Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/75e17f90-d1a7-31e7-8729-4ba7064a3c27.roa
File: 75e17f90-d1a7-31e7-8729-4ba7064a3c27.roa (raw, json)
Hash identifier: QsBDny2Zs2r4sHCtBP3Zou8SYfkNjogDl9x5FSuFVvQ=
Subject key identifier: FC:CE:DC:81:C5:A7:C2:49:C5:65:A5:25:E3:86:21:B6:DA:81:73:2A
Certificate issuer: /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial: 010D0C9F432858486695B2490BDE914D640179FC
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/75e17f90-d1a7-31e7-8729-4ba7064a3c27.roa
Signing time: Wed 01 Jan 2025 14:00:53 +0000
ROA not before: Wed 01 Jan 2025 14:00:53 +0000
ROA not after: Tue 01 Apr 2025 13:00:53 +0000
asID: 30644
IP address blocks: 205.178.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:66:95:b2:49:0b:de:91:4d:64:01:79:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Validity
Not Before: Jan 1 14:00:53 2025 GMT
Not After : Apr 1 13:00:53 2025 GMT
Subject: CN=46a2024d-2966-4918-a934-baff5c8cbcd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ef:f1:46:c3:a6:8e:40:90:15:1d:65:a6:77:
fb:e0:00:14:30:ba:0d:c3:b7:d4:8f:4b:8f:69:64:
41:31:c5:c6:e9:d5:ef:43:43:fc:0a:2d:15:80:aa:
ed:e0:2d:1e:66:d7:b6:78:92:94:93:c1:06:33:40:
ee:77:0d:0b:7c:9d:ef:fb:a7:b8:65:f1:cd:cd:e7:
f3:16:96:0a:fa:b7:7e:93:1a:fd:38:e0:a3:15:f9:
0d:8a:97:c3:76:5c:ed:9e:cd:bb:4b:b1:bd:b1:db:
2b:a4:15:14:6f:bd:4e:32:8f:73:e9:94:48:fe:dd:
67:b1:37:35:3d:e5:44:5f:ee:35:fa:a5:e5:61:52:
0b:18:7f:fc:f9:69:ae:85:8e:f1:43:bd:b8:2f:4e:
e1:9a:9d:f2:5e:f8:f1:59:07:b6:57:aa:1f:bf:74:
7f:13:f1:6c:35:df:1c:4a:96:87:5b:16:19:7e:6d:
51:97:70:8e:49:2f:92:6d:98:15:07:fe:bb:8d:f4:
14:1d:5c:80:c0:cb:88:61:f0:96:3b:fe:25:61:81:
85:e9:2b:ff:f8:81:a3:f2:44:3b:c5:c7:6f:cd:b4:
ec:ae:de:e6:d8:00:e6:22:ce:64:42:9c:b4:76:3f:
46:22:02:1a:28:97:0a:ee:71:ec:f9:8f:28:44:5d:
25:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CE:DC:81:C5:A7:C2:49:C5:65:A5:25:E3:86:21:B6:DA:81:73:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/75e17f90-d1a7-31e7-8729-4ba7064a3c27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
X509v3 Authority Key Identifier:
keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
sbgp-ipAddrBlock: critical
IPv4:
205.178.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f4:68:6d:e9:61:28:bb:0e:39:c6:db:7a:2d:9b:ec:61:bc:
29:6f:bf:6d:b6:5b:3b:84:9a:f2:92:9d:e1:21:a4:6b:8f:38:
07:89:08:95:d5:33:85:45:4a:26:94:4f:0b:95:18:64:32:1c:
99:bd:d3:f7:32:ef:41:65:be:65:39:b0:57:f3:43:f8:30:a9:
ab:eb:f5:29:9f:2b:8d:e2:a3:99:a5:4d:af:79:7c:11:f1:65:
2a:57:c6:2d:0d:90:3d:da:aa:c0:27:5a:67:f2:ff:66:d0:ac:
3b:c5:4a:5f:df:66:92:9e:c2:4e:c9:54:0b:88:59:96:47:1e:
e2:1f:fb:a6:06:88:d2:b6:47:a8:28:b0:45:c8:bd:38:cb:6f:
aa:a3:16:f1:67:97:1b:14:bd:4d:82:97:f6:ae:45:e5:ae:da:
fd:ea:da:2f:d9:bd:f4:1c:5e:4b:10:2b:2b:d0:d4:aa:7b:78:
83:d7:98:d5:48:b7:bf:29:18:9c:60:0e:47:c2:68:83:7f:55:
47:da:57:b6:1b:ad:c1:8a:2d:f0:40:2a:e8:d0:d8:98:d9:5e:
74:36:ac:75:da:35:78:db:f3:af:2d:4c:01:c6:8e:16:da:ef:
da:d3:3f:7a:db:43:9f:ed:3b:af:b5:ea:10:7f:bc:db:c4:89:
2b:7b:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:15:50 2025 by rpki-client