Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75e361f8-9d87-341c-9ebd-0d5eb6f671de.roa
File: 75e361f8-9d87-341c-9ebd-0d5eb6f671de.roa (raw, json)
Hash identifier: RghBV8JIJj8z1DeE4ELovJOvm85imTvPs1YtHa40uVA=
Subject key identifier: 76:77:54:3F:39:A2:4D:C1:2B:B3:38:23:AE:23:E8:9E:A1:35:01:80
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285849631ECE8A33E4F71B05DCBCC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75e361f8-9d87-341c-9ebd-0d5eb6f671de.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 15169
IP address blocks: 192.178.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:ce:8a:33:e4:f7:1b:05:dc:bc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=f4ea5d97-b0eb-4d52-968f-60b4e7109407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b7:8b:26:fa:12:9d:e9:d0:fe:a3:fa:a2:a1:
a8:84:52:e4:d8:8f:8f:21:d8:8f:61:fc:a4:ec:43:
22:c5:af:c3:28:c8:f4:4a:8a:78:be:ad:82:80:38:
99:14:74:c3:3f:8a:f2:7b:db:30:49:97:0b:67:4d:
70:55:59:72:a7:d7:42:91:da:36:08:47:5d:4e:c9:
0a:3d:6c:dc:b9:18:f5:2a:84:91:20:a9:de:e5:40:
5b:82:2e:c4:4e:dd:27:b6:a5:05:55:6e:1b:d1:44:
ed:5d:0d:58:56:76:9b:73:4b:97:c3:76:76:fe:16:
62:f2:60:d3:f5:ac:e2:04:39:be:65:e0:31:c2:d8:
70:01:db:0a:ce:88:5c:47:eb:ab:b0:0b:73:b6:61:
dd:e8:4f:c1:bc:8f:50:e9:4f:ec:d9:6a:e8:0d:ff:
ae:6c:a0:72:ea:2d:21:09:04:37:ca:b8:94:5d:11:
25:0b:58:f5:33:b5:27:35:3f:5f:84:61:63:9b:51:
85:1d:8e:f3:0d:76:b7:e8:58:c8:4a:8d:d1:72:97:
02:49:fa:7b:92:b0:23:71:3c:c5:f6:60:8a:5c:43:
37:b1:f2:bc:1a:27:40:93:15:37:e8:ff:30:c3:8d:
51:1b:f5:33:1b:53:8b:30:7f:8f:67:28:0d:49:de:
4c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:77:54:3F:39:A2:4D:C1:2B:B3:38:23:AE:23:E8:9E:A1:35:01:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/75e361f8-9d87-341c-9ebd-0d5eb6f671de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.142.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:2d:18:ee:0b:88:cb:ad:86:9d:0f:e2:73:91:c9:76:9b:c6:
51:68:90:d4:ba:47:02:c8:f0:fd:8e:78:7b:ba:52:93:b3:38:
a4:f1:bc:6d:6e:65:63:9f:5e:6b:ea:87:2b:79:0c:2a:d1:d1:
3c:33:d4:a6:e6:44:74:3a:4e:47:82:78:1b:e6:df:eb:f0:6a:
69:6c:90:0a:01:fa:e7:7f:cd:c0:a6:cd:f8:46:07:ad:91:70:
be:cb:41:79:2b:a5:7e:b2:cd:21:03:e3:48:b1:7a:0c:5f:54:
19:e2:a5:78:95:3e:79:82:dd:60:c6:0e:f4:26:f5:31:d4:64:
35:5f:79:31:37:48:51:da:c2:c6:ad:80:b7:c3:f8:f5:26:09:
94:b6:20:18:fd:b1:fa:a8:22:65:6e:87:5e:96:55:d0:04:8d:
8b:91:37:2f:0e:82:c0:c6:b3:e8:09:66:25:77:4f:0a:f7:90:
bc:d7:e0:b1:f0:d8:69:a8:4d:77:d3:78:45:40:47:d8:f4:d0:
82:18:bd:29:42:94:bf:49:9e:03:a5:88:45:15:0b:f4:f0:70:
f2:5d:ab:bb:ff:e4:98:57:84:f0:16:c9:a4:2e:5d:ec:72:ca:
f1:49:01:a3:a7:5b:03:88:c8:50:09:a2:e8:71:8f:97:ff:17:
d6:d7:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:06 2025 by rpki-client on console.sobornost.net