Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa
File: 0915a78c-e339-34ed-bcdd-c8c141febb0d.roa (raw, json)
Hash identifier: I1sX9g2n9vhcuo8PE1G3wKHDJ20NxQBYXqOpY5J3yOU=
Subject key identifier: 87:E5:2B:23:D9:D1:84:B7:43:DD:03:32:00:84:F6:3B:09:05:26:1B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A66ACAE08A470E8159DD6
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 172.253.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:66:ac:ae:08:a4:70:e8:15:9d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=d002da42-541e-48ef-b8da-8e66636a5a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:5a:d7:37:a2:9a:46:7e:3d:a6:17:43:7a:06:
04:65:77:37:29:72:52:aa:c7:77:76:13:c1:d5:d7:
08:08:cb:74:c0:42:4b:7e:88:dc:e0:5c:01:4a:cc:
e6:1f:43:7f:0a:8f:2e:35:c0:1b:5a:3f:d0:f9:c6:
e7:99:d4:27:25:b0:a0:46:1c:ba:6d:f3:45:cc:14:
a5:14:a5:56:e2:82:4d:4d:b6:bc:53:f0:65:7e:d5:
ec:ea:51:bd:f5:22:23:96:b8:3f:cf:a0:49:f2:fe:
e5:f4:2c:fa:69:42:43:13:76:c1:0b:5a:c7:5a:32:
1b:d5:33:e0:d6:47:1d:39:84:c2:09:25:31:e0:b0:
52:2f:e9:64:3b:d2:47:22:50:fe:78:42:de:fc:b4:
a3:31:4c:d2:52:71:25:92:6a:20:69:ae:f7:11:6b:
fa:94:ce:e6:cb:5b:e8:f3:90:a3:1d:ed:bc:5a:d1:
9f:c5:9b:a1:6e:0e:1a:d6:c2:19:f4:d7:16:a8:b5:
7e:7a:e6:8c:d6:eb:3c:74:52:36:8e:73:27:75:32:
43:cb:60:9a:a2:e9:20:fe:71:3e:c3:85:9d:d6:1c:
5a:38:ee:cd:3b:c6:2b:70:ad:46:1b:15:4c:88:e4:
61:12:8b:ac:4b:b3:81:62:89:ef:db:a7:df:26:63:
ee:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E5:2B:23:D9:D1:84:B7:43:DD:03:32:00:84:F6:3B:09:05:26:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0915a78c-e339-34ed-bcdd-c8c141febb0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a1:1c:13:cb:90:19:dd:fe:4e:60:41:88:58:c1:c4:fa:a6:e6:
e6:5c:6f:81:9d:29:07:86:83:a1:83:b6:10:b5:78:ed:a9:d1:
0c:9f:8e:2c:78:65:f5:d2:20:ff:c5:fe:c6:f5:31:01:28:9b:
d9:6c:1a:bc:b7:28:d1:32:5b:c8:d1:49:32:29:cc:5e:01:d5:
40:0c:12:d1:39:a7:03:03:c6:37:87:bd:40:3b:c4:f1:79:74:
49:67:f8:ed:a6:b0:03:23:cc:d6:6b:e1:65:4c:2a:21:4b:4f:
d5:56:d2:c3:6c:9c:c0:db:d1:f0:cf:8b:f0:d9:72:47:90:d9:
3d:f5:58:8b:f0:ec:04:0d:a5:78:94:d6:2d:30:35:68:08:5d:
aa:aa:5c:2e:07:2b:f3:97:74:38:45:8b:f3:67:60:e6:95:a3:
76:53:07:ff:b6:9f:f6:4f:10:51:be:60:e0:a0:fc:1b:8a:67:
2a:97:1a:32:14:73:50:8b:24:81:c5:b9:bf:b1:32:5e:f6:d2:
4d:51:69:4a:33:65:06:cb:00:e6:7e:43:ca:3b:15:d9:bb:56:
92:49:f7:4b:b0:88:08:52:46:6b:aa:e4:d4:fe:07:82:15:7b:
60:e7:6a:60:6d:f1:70:0a:11:57:37:25:27:44:11:57:e0:ed:
6e:a6:72:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:46:18 2025 by rpki-client