Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa
File: a7b7be0e-4b13-347a-87f9-6e790f01689d.roa (raw, json)
Hash identifier: OslzAJVQbvm3AXGXjxQxl7UGuJofiZB0lZXvDISSVzI=
Subject key identifier: DA:6C:51:07:60:FD:A7:CA:F1:4B:63:C9:8B:B4:17:8C:92:8B:09:BA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285849631ECFDC775DF8CBC8EA6D40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa
Signing time: Wed 02 Apr 2025 01:00:46 +0000
ROA not before: Wed 02 Apr 2025 01:00:46 +0000
ROA not after: Tue 01 Jul 2025 01:00:46 +0000
asID: 15169
IP address blocks: 192.178.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:63:1e:cf:dc:77:5d:f8:cb:c8:ea:6d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 2 01:00:46 2025 GMT
Not After : Jul 1 01:00:46 2025 GMT
Subject: CN=52002112-b624-4df9-ac71-5d6228c4c704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:9e:ca:84:44:b5:7c:a6:e2:7a:07:46:5f:d2:
2f:2c:ce:4e:5b:bf:9b:47:7f:b2:be:7f:97:4d:7a:
e6:58:63:8b:3d:cf:4a:ed:b9:aa:e8:3f:98:39:a4:
f7:4f:c6:c6:c9:fa:74:15:27:1c:90:f3:b2:d3:4e:
e0:4b:2d:03:d8:73:8b:b4:2f:a7:14:e5:07:99:9e:
cf:d6:01:6a:d8:17:d3:33:59:76:5f:9b:83:51:99:
d2:af:ce:1e:c8:9d:b2:c9:b5:4d:db:ba:c8:6e:0e:
83:4e:a9:1e:c9:98:d8:79:e1:04:21:49:28:99:22:
b7:45:9b:c2:a8:a4:93:0d:56:91:ce:49:35:5b:76:
b9:6b:24:0c:80:ea:1a:43:41:0a:3a:79:6f:04:a1:
0c:64:bc:57:1c:54:73:87:f2:2d:af:90:d2:b5:8e:
39:0c:55:21:82:e4:3d:60:92:3e:0c:78:c5:54:57:
9d:69:e2:1f:68:79:b4:8d:c1:7d:97:e4:6d:21:bf:
47:6d:dc:fa:e8:81:f1:cb:ab:a6:9c:ab:f5:77:e3:
8e:7f:98:9d:06:41:fd:98:e3:2d:61:4c:11:25:9d:
f1:c4:7c:f8:ea:c1:1d:d1:0d:f7:e8:0f:90:e6:6c:
55:8b:71:5c:72:5f:d1:65:ac:c8:d6:79:3e:8c:8a:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6C:51:07:60:FD:A7:CA:F1:4B:63:C9:8B:B4:17:8C:92:8B:09:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7b7be0e-4b13-347a-87f9-6e790f01689d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.141.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:69:36:df:6f:5c:56:53:ff:b4:39:5a:51:19:a5:e3:61:69:
b3:ff:0e:ec:19:84:b2:4c:31:87:66:1a:7e:d2:d6:0a:71:39:
bb:89:0f:df:4b:50:1a:9a:10:03:23:8e:82:41:f9:30:e7:bb:
6a:75:68:4c:fe:06:fd:63:f2:2e:41:0b:0d:9b:02:ff:65:26:
bd:27:a5:ea:f5:08:b6:cc:fb:5c:4b:fb:f4:c2:6e:e5:88:fb:
ad:6a:b9:56:cd:24:e2:8c:46:f9:d5:c8:b6:22:29:c6:df:38:
52:ee:86:5b:75:e4:43:98:d3:c8:47:a6:8d:d1:26:bb:2f:85:
cb:4a:5b:f7:a5:7c:12:72:91:6e:5d:4b:c6:14:cf:56:87:ad:
6b:83:4a:58:1b:74:9f:48:43:9c:9e:d4:44:be:56:2e:60:5d:
06:03:89:db:56:f7:4d:61:cb:8f:17:e9:67:f6:25:48:40:e2:
28:80:d9:bb:b1:80:6f:d9:48:97:1f:1d:47:a0:6a:73:2b:58:
0f:31:c6:64:0a:aa:57:4d:ad:0f:a0:52:1e:24:66:6c:e3:02:
cd:f7:a2:58:99:f7:4c:be:96:a5:81:ee:8f:8d:05:e0:e4:d9:
3c:c8:d5:55:12:11:d6:08:7f:48:9b:73:82:ee:5b:55:ac:9a:
ce:6b:c4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:08 2025 by rpki-client on console.sobornost.net