Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa
File: 0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa (raw, json)
Hash identifier: D7RfWft7AA9DGRzdpfKvRGdqkC7qyTfl0qx7qnWP0No=
Subject key identifier: D2:71:6B:78:F4:A1:90:B6:3E:51:C3:97:4B:75:9E:DF:F8:9C:7B:D6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA402BDCA74D6A5A67260
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 216.58.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a4:02:bd:ca:74:d6:a5:a6:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=11c5e17f-a35c-4475-b0d9-b73858742076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:90:87:4e:53:d1:53:ce:f2:72:36:cc:f4:d4:
59:fd:98:e0:f6:60:35:77:84:c3:8b:61:ae:71:02:
a7:b8:71:76:af:6e:ac:4c:58:9d:d4:df:8c:4f:05:
6d:e5:de:d6:c0:5b:e2:19:38:fb:ea:48:f2:1b:8a:
52:9e:f1:8c:48:3a:2f:3d:a3:5f:69:46:e9:db:01:
d7:f8:73:c3:e1:6b:07:c3:f0:8d:b0:a2:69:7f:a6:
97:f8:98:80:c6:eb:3f:5e:7c:02:8d:e1:be:36:6e:
5b:ef:bf:25:68:c2:0c:0f:cc:26:32:e3:c0:36:4a:
2d:06:e6:fc:a0:3d:af:5d:a2:3c:15:9a:d7:24:c7:
a9:30:51:d3:7c:f5:38:ad:58:67:02:eb:03:ae:39:
1f:2e:81:76:14:4c:ea:a7:59:4c:88:87:21:10:4f:
a5:7d:72:61:cd:78:12:96:f7:1e:1d:5b:7f:cf:23:
4d:e3:73:1f:1e:86:dc:41:f0:6d:1c:1d:a9:9f:72:
e9:44:d0:80:db:7b:3e:45:15:18:71:63:c5:ab:16:
c0:c6:d2:bc:24:86:df:b0:b4:3e:15:a5:89:34:41:
8a:c5:5b:f6:4b:87:73:cf:53:62:83:ef:fe:7b:ec:
f4:47:df:f8:95:89:33:85:55:9a:4a:9b:98:10:04:
f1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:71:6B:78:F4:A1:90:B6:3E:51:C3:97:4B:75:9E:DF:F8:9C:7B:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0f4b724b-3c83-377e-a3fa-49c134f93d9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:18:a0:b3:68:9c:99:0a:a6:e5:e2:79:a4:5b:d2:ae:11:66:
97:dc:a0:d7:92:39:34:c8:e6:4e:db:e1:3b:e7:45:e4:cb:97:
55:55:7f:62:41:83:39:99:da:8d:cc:b8:4f:e0:10:15:4b:d7:
5e:a8:1f:16:c7:4a:22:dd:ca:be:6f:ee:bb:73:c3:d0:8c:a9:
34:8c:3f:1f:3e:52:a0:8b:6c:6d:68:05:60:c8:39:ac:57:99:
06:d0:5e:d3:d0:46:3c:c0:b6:fa:99:7d:88:69:b7:30:9b:37:
ea:ab:a3:7e:a4:16:2c:28:61:3a:f9:27:14:2f:6f:42:1e:ac:
5f:bf:62:9c:5c:50:8d:ca:06:c8:41:32:ab:d1:27:7a:79:ed:
71:78:cf:4f:88:38:78:7f:76:e4:d1:74:69:7e:ca:c1:65:64:
2e:91:ae:45:d5:e9:ed:d6:2f:0d:00:f7:0a:c1:27:32:de:f3:
7a:4f:b7:a8:22:7c:75:51:f8:70:fd:ea:01:42:dd:e2:41:47:
56:03:fa:b8:43:cf:80:96:41:51:77:3c:df:7c:5f:d6:25:66:
f1:4f:64:b5:45:2b:a2:2f:e5:35:dd:f2:9a:7d:32:3f:d2:0d:
4c:2e:79:cd:5a:29:d9:60:12:ef:91:07:a4:6a:08:55:d4:ab:
80:c0:c6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:46:17 2025 by rpki-client