Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa
File: 211bf909-5b40-31a9-9871-addf1a48e134.roa (raw, json)
Hash identifier: IaZIV8SNq8kGLyzhHWLAb7TD+M33zuutj+c9WNfG9kg=
Subject key identifier: 3D:98:44:E2:21:23:AE:D7:99:29:E1:B6:61:01:53:0A:2D:1D:CC:F3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AAAA15BA824906BBE2E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 192.178.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:aa:a1:5b:a8:24:90:6b:be:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=2ab83589-25f7-463e-8b73-d3fb9c78e36d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:45:cd:01:fb:ab:7e:fb:6b:36:df:4e:98:1d:
6f:2d:79:63:39:b4:29:28:a8:d9:fb:d4:02:ea:f7:
19:44:5d:db:09:cc:ba:0d:e0:ed:ba:e2:ea:c9:d7:
63:59:45:51:5f:28:30:13:28:86:a4:92:10:0a:2c:
ec:91:ae:f3:4a:d1:89:0c:cb:ec:bc:4f:2e:a9:d7:
da:d3:e7:2c:3e:93:48:ad:8b:66:4c:5d:bb:37:6b:
2f:8a:be:61:a1:39:13:20:a5:2a:88:49:61:74:1d:
83:c3:e3:44:38:62:a7:7b:4f:52:30:b7:e6:89:f9:
fb:40:15:5b:07:06:06:25:df:1a:9f:c7:b6:3e:6f:
d5:a6:2c:50:cb:2c:3f:bd:f3:97:85:e7:5e:ff:27:
49:ec:aa:d6:24:4e:16:55:cf:93:be:77:00:ac:85:
47:ee:1c:e4:81:13:57:b0:73:27:85:40:1e:b8:c2:
b6:04:b8:2b:62:02:ea:6c:23:bf:ce:cb:64:c9:c8:
e9:71:79:a9:cb:d6:be:9e:6f:e0:c6:e5:23:16:45:
73:df:0e:94:b8:f6:42:1e:6e:14:f3:d3:d9:75:26:
25:70:f1:a6:bc:d2:4e:70:fe:ff:78:3c:2f:b1:49:
15:59:76:b5:d8:25:37:d4:79:7f:a1:1e:cc:7e:58:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:44:E2:21:23:AE:D7:99:29:E1:B6:61:01:53:0A:2D:1D:CC:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/211bf909-5b40-31a9-9871-addf1a48e134.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.42.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:36:ff:6e:ff:6f:5a:b5:c1:d3:8a:78:9a:69:fe:5b:43:58:
fc:61:28:08:7c:64:7d:5b:67:e1:8d:7a:5f:84:d4:7f:d4:a4:
3c:a7:26:fe:c7:60:97:a8:df:1e:63:8b:04:31:b9:7a:b8:13:
75:f4:31:34:1b:61:8d:57:7e:51:24:0f:5d:2d:48:d7:38:1e:
6a:cd:ed:23:61:48:f2:b6:ca:4a:5e:40:dc:69:06:78:22:6d:
ad:4c:6e:1c:a5:cf:df:a1:62:78:52:a1:fa:e7:46:84:b7:09:
7b:bb:57:92:ed:f5:4a:dc:ed:63:0d:a2:a8:ef:5c:b4:41:96:
d2:56:98:1b:9d:2a:ce:9c:85:83:46:81:da:a3:93:95:be:69:
10:1e:d8:37:1d:e4:08:99:da:37:a4:b4:72:a7:c1:41:7a:d7:
f4:fc:39:24:d4:99:7f:4b:6d:a0:2e:95:00:2e:10:43:68:b5:
bb:b6:b6:73:b2:6b:71:b9:b5:45:1d:25:e2:7b:28:9a:5b:c5:
17:f7:a5:55:41:59:0c:2e:23:15:26:d8:f7:b0:f4:69:10:8d:
e6:11:ee:de:14:41:f9:0d:78:a8:c8:dd:a5:b4:cf:38:b1:ba:
ee:a7:c2:80:24:a0:c3:55:ea:f3:f9:a4:c4:73:ae:fc:af:61:
dd:d6:f4:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:00:08 2025 by rpki-client