Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b612cb3-79ed-3c0c-9c03-b07ce4e0e2ad.roa
File: 6b612cb3-79ed-3c0c-9c03-b07ce4e0e2ad.roa (raw, json)
Hash identifier: fG51HPS3g3lc6DWjXeeEgG4wTna7o6y3y/7n0m3jx+o=
Subject key identifier: 4A:C8:A3:E4:BC:9B:CD:3D:2D:AD:0B:CF:43:36:A6:20:72:E4:82:DA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5C366D80D7563887ADA40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b612cb3-79ed-3c0c-9c03-b07ce4e0e2ad.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c3:66:d8:0d:75:63:88:7a:da:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=4db94dbb-2ed6-4d1a-88a8-3adef8fe0444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:04:a3:95:e7:17:65:df:0b:4b:74:70:a0:
89:cc:4e:c8:4a:50:4a:7c:51:4c:9f:40:16:65:0c:
17:de:52:55:6e:27:b5:97:d8:0d:6d:9d:c7:ac:66:
19:3f:0b:90:fc:8d:ac:53:60:5e:51:1a:33:1b:bc:
8e:26:1b:8f:3a:87:8c:be:b8:1d:ec:30:ef:32:76:
1f:a6:5a:8b:99:7c:f1:96:a4:7c:2f:7d:f1:c5:2f:
ff:10:cf:9d:73:fb:74:18:53:c8:9d:89:f1:23:aa:
27:8c:e9:07:90:2d:59:0c:89:c5:21:42:ed:7a:15:
92:d2:cd:fb:44:90:c1:9e:6d:3c:b7:ee:9d:b3:5a:
4c:26:2c:ba:2b:ad:fa:a9:70:46:1a:be:94:c1:c8:
42:33:62:36:f7:f6:1f:53:a4:40:d7:65:6f:e5:1a:
8d:eb:9b:e7:b1:63:63:ac:3d:53:2c:ed:7e:4b:4d:
d5:ff:f6:cf:df:54:1d:1e:5c:e3:2e:eb:f9:3e:b9:
a3:85:4e:75:ab:88:8a:8f:2c:24:22:4f:c3:0c:57:
f9:aa:ed:2b:c0:f0:7e:ec:2e:ce:93:6e:62:dc:41:
c0:25:77:31:71:19:67:d7:0a:ea:fd:5f:6f:b0:19:
27:75:f4:90:24:d3:f9:b6:f6:fa:77:60:a5:b9:e1:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:C8:A3:E4:BC:9B:CD:3D:2D:AD:0B:CF:43:36:A6:20:72:E4:82:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6b612cb3-79ed-3c0c-9c03-b07ce4e0e2ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.144.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:06:44:72:8c:ff:a3:16:df:e6:1d:29:d1:4f:1f:e5:aa:75:
1d:71:69:38:df:f8:55:72:84:13:2a:56:ed:a0:d4:c3:a0:65:
c0:f4:33:90:65:4f:9f:b5:09:42:17:ca:4c:d6:e1:ef:c8:64:
67:77:60:d9:9b:31:6c:78:1f:52:d9:5c:04:25:ca:af:dd:8a:
9c:04:65:f1:cd:4c:5b:fb:fb:f4:ae:80:11:2a:60:6e:56:05:
14:d3:36:5f:7c:90:00:f9:61:22:57:06:ee:fe:5c:2a:b3:77:
1e:04:6b:af:ce:1b:53:53:3a:29:33:9a:8e:ee:ab:8a:73:9c:
3c:44:1b:15:16:41:2c:7d:e8:e8:80:6a:ce:9f:dd:eb:75:62:
a3:d5:12:34:c6:a5:82:4a:b5:ca:b1:db:5d:06:63:03:c9:66:
da:66:c9:79:ef:dc:a5:12:11:1c:e6:b5:77:b0:1b:d7:89:28:
6b:13:a2:82:53:7c:ee:d4:36:b0:33:94:9d:9b:d3:c9:ea:a3:
f9:ab:d4:e7:3f:d9:af:84:ed:11:1d:2f:a4:65:6d:04:e8:f0:
65:78:f4:10:7c:97:45:16:27:e5:16:2e:5b:84:59:09:84:c7:
50:c0:1a:5a:c5:4f:67:f1:07:a1:c5:dd:45:ae:14:b1:30:8a:
49:ae:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:02:04 2025 by rpki-client