Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa
File: d08f403e-ed94-3b66-9997-e619f6160283.roa (raw, json)
Hash identifier: 9K8ggUBOqPXoYqzT248sXtyg76wmBFsxZnCVaAzs2s4=
Subject key identifier: 17:42:47:E9:02:72:95:7B:46:CB:06:D9:BB:1D:12:86:E1:81:C0:CC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848A29B56D9FA9746ACCA8537B0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa
Signing time: Thu 23 Jan 2025 02:00:40 +0000
ROA not before: Thu 23 Jan 2025 02:00:40 +0000
ROA not after: Wed 23 Apr 2025 01:00:40 +0000
asID: 15169
IP address blocks: 192.178.157.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:a2:9b:56:d9:fa:97:46:ac:ca:85:37:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 23 02:00:40 2025 GMT
Not After : Apr 23 01:00:40 2025 GMT
Subject: CN=c66600e4-2449-455a-8822-0a9fa458ece0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:28:7c:2f:3a:90:d7:6e:a8:47:08:d2:74:
9d:75:38:de:9b:98:5c:da:4b:8b:78:01:52:66:e3:
88:6c:a4:23:b6:06:b2:41:da:d5:d6:69:d9:88:2d:
11:57:87:84:a9:58:4c:07:2a:cb:d2:2a:02:fc:5a:
cb:6c:15:86:ff:7e:d5:b1:6d:99:52:d6:cb:db:5b:
b3:87:20:ea:21:d3:db:4f:33:bc:0c:40:ee:68:c6:
f6:4f:c4:c7:7d:79:7c:88:cb:e1:00:92:b7:b5:82:
f3:98:66:c4:ea:39:76:48:b2:12:bf:c4:13:96:8d:
01:07:28:14:c4:c2:e8:21:45:42:f6:72:c5:ae:49:
3d:2b:a6:8e:74:75:9b:69:56:c6:ef:83:ac:cd:47:
b7:6a:6c:16:32:06:36:51:3b:08:7e:82:98:cf:7b:
a3:c2:e1:93:7a:33:ea:e9:fe:e8:a4:ed:fe:0e:ab:
7b:64:f6:1f:d7:e1:68:95:e6:66:ba:77:4c:73:cc:
ac:04:d3:dd:5c:8a:0e:30:89:0d:17:a5:38:86:87:
3b:6f:55:d6:92:3c:60:14:6e:1c:51:f1:eb:f2:6f:
04:3b:fa:7a:e3:e2:0f:4b:4d:7c:79:83:a1:91:40:
22:56:08:0c:3a:9f:06:0c:fb:0d:e9:1c:b2:32:eb:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:42:47:E9:02:72:95:7B:46:CB:06:D9:BB:1D:12:86:E1:81:C0:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d08f403e-ed94-3b66-9997-e619f6160283.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:d1:44:6d:4c:32:61:81:40:2c:07:03:5d:9f:6e:00:5d:d5:
25:21:f0:ae:2a:24:f5:01:2b:f4:01:b6:50:eb:14:94:98:5f:
b8:95:a2:f4:ed:e8:7e:a8:c8:39:bd:44:aa:9e:99:13:2f:71:
b2:bd:64:4a:f9:90:da:f1:1b:2a:ec:94:33:c9:41:db:ec:75:
2a:62:9d:c9:b4:66:27:29:83:36:b3:0a:40:4d:d4:37:03:99:
04:32:e6:a6:9b:f7:f9:e0:2f:09:95:1c:10:40:a1:4a:95:f1:
fd:ea:68:e5:8b:28:6a:c8:66:0f:32:81:7d:78:e9:37:56:43:
be:e8:e7:4d:67:40:02:9e:86:19:18:b3:b8:c2:6a:9d:43:37:
2d:40:bf:b6:fc:df:6b:af:a3:d4:ac:f4:aa:b9:4b:34:44:08:
9f:8b:16:ce:2a:19:c9:86:c4:9d:b4:eb:d1:ce:5e:d7:1e:4a:
67:67:21:e9:f6:79:8e:e1:86:55:9e:37:7e:01:2f:71:b9:d9:
8a:c3:e7:9c:6a:3f:77:63:d2:88:5b:45:f7:e8:e4:f8:0b:7d:
20:aa:bc:a9:5f:4a:71:1b:04:27:16:7e:80:50:fb:0a:69:1c:
9f:55:e9:9e:f1:66:7b:17:c5:d4:5e:8f:2f:51:a5:7c:b4:d7:
d4:04:05:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1bZ+pdGrMqFN7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk
YzY2NjAwZTQtMjQ0OS00NTVhLTg4MjItMGE5ZmE0NThlY2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrQofC86kNduqEcI0nSddTjem5hc2kuLeAFS
ZuOIbKQjtgayQdrV1mnZiC0RV4eEqVhMByrL0ioC/FrLbBWG/37VsW2ZUtbL21uz
hyDqIdPbTzO8DEDuaMb2T8THfXl8iMvhAJK3tYLzmGbE6jl2SLISv8QTlo0BBygU
xMLoIUVC9nLFrkk9K6aOdHWbaVbG74OszUe3amwWMgY2UTsIfoKYz3ujwuGTejPq
6f7opO3+Dqt7ZPYf1+FoleZmundMc8ysBNPdXIoOMIkNF6U4hoc7b1XWkjxgFG4c
UfHr8m8EO/p64+IPS018eYOhkUAiVggMOp8GDPsN6RyyMuujNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBdCR+kCcpV7RssG2bsdEobhgcDMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDA4ZjQwM2UtZWQ5NC0z
YjY2LTk5OTctZTYxOWY2MTYwMjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACLRRG1MMmGBQCwHA12fbgBd1SUh8K4qJPUBK/QBtlDrFJSYX7iVovTt
6H6oyDm9RKqemRMvcbK9ZEr5kNrxGyrslDPJQdvsdSpincm0ZicpgzazCkBN1DcD
mQQy5qab9/ngLwmVHBBAoUqV8f3qaOWLKGrIZg8ygX146TdWQ77o501nQAKehhkY
s7jCap1DNy1Av7b832uvo9Ss9Kq5SzRECJ+LFs4qGcmGxJ2069HOXtceSmdnIen2
eY7hhlWeN34BL3G52YrD55xqP3dj0ohbRffo5PgLfSCqvKlfSnEbBCcWfoBQ+wpp
HJ9V6Z7xZnsXxdRejy9RpXy019QEBUw=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:51 2025 by rpki-client