Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa
File: a7b7be0e-4b13-347a-87f9-6e790f01689d.roa (raw, json)
Hash identifier: V1LS/uPRHQGH6vTkc3r69Sh158jR5XpQW86b28R8hjQ=
Subject key identifier: 28:7B:9D:6D:5B:9A:65:88:A0:3B:47:86:D4:C1:5F:44:82:1C:43:06
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5C05895E9107C830050A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c0:58:95:e9:10:7c:83:00:50:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=a635bd54-453d-41b7-b8fc-669a0c35b6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bb:3a:3a:55:2f:18:8b:d2:54:af:32:e2:d6:
8d:4c:eb:7d:3d:f3:26:69:e2:40:8e:69:a8:72:0e:
74:9c:b3:08:de:c6:9c:b9:95:e8:e8:ce:35:f5:de:
43:e8:9b:ac:59:ac:47:d2:3c:cc:94:6b:fb:46:65:
c5:10:a8:f5:70:07:d6:9f:15:bb:67:39:45:23:0f:
56:f9:70:49:82:15:fa:39:bd:77:7f:50:9e:81:39:
ee:45:5d:ca:a9:55:ce:77:cf:0c:50:b6:c0:16:67:
c8:db:a1:f4:70:0f:bb:04:b8:06:4b:64:4d:7a:fc:
93:23:29:9f:18:a9:fc:97:03:5c:c0:4a:c0:3b:6f:
5c:1f:82:40:ab:f8:bc:10:f6:4e:ad:66:79:08:8c:
2f:32:b2:ca:bd:64:2c:b5:3b:db:26:db:cd:cc:1c:
83:bb:cb:df:0e:e1:f0:10:21:b4:fe:00:0c:e5:0e:
50:31:0d:7d:ff:06:d1:ee:cc:8b:4d:74:fd:96:65:
2e:5d:58:ce:56:f8:db:58:6e:06:d4:b1:0e:a1:7f:
f5:97:24:1d:ad:47:0d:86:8d:de:e1:4b:68:be:78:
e8:84:f6:ae:65:d0:be:d8:21:9d:16:e3:3c:0e:4e:
e4:30:8f:18:32:72:2b:17:af:be:f0:f2:3c:ef:75:
0f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7B:9D:6D:5B:9A:65:88:A0:3B:47:86:D4:C1:5F:44:82:1C:43:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:db:b9:8b:6f:85:f7:02:51:2d:30:56:b9:95:f9:76:82:ca:
33:ac:ad:35:86:e1:bc:2e:b0:fb:e6:2d:a1:22:d9:83:78:10:
4d:b4:c9:99:8d:c2:57:24:03:8e:ec:a6:9e:a4:dc:70:b4:38:
bc:71:3b:a6:d6:c2:53:69:2b:2e:cd:b0:80:f5:2b:6f:41:1e:
db:07:6d:fd:2f:01:96:9d:92:12:f0:fb:80:96:34:b5:00:ba:
01:dd:b8:88:34:41:b1:93:32:1b:a0:11:05:68:74:3c:ba:71:
c1:8c:d1:a8:22:5c:66:ac:37:ac:00:a4:7f:98:be:f1:29:6e:
c4:bd:81:df:d0:ce:2d:ba:c1:32:ba:e5:9a:32:70:4f:55:71:
fc:c8:f3:f4:d8:82:0d:ec:cb:f5:1c:5d:07:38:72:8a:62:a0:
72:b6:06:28:0e:02:9e:7c:ca:bd:3c:2c:30:61:85:ef:c0:c5:
1e:ea:57:93:8b:bd:5b:12:f2:10:f6:24:89:12:c2:88:f6:f2:
ac:a2:d3:fa:9b:c6:8f:c2:6c:e1:6d:40:a8:b6:0d:9b:fe:ae:
92:e6:b2:0c:e8:1b:6c:ee:83:57:18:10:88:8a:a5:5b:5e:94:
de:8a:90:fc:db:50:ba:af:db:0b:d8:21:92:3c:c1:b8:f1:8d:
f8:be:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:30:30 2025 by rpki-client