Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa
File: c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa (raw, json)
Hash identifier: LW1yGecs3vx6K+Kmv6jks/DzyK0H9lVg4Dawno16OC0=
Subject key identifier: 88:EA:A8:9C:E8:E8:87:A3:76:05:CE:F4:D0:C1:0E:DC:70:67:E3:2C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5C38EF1CFC62D47103598
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c3:8e:f1:cf:c6:2d:47:10:35:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=a5479ec5-cac3-41ba-98f3-858842bded9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:f0:96:9a:0a:a1:ef:02:c0:94:00:8a:8f:
6a:bc:2a:7a:64:d7:1c:85:a0:5f:66:12:c6:43:75:
9d:1d:a0:b4:e2:b0:3e:e7:d9:66:00:75:11:79:53:
2c:85:be:94:b5:b2:91:a5:b7:cf:2a:de:a1:91:62:
a1:48:e3:34:4d:c3:41:cd:9c:fb:0d:92:b8:86:bb:
e3:a0:59:ef:84:0e:e4:b7:77:1b:6e:5b:1e:5e:9e:
ce:fa:b8:87:cd:03:3a:92:03:51:83:bf:38:64:12:
67:7a:bf:87:45:0e:ed:ef:df:da:2c:d7:ae:61:21:
4b:59:ba:eb:43:6e:0f:27:f1:11:b6:54:f4:03:4f:
84:6f:9c:f2:19:da:f0:b1:0d:96:3f:0e:8f:c9:25:
53:63:ef:86:fe:f7:5e:27:e1:56:25:1b:69:89:2a:
8d:89:12:9e:58:6c:bd:cb:cd:84:a3:16:23:2f:bc:
7b:0f:89:76:65:3b:18:17:50:80:95:47:18:6f:ce:
18:ab:f8:62:fe:38:af:25:b3:8c:8f:7d:db:e5:d1:
3d:2e:4f:ef:a9:42:da:0f:02:18:d9:7f:51:90:40:
5e:16:f0:78:7f:48:fb:2e:64:d7:a3:3f:3a:9b:30:
03:4a:48:1e:b7:67:2f:3a:a3:ea:6c:92:9f:b9:d2:
9f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:EA:A8:9C:E8:E8:87:A3:76:05:CE:F4:D0:C1:0E:DC:70:67:E3:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c7b9912d-2cd6-3974-a805-1e0525a1a03e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:88:9e:cb:3f:30:05:d2:82:a0:9b:4e:c3:ea:f3:2b:69:fc:
58:00:60:d9:f9:38:c2:3b:4c:38:d1:44:a4:41:0d:95:89:94:
e3:11:56:d7:68:54:22:8b:05:74:da:01:cf:12:e7:3c:a4:a4:
41:94:4e:2a:2a:8b:d9:a6:a2:22:d9:db:80:94:d1:1f:95:15:
1c:d8:ac:dd:cd:a9:04:b0:dd:32:7f:e5:89:4e:30:a8:e6:dc:
20:93:75:12:68:dc:0f:6f:b7:07:9b:c0:f6:02:fd:f8:6a:d4:
e3:73:7d:fe:d3:ef:87:2f:83:bf:1a:92:34:a5:23:74:a2:25:
e2:78:6d:0b:7a:35:10:43:15:f3:23:f4:5e:31:0c:f8:6d:f4:
5f:12:68:f6:61:d8:41:ba:9e:e7:11:94:fd:f7:73:b2:29:cc:
df:9d:db:12:0c:8f:4c:2a:b1:24:cd:aa:c9:eb:83:16:36:ec:
d5:f0:c8:b9:20:a4:d9:f9:90:7b:6a:d8:27:f4:67:06:19:a8:
09:e2:d8:9e:ad:9b:17:19:f9:16:12:a9:f2:6b:d7:1e:63:31:
49:10:6d:d5:6d:d0:c1:8e:6f:b3:c4:d8:21:3c:28:9c:69:4e:
d0:e1:87:0f:3b:a4:45:65:13:0c:13:0f:6b:07:c8:f3:df:86:
53:ba:73:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:51:35 2025 by rpki-client