5b:44:71:0f:83:a3:84:fe:f7:ac:fe:96:
13:7b:77:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:52 2025 by rpki-client on console.sobornost.net