Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa
File: e03b701f-5218-31be-83f9-c7f36c6eb80e.roa (raw, json)
Hash identifier: nUUhSIERlx/LVtnayRbeQW4pUWK098AcKLaOKqAUTP4=
Subject key identifier: 0A:6C:63:00:F3:1C:5B:15:5D:C4:11:56:D4:16:03:9B:37:CD:94:5E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5C2ECDAD611056EAA6082
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 192.178.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:c2:ec:da:d6:11:05:6e:aa:60:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=397f046a-3611-4946-8a01-dd107c2b4faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:a5:5f:f2:70:a7:16:22:72:11:71:a2:63:17:
aa:7e:18:c0:40:53:56:36:d4:6d:72:ff:59:ca:20:
2a:4c:48:69:3f:92:f8:15:dd:24:ce:be:16:39:d1:
35:ca:55:ef:23:43:a3:95:dd:6b:8f:dd:27:83:04:
d9:88:a0:a3:33:66:3f:68:d4:f1:7b:50:65:b8:cb:
f7:34:18:ac:f6:c5:b1:b5:2b:90:96:34:c0:4c:7e:
db:74:10:db:86:9a:c3:1c:5d:1d:f6:ee:4c:02:95:
e2:ee:7a:2a:0c:a8:f8:2d:6d:5e:ca:af:83:91:48:
d2:db:c8:24:41:12:5e:f3:f7:de:cc:10:68:80:85:
07:1b:ed:80:e7:53:54:a8:cb:bf:f6:9b:c4:a8:7c:
9e:bf:01:6e:fd:c0:0d:1e:b2:79:d8:8a:db:df:fc:
12:38:dc:b9:27:42:de:80:af:2c:46:07:46:ea:41:
a6:df:1c:c0:4a:13:35:c0:c8:40:80:0c:e3:fb:da:
d6:3f:f1:16:c6:02:bd:fa:18:44:b4:eb:47:26:e2:
f2:20:af:20:50:d3:79:17:c7:67:45:6f:b6:af:85:
19:9c:54:c2:f4:ca:16:71:f5:97:f3:a9:29:eb:53:
84:3a:52:90:b5:83:fe:3d:2f:40:39:79:60:ba:7a:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:6C:63:00:F3:1C:5B:15:5D:C4:11:56:D4:16:03:9B:37:CD:94:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e03b701f-5218-31be-83f9-c7f36c6eb80e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:d4:a5:a3:05:1e:85:88:01:db:33:6e:2b:dc:d7:d8:70:e2:
02:d8:f5:86:fd:f1:13:d4:e9:b8:3c:eb:fd:8b:23:41:2a:24:
96:2f:35:d9:8a:99:a8:14:7f:db:e1:31:d5:11:a8:cd:19:11:
69:61:aa:08:2a:90:81:29:bf:99:d9:a2:af:02:2a:46:24:a2:
83:41:ee:1f:e9:15:08:25:90:75:b7:41:df:61:56:ca:f8:86:
f8:5a:6f:0a:90:bb:57:3e:04:05:bb:00:7b:04:ac:f8:e5:86:
4b:f6:39:32:86:7c:ec:e0:9a:43:65:6f:2d:b3:11:e8:23:36:
e5:eb:41:38:50:56:36:ca:a4:37:06:30:cc:98:68:18:1e:a7:
00:f1:75:2e:f0:68:4a:22:ae:3a:e3:fb:9b:46:8e:e1:ee:57:
0e:a2:ee:48:63:52:cf:aa:d4:c7:54:98:85:a9:65:47:a1:a4:
b7:26:7f:55:36:40:b8:6e:4f:94:96:54:52:84:4c:0f:0d:a7:
a2:6a:f5:56:48:78:78:eb:50:40:a8:c3:82:07:e6:2b:56:a9:
18:b1:0d:3a:b6:7d:18:da:a0:6b:d9:ac:a9:1c:d3:1c:82:2e:
da:f7:61:77:60:78:94:e4:f0:5e:bb:f9:2f:c7:cb:db:6f:bd:
a3:c3:d6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:18:13 2025 by rpki-client