Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa
File: 5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa (raw, json)
Hash identifier: CXdNziwzqK70/QRN7KADdkwYSnKED4GoBO3NkJ+PYSg=
Subject key identifier: 92:73:F7:B7:12:47:CD:1E:E3:D3:D5:A7:09:8B:0E:E0:1F:CE:4D:3D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584979744FE71E6FCDE3CDF93B80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa
Signing time: Thu 10 Apr 2025 01:00:46 +0000
ROA not before: Thu 10 Apr 2025 01:00:46 +0000
ROA not after: Wed 09 Jul 2025 01:00:46 +0000
asID: 15169
IP address blocks: 192.178.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:79:74:4f:e7:1e:6f:cd:e3:cd:f9:3b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 10 01:00:46 2025 GMT
Not After : Jul 9 01:00:46 2025 GMT
Subject: CN=d851aebe-5381-4b2f-be2e-400cac17d60f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:0b:e6:dc:3c:b5:74:44:fd:a5:7e:d1:8b:
9c:74:d3:62:61:b7:f8:df:93:37:a7:81:0f:c7:bf:
fd:17:6c:0b:d2:22:ad:3e:e3:23:e2:40:22:eb:cd:
35:0b:44:1c:0a:ec:e8:a7:39:b3:0f:7e:b3:79:5e:
c7:4d:6d:5f:4f:bd:af:6e:30:0a:63:b2:54:b8:19:
ce:e7:c8:b6:e3:71:75:6b:ef:e7:e5:67:36:e9:c9:
42:f7:24:34:e3:c6:db:79:84:73:ec:02:fc:6e:eb:
aa:98:34:7f:11:aa:b0:e8:05:c8:1b:09:ea:9f:0a:
40:d2:cb:e7:8f:d3:d3:ad:78:4d:0d:e5:10:3e:a4:
18:1d:97:d6:0d:60:45:f5:94:57:ec:d0:07:c3:89:
5d:ea:53:70:55:1d:51:07:43:0c:cb:2f:81:d7:33:
f4:c5:b4:98:cc:55:32:66:ba:bc:e0:57:09:c6:c4:
a6:86:95:45:f1:b4:56:eb:47:36:c9:f8:58:90:ea:
1c:a0:5b:c2:7c:19:5b:f8:f5:df:58:db:fe:a0:2d:
87:f8:e1:dd:07:e4:de:c5:66:d1:5a:97:73:2d:17:
cf:30:a2:c6:97:8b:87:ad:64:52:d3:e7:ec:8c:ff:
45:58:73:6c:fd:75:24:ac:46:13:58:03:af:2e:95:
17:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:73:F7:B7:12:47:CD:1E:E3:D3:D5:A7:09:8B:0E:E0:1F:CE:4D:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a75a81d-edcf-38cd-ad25-79f23c4848e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:43:4b:e6:6a:46:d3:06:84:fa:32:72:f4:23:8e:62:24:7e:
a2:c4:ee:7c:2f:93:61:18:fe:02:cd:2f:94:b7:63:80:64:ed:
ad:06:bc:c6:d6:8b:89:08:4b:75:2d:3c:e3:d4:13:c9:6c:62:
e6:3c:c3:aa:af:33:71:63:b0:33:99:f5:fd:ff:f0:f3:fd:b4:
29:e0:c7:d4:d3:44:8b:ba:e8:e4:e4:9d:24:52:54:42:4a:3d:
62:82:ae:0a:47:93:67:f0:70:1d:c7:69:47:1a:d7:2c:df:c0:
f7:cb:d8:d3:19:f3:59:2c:c7:00:81:d1:13:75:5d:45:76:ed:
d0:14:7e:a8:40:40:11:63:7c:8b:15:28:86:56:2a:d4:a1:90:
d1:51:11:ef:b3:5f:85:f8:4d:a6:e3:80:4e:e4:79:6b:77:2c:
b5:f6:aa:e4:e6:19:59:54:ca:73:99:89:24:db:4e:a3:15:92:
ed:4f:b8:cd:e4:51:d7:a0:c1:c0:31:8a:9f:41:01:f5:7b:2d:
44:d1:96:d0:df:1c:a7:8a:c2:1e:48:cf:01:f8:6f:16:37:62:
9c:f2:e2:75:34:cd:ed:98:be:25:e5:84:b3:78:9f:49:36:4c:
6c:0e:af:79:89:a9:2c:fa:59:c4:37:af:08:4b:ef:7a:09:54:
31:a3:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:04 2025 by rpki-client on console.sobornost.net