Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8f3bd7-fba4-35c5-ad65-6abf692c8db1.roa
File: 2f8f3bd7-fba4-35c5-ad65-6abf692c8db1.roa (raw, json)
Hash identifier: t99+mpNuw6Jf9NtPAbNVIfCVwJSgprfRRV+wW4qXuwI=
Subject key identifier: F7:81:40:80:EE:D3:E3:3A:7A:43:B0:D4:19:70:06:54:8C:9F:25:9B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285849631ED1A8B8C1D06E2DB6C500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8f3bd7-fba4-35c5-ad65-6abf692c8db1.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 15169
IP address blocks: 192.178.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:d1:a8:b8:c1:d0:6e:2d:b6:c5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=2cdc23df-498c-4483-a897-bb6e69b94b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f8:fe:0b:66:6e:3d:6e:ac:34:75:e9:81:3a:
66:f3:6b:14:1a:38:49:d4:a2:ea:74:28:5f:c1:04:
6b:d2:f2:5d:fc:84:59:cf:c7:d9:08:0e:79:37:17:
df:80:38:ff:bd:2e:94:88:f1:6c:80:6a:75:35:3f:
bc:8a:43:2b:1c:a4:30:cb:f3:17:99:11:c2:86:83:
27:bd:c3:11:f2:bb:b6:15:95:3d:bb:d6:c0:2b:af:
05:fd:1d:a9:6b:78:5b:c7:36:a6:f1:70:7f:3b:e8:
73:80:9a:a3:b2:4c:7f:20:fa:cc:1e:ef:a7:ee:3d:
9d:52:02:96:12:81:f9:09:27:19:be:52:24:62:aa:
2e:ef:93:4e:77:06:3c:13:d8:cb:40:ce:22:ff:71:
cb:18:fc:cc:58:42:5d:e8:ab:68:74:42:99:da:3d:
03:b9:af:76:fc:74:32:cb:1d:65:02:31:6a:e1:3d:
05:58:8b:1c:36:57:80:05:38:13:61:7b:99:4b:87:
0f:65:11:1d:ad:54:36:2d:b1:61:ae:76:2e:fe:20:
30:c0:5b:9d:d5:9e:97:db:a2:32:40:9d:b5:4a:85:
bd:93:bc:e3:9e:27:3a:c4:2f:9e:9a:8b:91:6e:62:
22:69:fa:39:06:ce:70:68:1c:ac:fc:0b:df:aa:49:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:81:40:80:EE:D3:E3:3A:7A:43:B0:D4:19:70:06:54:8C:9F:25:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2f8f3bd7-fba4-35c5-ad65-6abf692c8db1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.181.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:a4:fe:5a:d2:31:c3:87:27:ac:b5:9e:3d:d1:36:c1:b9:0a:
41:96:e1:1a:65:ee:ad:c3:68:6a:5b:a8:b7:c7:6f:1e:7c:ed:
f8:7f:9a:f2:26:3c:fd:dd:6e:4b:79:b9:00:68:05:1a:0d:85:
2a:fe:77:83:c7:d2:80:dd:9f:8c:d8:16:3d:70:3a:7f:03:ae:
bc:fa:02:f1:bb:52:4b:5d:4d:27:32:fc:4e:f7:56:59:c8:6b:
98:d1:a0:21:88:0f:79:8d:5f:cf:ba:da:84:d7:66:a5:4f:b8:
89:82:58:5c:97:94:1c:5d:0d:bc:b6:4e:1c:f1:08:ec:e8:f2:
3d:e2:1c:06:fc:41:3b:65:46:cb:0d:b7:2a:0b:0c:3e:ed:9e:
61:2a:38:76:f7:5c:99:2c:de:ac:e1:39:ed:dd:93:86:8f:7b:
99:ed:b3:39:8c:98:9d:d8:02:9c:c3:2e:6f:cc:46:9a:f9:bf:
1a:42:25:7e:17:70:0b:a6:b8:48:aa:7c:1c:66:53:44:fe:ad:
a9:62:cb:70:7c:be:6e:26:a8:52:ff:62:7c:3c:cc:61:84:30:
c5:7f:f4:4b:e7:9f:67:47:90:4c:9e:70:cd:fe:b9:ad:a9:15:
7b:79:d8:15:18:0d:c8:03:56:25:54:83:f8:ce:5f:bc:66:9d:
d6:4c:c8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:03 2025 by rpki-client on console.sobornost.net