Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa
File: b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa (raw, json)
Hash identifier: XrOu/P03VEdCYOmeK8VU1VlFQiyO41isTeyAiRU28Sw=
Subject key identifier: E3:72:13:AF:FB:23:17:33:B3:77:67:C3:DF:38:9C:8F:2C:09:E5:D5
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858497279C4AA05804D9BA18C5F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa
Signing time: Mon 07 Apr 2025 13:00:59 +0000
ROA not before: Mon 07 Apr 2025 13:00:59 +0000
ROA not after: Sun 06 Jul 2025 13:00:59 +0000
asID: 15169
IP address blocks: 192.178.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:49:72:79:c4:aa:05:80:4d:9b:a1:8c:5f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Apr 7 13:00:59 2025 GMT
Not After : Jul 6 13:00:59 2025 GMT
Subject: CN=43d188b3-fc14-49d1-bc4f-76a9c0df5058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:36:85:89:07:02:eb:96:bf:bb:5f:7e:cb:9c:
a5:74:33:6f:e4:ce:dc:fd:f5:94:4d:68:ab:a7:63:
6c:14:ec:b1:e4:a7:fa:ba:3a:31:70:b5:c6:1f:62:
35:75:d2:0f:e2:ab:f7:5a:00:c0:c2:14:bb:0d:ab:
ef:65:a4:d8:73:06:58:f3:be:40:92:fa:c6:fe:5c:
3f:ca:b4:05:85:03:db:04:e4:64:a7:16:75:6b:ba:
29:37:1c:3f:e6:fd:f8:a0:55:31:e2:21:89:f3:2e:
71:ff:63:e3:03:a9:5b:f3:f9:e7:86:8a:00:46:ee:
35:17:da:11:97:16:86:79:97:72:dc:06:53:61:8e:
ef:7d:38:48:5a:3e:22:1f:5a:ee:e8:f8:0f:4f:57:
d5:bf:81:5d:1c:0e:e7:27:17:dd:b0:ca:49:8e:c5:
e9:f8:58:4a:78:97:6c:16:c0:e6:84:6e:25:f8:55:
48:23:95:e7:57:0b:db:07:28:b3:01:d4:d9:f6:e9:
01:09:61:61:c7:ba:ae:36:e0:d2:70:67:a8:c4:f1:
ed:60:45:9b:55:ad:15:72:cb:38:10:8a:f6:2b:aa:
da:5b:1b:1e:f5:19:e8:34:b0:95:9a:fa:ca:24:25:
c3:f7:46:8b:86:1d:c9:83:92:7a:5d:33:af:71:69:
96:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:72:13:AF:FB:23:17:33:B3:77:67:C3:DF:38:9C:8F:2C:09:E5:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b2aaffdd-9e59-3b29-b45a-19a78fa36ea9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
192.178.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:27:77:21:b6:b9:7f:3c:b9:41:e5:54:39:d0:9c:7e:5a:a2:
6a:5b:ba:d3:24:a6:a0:8d:c3:4f:fe:1d:a5:7e:35:a3:4b:fa:
28:c9:1b:d7:30:39:58:90:c5:4f:4c:bc:52:35:b6:19:f3:65:
71:c7:25:40:cc:ae:f7:6d:55:ff:ef:80:7f:ab:66:79:2b:69:
77:30:08:c6:aa:82:43:e9:b9:1b:b3:9e:36:67:c3:f7:95:a2:
6b:1d:34:8c:3c:af:ca:cb:df:25:47:d1:bc:9d:94:62:4a:6a:
82:e6:77:9b:61:5a:2d:4e:ee:b0:ca:f6:7a:92:86:f9:af:7f:
a6:db:4f:cd:0a:c0:a1:ba:ec:28:a6:12:64:0c:4b:64:2e:df:
d0:21:64:6f:08:11:95:fc:ce:02:b2:21:49:01:5e:18:8f:3e:
ba:0b:71:d0:57:67:a0:1b:c9:7f:e2:bc:33:9e:5a:c5:22:b7:
ce:f7:e1:49:2e:c5:fc:0d:5b:ac:04:00:e6:8d:23:da:7d:ca:
eb:35:1d:28:d4:22:28:05:31:b3:19:55:bc:2e:f9:cd:91:ea:
7d:08:b7:41:7b:dd:9b:50:fe:36:df:2d:53:ac:c0:4f:59:b3:
ce:91:80:41:48:a4:f7:45:ea:67:79:0e:d5:4c:31:a7:6c:e0:
30:70:cf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:13 2025 by rpki-client on console.sobornost.net