Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa
File: dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa (raw, json)
Hash identifier: xOb82tg2w9qYlvCm218uZlF3iXh6x4G8GANdgrJ8lZY=
Subject key identifier: 62:66:DD:00:FA:CC:A6:A9:77:5D:E1:6D:38:57:D4:9E:F4:81:27:D2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5C26AC069BA7D37CCB0DC
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c2:6a:c0:69:ba:7d:37:cc:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=81c3f519-3969-4bd9-b27a-052695dd24ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9c:68:a6:58:3b:39:f0:13:cd:3d:3b:20:de:
f7:4c:e5:cb:6d:8a:50:1c:03:f9:d5:24:18:61:20:
70:e3:1d:24:6a:96:a9:05:41:04:44:7e:c5:c1:54:
8e:86:68:60:a9:ee:ae:6d:8d:f2:a6:62:f1:9a:f2:
65:fb:23:84:b3:0f:9e:5b:98:b7:98:58:ec:e0:a4:
d4:9d:d0:88:94:f4:e0:a3:bc:31:ee:eb:bb:c9:4a:
7e:fb:98:a4:9b:e5:88:ea:f4:64:8c:b3:f9:0a:f7:
9a:b1:1c:cc:cf:a2:6c:ad:ea:79:7a:33:d1:3c:8a:
4f:26:c1:15:ac:58:fc:d0:c2:45:9c:50:17:fe:91:
58:79:f2:b2:72:ac:2e:c9:6c:45:95:9d:88:44:70:
69:63:b0:3b:9a:4e:82:dd:9e:64:b1:64:50:d5:b0:
b0:9e:7e:8c:1c:11:b6:6e:d9:88:86:ff:d6:ab:cd:
10:cc:fd:4a:1e:56:d4:99:b2:34:ba:cf:1d:41:73:
8b:90:bd:e9:7c:40:af:5a:d4:c6:41:56:0b:18:15:
b5:ee:07:ee:99:85:5f:b5:09:90:9a:6b:36:ee:c7:
83:15:06:03:ea:09:a0:37:56:57:f3:79:1a:b0:06:
96:1b:c5:64:21:da:3e:e2:8b:c1:39:1a:55:87:60:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:DD:00:FA:CC:A6:A9:77:5D:E1:6D:38:57:D4:9E:F4:81:27:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/dfac38b0-5803-382f-94a4-bd9f8ed915a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:e6:93:4c:bb:be:42:fa:a7:08:96:7b:dd:a6:f3:4e:b6:90:
97:f5:61:74:c6:cf:27:20:f3:34:c0:80:7d:b6:42:b6:89:3c:
94:51:32:e8:88:ff:cf:35:5c:bf:00:3d:7e:94:ef:66:0b:24:
0d:77:13:05:c7:88:08:9f:12:cf:69:91:4f:d6:8c:00:32:dc:
74:fd:4e:d5:c8:7b:3d:77:0b:51:56:05:1a:e4:48:7d:84:e7:
0c:8c:fe:77:cc:ce:e0:f7:5a:16:7c:cf:4d:93:73:40:98:2e:
5e:74:9f:be:27:33:29:28:2d:67:c1:be:9c:87:06:11:8a:a2:
3c:bd:73:87:d3:79:b8:fe:6e:28:d8:77:6f:ea:33:ce:bd:a1:
79:78:a3:9c:fc:be:13:bf:c4:47:d0:69:e1:6c:03:86:ea:38:
27:7b:96:d5:02:03:0d:28:0c:45:c0:55:11:71:5a:72:5d:4a:
c0:d4:71:be:fe:25:37:ee:7e:4d:2e:02:96:90:a1:f6:4d:ad:
24:a5:2c:e7:99:68:5c:1e:b1:dc:1a:21:52:e0:85:21:4f:42:
8d:b5:f1:4c:6a:aa:fd:bf:63:66:ab:b5:d8:ad:c0:63:18:bb:
3b:fe:db:49:c9:a6:90:2c:87:6d:eb:c2:c3:e6:71:ea:fb:81:
19:f4:c9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:26:27 2025 by rpki-client