Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c44562-8d45-3db7-8770-a7e7dd0f685f.roa
File: 81c44562-8d45-3db7-8770-a7e7dd0f685f.roa (raw, json)
Hash identifier: 6IAhf7Vxzce9BacIYleimT4Zw4e1BR10UQUnNtprb9s=
Subject key identifier: 1D:CE:AC:7E:22:2C:E9:0C:72:AC:2E:A9:DA:01:83:9B:02:E3:95:A2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5C1A7161FE93AF483B380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c44562-8d45-3db7-8770-a7e7dd0f685f.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c1:a7:16:1f:e9:3a:f4:83:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=9f26805d-dd31-44d6-8f70-0ebf7d36ff64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a5:ff:c5:0e:62:37:a3:e8:2f:ae:33:26:61:
c3:69:e1:48:e4:fe:e5:d8:f3:e0:c1:39:89:a2:b0:
46:41:51:20:92:f5:1c:6a:37:c3:53:69:cb:f8:ae:
21:2e:47:44:45:f9:f1:c3:b4:a1:d5:5a:ab:a2:bc:
7f:4b:96:ab:0b:c2:eb:05:e9:60:e9:f1:a2:74:d2:
b3:1e:e9:40:46:38:98:67:b5:4b:d8:0c:1b:a5:c7:
ee:4b:df:f6:47:d4:44:a8:79:41:d0:c3:4b:70:b8:
ca:7a:22:75:05:68:94:96:06:49:f7:f4:aa:bd:1f:
64:44:c1:4f:e7:6f:1c:6e:35:de:e2:f3:89:70:b6:
d1:2b:a2:dd:b8:ad:1f:e1:68:db:18:7c:25:36:f6:
3e:3e:e2:fe:67:f9:1c:b7:14:e4:b5:40:fe:07:e7:
25:48:b8:2e:82:7a:f8:60:a6:12:ce:3f:1d:9f:f3:
c5:d8:09:4d:1b:8a:23:c7:0a:89:1c:ed:32:03:08:
da:96:41:0f:84:76:38:dd:50:15:28:00:a9:ba:cd:
6f:c6:78:dc:24:fe:b1:0a:e4:30:43:7f:df:30:76:
27:dd:9f:06:ab:2f:38:84:a3:c1:b9:06:64:cc:df:
2b:b7:ef:4a:a2:b0:a4:7e:92:74:68:83:7b:56:74:
64:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:AC:7E:22:2C:E9:0C:72:AC:2E:A9:DA:01:83:9B:02:E3:95:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/81c44562-8d45-3db7-8770-a7e7dd0f685f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:17:e6:a0:a5:bb:a9:6a:64:e3:c3:29:60:a1:73:48:ad:ee:
2f:f9:ad:00:67:ef:be:39:62:4f:4a:8a:50:c2:09:55:29:44:
3c:6f:a1:5f:09:ef:3b:f9:fa:bd:b1:b7:b8:81:db:a8:8e:c9:
1f:46:3f:50:63:da:61:d1:3a:88:d3:d1:49:01:f5:c0:1d:0a:
7f:75:22:38:36:62:b1:6a:62:85:21:c7:5d:ce:7a:f5:71:de:
2d:19:d0:13:11:e0:f6:b5:19:0f:6e:a0:cf:d9:f7:27:1c:79:
9d:86:60:de:c5:47:0c:89:d8:33:1a:d4:6b:59:3f:c9:3c:e9:
d5:73:07:6e:b2:84:c2:cb:de:1e:b9:97:74:5b:1c:51:94:22:
e1:a3:b1:36:d7:bd:da:db:ea:eb:a1:ec:26:bb:76:b0:24:73:
da:5f:0a:a2:fe:c8:44:c2:70:d5:c7:17:a0:45:8e:6b:7c:d9:
12:e9:14:b1:cd:36:cf:1c:a8:5c:42:d5:64:f6:94:91:25:8b:
53:7d:41:ff:3c:c5:cb:e2:e3:80:f0:e9:e9:01:f0:71:ce:86:
06:f0:93:57:7f:be:be:7e:1f:11:c9:72:2f:e9:57:93:17:84:
34:c6:81:4e:66:ae:82:82:4d:a2:02:d4:4f:48:6a:ad:35:af:
17:06:4c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:27:29 2025 by rpki-client