Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa
File: 68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa (raw, json)
Hash identifier: r3hVK32xbg5DALuT51+UAVjuZc3z6GiALvEweEkB8NY=
Subject key identifier: C5:AA:FB:87:CE:EC:A8:39:3C:F1:4D:84:DF:7C:96:5E:BD:AB:7F:EB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285849631ED027D7B34C33E07B7A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 15169
IP address blocks: 192.178.173.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:d0:27:d7:b3:4c:33:e0:7b:7a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=1cacc237-972d-4108-a920-096146b51637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:66:c8:d8:09:19:8e:b9:a0:5a:76:9f:6b:
c0:ae:31:a0:91:60:6f:13:7a:75:89:e7:b5:4b:8f:
5b:33:9e:a6:0c:c9:d3:c2:d3:67:94:7c:95:5b:76:
90:9a:7f:ed:9e:77:57:0c:52:fd:20:18:ba:26:4e:
76:82:63:9b:e8:15:8e:c8:cb:ea:48:16:7c:35:e0:
b4:2c:34:92:45:b2:f2:83:d7:6b:33:8b:bd:93:5f:
3f:4f:f1:cf:9e:2c:dd:62:39:ce:14:4d:b9:0b:19:
79:4f:13:0c:e7:ee:e6:f8:ae:b1:f2:46:4a:01:0b:
02:b2:1c:fe:16:b9:ac:11:78:5d:74:fc:b6:3b:0c:
24:93:03:a7:17:ca:fe:6e:f2:03:39:27:89:45:a2:
0e:24:32:28:a6:41:5c:77:bb:18:6c:8b:3d:d9:21:
53:05:c8:d2:80:f9:96:c5:1a:11:32:47:1f:b7:ff:
a3:e7:0c:63:3d:a8:12:97:a2:ee:b7:ad:9b:bb:12:
9a:6e:51:b8:08:19:3d:cd:55:54:8d:3a:ff:bb:5b:
38:4e:13:06:6e:2f:29:b7:82:41:c0:e4:2f:c2:88:
01:5e:be:10:67:6c:7d:31:ff:ac:bd:e0:aa:d8:cf:
5e:1c:ba:28:c5:85:87:dc:aa:bd:55:40:b3:11:7f:
0a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AA:FB:87:CE:EC:A8:39:3C:F1:4D:84:DF:7C:96:5E:BD:AB:7F:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68b5c59d-ce17-3d38-90cd-799bf0f8d771.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:7e:0a:19:6e:10:2d:e1:e4:f1:ff:d7:a0:e9:71:1d:7b:76:
2b:13:08:3a:53:8b:17:7c:04:9f:05:7c:79:8d:60:c6:fe:b3:
52:6c:18:73:3a:20:72:f9:93:5e:84:78:e2:e3:96:62:21:a4:
3a:87:e7:dd:9a:cc:0a:ba:6e:37:53:46:19:43:3a:b2:f9:b3:
68:61:65:0b:5f:df:a0:3b:87:1f:da:57:3a:0e:95:92:8c:1f:
53:2a:07:d7:49:68:2e:56:46:95:57:09:36:6f:e4:79:69:7b:
02:bd:10:54:6a:b7:87:c8:8d:ab:0e:02:b3:95:dd:3e:af:67:
b1:b9:8e:9a:47:eb:8c:fe:66:19:93:53:21:5f:f5:cf:91:7a:
97:ae:46:1e:12:c7:12:cc:0d:8c:ae:45:7f:0c:ee:38:19:84:
95:26:2c:a6:f8:c0:de:2d:02:ad:4c:b0:d8:ef:7f:c0:d3:6f:
54:91:ac:22:0d:35:f0:e7:f8:b3:4e:ea:0c:76:8b:b9:4c:73:
73:58:47:bc:79:8d:70:9a:71:12:0f:25:00:85:f6:21:27:83:
74:7d:14:5b:af:5e:c2:5d:a1:a9:30:95:f8:86:24:ad:dc:6a:
bf:49:f6:e4:49:18:fb:82:53:73:98:db:a7:b4:6d:8e:b5:86:
ca:48:42:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEljHtAn17NMM+B7eoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDQwMjAxMDA0NloXDTI1MDcwMTAxMDA0NlowLzEtMCsGA1UEAxMk
MWNhY2MyMzctOTcyZC00MTA4LWE5MjAtMDk2MTQ2YjUxNjM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj35myNgJGY65oFp2n2vArjGgkWBvE3p1iee1
S49bM56mDMnTwtNnlHyVW3aQmn/tnndXDFL9IBi6Jk52gmOb6BWOyMvqSBZ8NeC0
LDSSRbLyg9drM4u9k18/T/HPnizdYjnOFE25Cxl5TxMM5+7m+K6x8kZKAQsCshz+
FrmsEXhddPy2OwwkkwOnF8r+bvIDOSeJRaIOJDIopkFcd7sYbIs92SFTBcjSgPmW
xRoRMkcft/+j5wxjPagSl6Lut62buxKablG4CBk9zVVUjTr/u1s4ThMGbi8pt4JB
wOQvwogBXr4QZ2x9Mf+sveCq2M9eHLooxYWH3Kq9VUCzEX8KMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMWq+4fO7Kg5PPFNhN98ll69q3/rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjhiNWM1OWQtY2UxNy0z
ZDM4LTkwY2QtNzk5YmYwZjhkNzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwLKtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEh+ChluEC3h5PH/16DpcR17disTCDpTixd8BJ8FfHmNYMb+s1JsGHM6
IHL5k16EeOLjlmIhpDqH592azAq6bjdTRhlDOrL5s2hhZQtf36A7hx/aVzoOlZKM
H1MqB9dJaC5WRpVXCTZv5HlpewK9EFRqt4fIjasOArOV3T6vZ7G5jppH64z+ZhmT
UyFf9c+RepeuRh4SxxLMDYyuRX8M7jgZhJUmLKb4wN4tAq1MsNjvf8DTb1SRrCIN
NfDn+LNO6gx2i7lMc3NYR7x5jXCacRIPJQCF9iEng3R9FFuvXsJdoakwlfiGJK3c
ar9J9uRJGPuCU3OY26e0bY61hspIQvk=
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:05 2025 by rpki-client on console.sobornost.net