Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78b3682a-ba84-39a2-ba7b-2027506dcd43.roa
File: 78b3682a-ba84-39a2-ba7b-2027506dcd43.roa (raw, json)
Hash identifier: 1hj+BTV2ajPZ4QHwDh9u5Y3upVhTsmydbCIj0SuG4Co=
Subject key identifier: 40:04:00:B3:E7:C7:18:4E:2C:0C:92:C4:49:81:B5:9D:7E:8F:11:5C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5C03F26050A963F698B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78b3682a-ba84-39a2-ba7b-2027506dcd43.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.150.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c0:3f:26:05:0a:96:3f:69:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=62fcf622-3745-419a-a042-6712da0d66b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:92:fd:e0:8a:a9:c7:af:e3:98:8c:07:5f:ce:
bc:6a:95:ce:1b:4a:6a:45:22:6b:9d:cb:38:81:a2:
ac:cb:77:ce:ff:fa:78:6b:f4:c4:1f:63:a8:fc:8c:
ea:71:ad:9a:77:3c:a1:0d:d2:b6:f1:0d:07:84:e3:
9b:e4:b0:6e:23:1a:35:11:f5:ff:95:2e:75:8a:74:
a7:44:f5:d4:d0:04:b2:0c:bc:bb:ef:44:af:91:6f:
76:f9:61:0a:25:f8:d7:b9:be:b4:db:a3:d0:75:62:
29:39:37:23:51:0d:bf:89:23:62:ff:0f:e4:a4:5c:
c2:15:3f:3e:6a:16:ed:22:ac:6c:f5:f6:18:6a:6d:
93:55:fe:db:42:7c:86:87:9d:9b:48:f9:27:85:5f:
61:f5:5b:7e:5f:de:7e:45:3f:62:86:b1:45:c4:75:
85:a2:c0:63:70:cf:d3:c0:a3:11:8a:a1:f1:7e:6f:
74:c7:dd:15:f8:50:73:e8:c3:fc:48:c2:0a:e4:72:
de:0e:91:d7:50:08:b3:8c:d0:9f:e4:16:bd:84:81:
06:fa:5b:9e:44:c5:36:3b:ac:8f:47:a0:cf:1c:db:
4c:ae:6f:12:98:ae:3a:5a:e8:57:0d:9d:c9:8c:84:
b5:f5:bf:8a:57:73:b3:86:e3:8f:9f:5d:92:f1:81:
1b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:04:00:B3:E7:C7:18:4E:2C:0C:92:C4:49:81:B5:9D:7E:8F:11:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/78b3682a-ba84-39a2-ba7b-2027506dcd43.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.150.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:0e:54:ee:fe:e4:12:7b:6b:31:e3:b6:b4:e9:96:73:e4:b0:
33:00:64:49:6e:bb:62:65:19:cd:af:69:b4:ce:d6:e5:f6:fd:
d6:0b:b4:55:fb:29:27:9b:55:ec:05:62:62:fb:f2:55:fe:6b:
16:29:34:f0:6f:da:b7:16:a3:78:5c:88:07:67:4c:45:6f:15:
54:b6:7a:c6:0d:45:f0:8f:15:a9:e2:a0:f7:64:01:cf:ca:ac:
05:a5:6b:e1:68:12:6f:2a:9e:0a:d7:c2:2b:de:d6:65:9e:23:
5a:55:d7:61:0b:13:3e:89:cc:ce:de:4b:74:4a:66:9e:5b:35:
45:26:6c:66:21:46:62:fb:a4:e1:36:ca:1b:ae:9c:f2:90:af:
45:b2:d1:5c:df:3d:8a:2e:38:29:b4:74:92:7e:bb:bc:2d:97:
a8:5c:45:49:a7:b8:52:c5:43:bd:60:45:7a:28:75:28:4c:4c:
a4:35:7a:c0:3d:55:ac:5d:b3:6a:21:ab:31:8e:99:70:28:6d:
f9:a0:bb:59:9d:c7:4a:08:d0:22:c4:b9:d4:e0:5a:0a:b1:13:
17:31:da:2b:d4:6b:b6:ea:96:c5:13:7d:73:89:d0:0e:61:6e:
ae:09:5e:1c:70:f0:15:83:50:2a:2b:11:75:80:48:47:a9:4a:
07:68:34:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiD5cA/JgUKlj9pi4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDExMjAyMDAzOFoXDTI1MDQxMjAxMDAzOFowLzEtMCsGA1UEAxMk
NjJmY2Y2MjItMzc0NS00MTlhLWEwNDItNjcxMmRhMGQ2NmI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5L94Iqpx6/jmIwHX868apXOG0pqRSJrncs4
gaKsy3fO//p4a/TEH2Oo/Izqca2adzyhDdK28Q0HhOOb5LBuIxo1EfX/lS51inSn
RPXU0ASyDLy770SvkW92+WEKJfjXub6026PQdWIpOTcjUQ2/iSNi/w/kpFzCFT8+
ahbtIqxs9fYYam2TVf7bQnyGh52bSPknhV9h9Vt+X95+RT9ihrFFxHWFosBjcM/T
wKMRiqHxfm90x90V+FBz6MP8SMIK5HLeDpHXUAizjNCf5Ba9hIEG+lueRMU2O6yP
R6DPHNtMrm8SmK46WuhXDZ3JjIS19b+KV3OzhuOPn12S8YEbqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEAEALPnxxhOLAySxEmBtZ1+jxFcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzhiMzY4MmEtYmE4NC0z
OWEyLWJhN2ItMjAyNzUwNmRjZDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKQOVO7+5BJ7azHjtrTplnPksDMAZEluu2JlGc2vabTO1uX2/dYLtFX7
KSebVewFYmL78lX+axYpNPBv2rcWo3hciAdnTEVvFVS2esYNRfCPFanioPdkAc/K
rAWla+FoEm8qngrXwive1mWeI1pV12ELEz6JzM7eS3RKZp5bNUUmbGYhRmL7pOE2
yhuunPKQr0Wy0VzfPYouOCm0dJJ+u7wtl6hcRUmnuFLFQ71gRXoodShMTKQ1esA9
Vaxds2ohqzGOmXAobfmgu1mdx0oI0CLEudTgWgqxExcx2ivUa7bqlsUTfXOJ0A5h
bq4JXhxw8BWDUCorEXWASEepSgdoNIU=
-----END CERTIFICATE-----
Generated at Fri May 9 20:45:44 2025 by rpki-client