Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5cd48e39-b548-3e67-8326-c4a6026ca913.roa
File: 5cd48e39-b548-3e67-8326-c4a6026ca913.roa (raw, json)
Hash identifier: 98oMPMCaLmTGUaWGmwZmbP8qkJQbWYKt8IKLrbI2dxw=
Subject key identifier: F0:DF:D0:41:C9:73:44:A7:6C:D7:F5:3C:26:85:C2:4F:99:A7:2B:AE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB301E9B94060E733AFC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5cd48e39-b548-3e67-8326-c4a6026ca913.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 192.178.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b3:01:e9:b9:40:60:e7:33:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=a89ca434-f590-4d4b-b27d-12d4325299cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8a:fe:17:b8:37:00:1b:00:51:bb:3a:3f:95:
38:46:98:df:07:43:19:57:b9:35:bd:4f:8a:9f:d1:
97:29:0d:96:44:0b:82:23:0b:53:f9:5d:0c:d6:39:
2b:be:50:37:20:33:88:05:1a:a6:52:9e:d3:3a:1d:
10:b2:35:9c:eb:79:20:d4:f4:ff:29:fe:d9:7c:0a:
bf:0b:01:9a:62:fd:3f:5f:ce:ef:28:ae:66:0d:96:
e9:f4:b1:b9:35:c2:c7:f8:6a:74:26:e6:c8:96:7b:
4f:d0:ef:15:aa:7a:b2:0a:4d:78:00:5d:3c:51:83:
1e:c7:f1:8a:70:39:ea:d0:39:c9:81:6d:bc:b9:f2:
4b:fe:a9:f0:6c:a5:a0:2b:ac:19:b0:a8:2b:d0:09:
fe:eb:30:46:af:08:15:4e:16:be:c0:53:30:02:34:
c1:7b:ee:2d:3b:99:39:fe:bc:18:1e:b8:20:de:d5:
0d:e8:e3:3a:62:21:bc:71:97:b4:af:7d:0f:99:a5:
74:fa:dc:f6:66:95:75:fb:3a:8c:8b:cc:6c:ba:6b:
4f:12:19:f2:d2:56:2b:b2:e2:81:13:e5:cf:23:9e:
4c:8f:9d:e0:72:82:71:b1:9a:c3:90:04:60:14:6e:
17:45:b1:a2:99:53:42:73:0d:12:f8:5b:42:d3:72:
de:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DF:D0:41:C9:73:44:A7:6C:D7:F5:3C:26:85:C2:4F:99:A7:2B:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5cd48e39-b548-3e67-8326-c4a6026ca913.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:77:0f:df:42:43:0c:b2:58:6f:ee:ba:47:1f:9f:3e:ec:e8:
56:22:d1:10:46:b4:54:22:41:2d:4c:95:06:79:5b:75:95:8e:
6d:de:49:72:dc:bc:90:e1:b3:d0:00:9f:fe:05:88:19:de:2c:
cd:1a:3e:54:08:3f:ac:10:b7:a1:16:85:9b:72:73:69:9a:e5:
31:a2:bd:0d:62:6b:fa:fc:17:a0:79:15:f7:4f:7b:fb:74:cc:
43:c0:13:40:8b:c6:59:7e:1f:01:83:16:d5:63:c3:78:f0:3a:
94:ef:09:de:f7:90:75:7a:10:24:9a:41:53:5b:bd:8b:b2:cb:
49:66:8a:78:7f:c7:2c:8b:f1:7c:28:4d:55:12:dc:8b:d8:67:
09:ae:42:b1:d5:33:0c:86:75:f6:04:13:09:67:57:09:6f:ad:
cd:95:35:85:e8:5f:9b:45:2d:65:cc:4b:02:65:df:4a:0b:69:
09:1c:5d:c8:3e:32:df:43:98:ed:29:65:f4:05:c9:ea:56:88:
78:b2:9b:b5:cb:d1:f5:03:c7:e8:a7:bd:9c:af:0f:e1:a6:82:
03:33:0c:49:c8:15:07:bc:69:c3:a6:e0:e0:7d:37:d2:70:d0:
b0:14:41:7f:da:f1:82:b0:3a:a6:8e:ba:f7:fd:85:19:03:d3:
77:dd:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:26:26 2025 by rpki-client