Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa
File: c98a701b-7bc9-3bad-a939-be22323e522c.roa (raw, json)
Hash identifier: UPnZKZstL5bD3NZKAtoPCmiyPCCU4DC4dLWbLIK1DRs=
Subject key identifier: 76:11:38:05:7B:4C:91:C6:75:C9:17:2C:5F:61:44:41:74:05:09:E9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5C18235DAFA90D216B080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c1:82:35:da:fa:90:d2:16:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=4d49f59b-2c09-4865-89a3-983ce404b0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b3:4b:ac:e3:6d:8b:fd:1d:78:e2:58:4d:55:
c6:57:4c:06:df:74:c8:9a:40:7a:50:10:4c:78:41:
43:47:d3:5e:50:8b:2f:a5:22:8f:71:0c:c5:11:b0:
5a:7f:65:a4:58:0d:ce:9e:f9:1a:89:5e:c4:01:ec:
32:0c:ec:70:03:29:ca:00:3e:28:13:a5:ad:d6:d0:
59:29:9e:7f:3c:6f:f8:a4:ba:99:97:89:bb:f0:22:
35:19:18:5f:56:5a:38:57:1f:e8:36:0d:31:b9:be:
51:54:22:e2:4a:0a:6a:5d:19:0d:8f:1f:49:87:eb:
df:50:f0:c4:40:1b:68:be:bd:5c:86:32:9d:1c:62:
03:98:92:89:21:40:c7:ab:8f:6c:51:06:56:bf:9f:
57:59:40:e6:a9:6d:db:50:24:39:cf:d2:90:98:81:
9c:f4:4d:11:68:85:ae:59:6c:b0:f1:d1:50:e5:dc:
d5:7d:45:9a:12:bc:bb:fb:5b:f4:54:3d:a2:ce:54:
40:af:32:29:9a:81:7a:50:76:a9:cc:9e:ce:92:64:
7d:9d:dd:d0:1a:4e:33:3e:93:04:4d:fa:fa:a1:19:
80:89:b2:3f:db:c9:1b:bf:1d:62:7f:e5:6e:20:20:
42:fa:d1:00:e0:19:00:b9:c6:45:ce:62:c1:e6:cc:
f6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:38:05:7B:4C:91:C6:75:C9:17:2C:5F:61:44:41:74:05:09:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c98a701b-7bc9-3bad-a939-be22323e522c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:f2:e4:0c:c8:d1:91:49:e2:61:3d:40:99:cd:86:67:95:a4:
32:63:f4:56:da:9b:70:97:fb:8e:4a:b4:fd:4e:a8:e0:ac:9f:
a8:88:34:21:76:49:8a:07:1c:2b:1b:d7:9a:19:eb:9e:0f:38:
0d:77:78:fb:70:7d:10:72:77:61:f5:92:0d:ed:36:c0:d9:bb:
a5:82:e6:d9:f7:74:a9:01:99:29:f7:b6:ca:c1:fa:5b:1e:f0:
74:82:05:ec:c0:11:39:55:be:09:77:c1:fb:ec:83:23:09:1f:
84:d1:c6:ab:26:cd:f1:a8:52:de:85:a2:dc:9e:0c:dc:f7:b7:
eb:44:6f:9f:ae:3c:b9:3a:5f:4b:66:27:04:25:33:f6:d1:8a:
8a:5e:7d:8a:9b:ed:11:65:eb:0d:9e:9f:f5:00:7b:cc:69:ce:
f3:c5:10:ee:df:8b:a9:3b:44:8a:3b:34:bf:8b:a9:3f:e2:84:
03:0c:76:97:5f:08:fe:b6:af:76:93:2b:b5:54:74:b3:59:18:
51:64:ab:5e:cc:47:2d:8f:81:c0:db:4b:7c:f8:72:df:6f:92:
1c:4c:9b:62:e5:26:e5:8e:5d:90:44:ae:d0:6e:43:16:26:c7:
50:6b:69:fb:94:10:fc:b8:3e:6a:6e:c1:f1:fb:7e:2b:95:1c:
12:3e:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:21:14 2025 by rpki-client