Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa
File: bbd41846-8a02-377d-95ea-451b2a008e18.roa (raw, json)
Hash identifier: ksE3y/ilZnMhF0fKs56lcw2j1DXu4/Y+2XvPGrCh+Ps=
Subject key identifier: EE:F4:88:14:1D:A6:C3:A8:43:1D:E3:86:81:AB:92:98:5D:14:54:FE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5BF74EF91B14FD4E28000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:bf:74:ef:91:b1:4f:d4:e2:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=9015df8c-4462-499b-b1e2-f30292c1406c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:47:30:3f:9e:bd:bd:3a:5a:82:77:13:17:ec:
12:1a:07:b6:65:d0:cc:61:53:ff:0a:cd:eb:d7:2c:
78:bc:38:5f:fa:86:ec:79:91:9c:db:d3:2f:cf:cc:
50:4c:cd:75:fb:52:d1:8c:1c:e2:86:8e:6a:53:6c:
2f:ff:2c:29:fc:e8:8a:b5:16:c0:46:67:e8:dd:a3:
a0:e8:20:ee:30:18:11:f1:70:dd:78:1b:cc:18:2f:
0a:be:f9:39:88:a1:c3:34:68:2e:aa:aa:25:c5:54:
7f:64:c8:0b:d7:4f:2f:28:76:18:48:f5:d5:ee:8f:
35:33:f2:47:df:d7:35:31:80:df:08:5e:bb:39:40:
cc:51:20:45:cb:00:9b:b3:c6:ae:8d:03:d7:bc:00:
e6:2f:2c:df:90:cc:87:20:b7:b0:49:d9:6a:67:05:
17:06:cb:79:84:1a:d0:3a:28:d0:b2:fa:68:a1:a2:
29:28:04:c2:4a:c9:30:96:63:d6:e6:f4:69:61:71:
f7:37:de:e5:78:58:8a:69:fa:d0:bf:23:26:b9:78:
37:3e:b0:a8:ef:9c:96:cf:3d:e2:e6:fb:aa:c7:24:
0e:4a:d9:64:ba:4c:7a:9a:1c:ed:24:d2:33:30:b2:
9a:c2:cf:08:e8:9c:08:b5:a7:a9:74:80:1a:a4:a2:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F4:88:14:1D:A6:C3:A8:43:1D:E3:86:81:AB:92:98:5D:14:54:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bbd41846-8a02-377d-95ea-451b2a008e18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:a1:f0:e2:81:1c:bc:fc:a7:27:2d:7f:2f:c4:82:a9:37:fa:
dc:f3:52:52:d9:9d:fd:b8:98:07:26:d1:6e:91:20:e8:ea:80:
76:8a:d6:ba:21:86:32:6a:e9:1b:b2:fe:b5:79:e9:c1:8c:6b:
45:a7:3d:49:a4:83:75:47:5a:4c:c0:08:f7:ea:53:d5:82:0a:
01:c0:fe:2d:b0:93:05:4a:09:45:4d:46:14:ef:66:47:c9:58:
cd:cd:39:85:5d:5c:02:eb:32:da:e8:1f:2c:19:7e:c6:02:67:
37:96:70:fe:7a:9c:ad:8f:35:9d:eb:3d:5d:89:c6:8f:25:cd:
ec:26:8d:9f:9b:27:89:58:2a:18:e7:22:c9:ad:3e:08:9c:31:
8a:61:8d:a7:89:f5:b5:eb:e4:70:be:61:0c:7d:e5:34:b1:55:
16:7c:1b:3f:2f:07:32:c6:50:4a:11:17:00:6f:a3:be:89:56:
6e:df:4f:95:39:85:c5:96:33:95:1b:c6:4e:08:dc:e0:23:14:
dc:e8:f1:3e:5f:0e:17:f6:f1:a4:cc:62:33:39:94:6c:bf:19:
30:6f:0f:30:af:d4:36:b0:b0:40:9a:54:95:61:0e:44:e1:d4:
f7:2b:f2:9e:d3:70:8f:a7:31:ee:92:fe:e9:f7:89:62:22:01:
76:23:48:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:48:29 2025 by rpki-client