Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa
File: 17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa (raw, json)
Hash identifier: SixER4awUJdByjfXVRGEZPNqD/ULietUTuVs9xsGiCw=
Subject key identifier: 6C:5E:E0:A0:25:59:8F:34:A2:F7:5F:8D:27:51:31:EE:6F:42:6D:64
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847F64A8CFC4D836A1766865740
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa
Signing time: Fri 22 Nov 2024 08:39:01 +0000
ROA not before: Fri 22 Nov 2024 08:39:01 +0000
ROA not after: Thu 20 Feb 2025 08:39:01 +0000
asID: 15169
IP address blocks: 172.217.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:f6:4a:8c:fc:4d:83:6a:17:66:86:57:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 22 08:39:01 2024 GMT
Not After : Feb 20 08:39:01 2025 GMT
Subject: CN=4369007d-0b2a-4d91-ad45-456f3027d139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a8:da:2f:8b:a9:f5:ab:dc:38:b5:2f:74:e6:
ad:6f:b8:1c:ba:b5:c6:88:07:1e:ac:ab:89:b0:88:
51:8e:dd:7c:ed:a3:ee:c1:5d:56:4d:bc:c7:6a:6a:
35:27:85:81:0a:3e:73:1c:34:82:b4:90:df:5f:23:
c4:51:ad:fb:b9:51:5b:a9:eb:76:ad:26:f8:cb:7b:
e1:54:35:20:a3:df:cb:4c:06:ab:42:84:47:62:50:
8b:64:f3:c3:bd:9d:70:87:69:a1:95:54:11:2d:58:
01:3b:4d:6c:ae:ac:47:b1:14:cd:bf:d9:cb:ed:09:
6f:02:67:e1:1e:81:89:23:82:da:da:26:ee:72:3b:
c5:f0:ab:e2:c6:db:30:0d:d9:d5:b8:c5:6f:48:0b:
98:72:46:c4:89:65:17:cf:14:35:29:4e:15:90:7b:
f1:91:03:2a:d6:dd:b0:85:74:3b:e2:b0:df:49:05:
b7:aa:a3:19:95:e6:78:fc:c6:22:75:77:ec:40:d1:
35:e6:91:a7:ea:01:2c:16:d5:72:f7:38:f7:fa:06:
0d:67:08:c8:c2:b2:4e:4a:11:e6:dc:ba:ba:a9:12:
02:c4:c3:d4:eb:e2:fb:e0:75:c2:82:79:cf:7d:42:
d7:0b:e0:a5:40:80:8d:43:ed:11:3e:0a:fe:7d:04:
17:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5E:E0:A0:25:59:8F:34:A2:F7:5F:8D:27:51:31:EE:6F:42:6D:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cd0711-3bd4-3e07-8e6a-a5f04eb50eeb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:5b:5e:4e:37:62:b2:31:c1:21:85:56:26:1f:0b:a3:87:66:
16:69:2c:4b:02:b2:85:27:84:59:ad:74:88:18:ec:b1:55:36:
1a:56:5e:4e:72:3b:b4:e8:f4:c0:4a:85:66:e7:4e:13:39:d4:
14:ee:49:34:03:32:30:ee:fd:a3:68:a3:0f:b4:68:7f:4e:fe:
3f:3f:34:25:3a:24:71:20:6a:a3:03:dc:43:3a:81:d7:e6:e5:
b1:3f:c9:77:3f:b3:a9:b1:af:54:72:a6:81:0f:1b:4b:bf:ab:
3e:48:f3:3e:09:28:20:bd:c6:04:ee:2d:98:3f:36:65:2d:d1:
93:83:49:a0:7f:11:bc:c6:e3:4e:37:dd:10:87:ec:d4:4e:b1:
3a:04:92:95:9b:ca:cf:e7:aa:a2:fc:6f:01:af:1b:d2:ec:5a:
b6:ba:fc:3d:5d:ae:74:30:8a:f0:47:77:d2:9e:79:58:8c:50:
35:1d:09:07:87:25:13:8c:5e:ca:da:b6:09:f7:d6:b5:9e:f5:
f0:2a:ca:46:53:a7:9c:8b:c8:5c:fc:48:a6:a6:4b:1a:e5:dd:
da:3b:08:9d:ef:88:c4:65:d2:84:f3:73:3d:de:b3:62:25:3f:
c2:77:83:a4:51:cd:3e:e8:77:84:be:7b:56:d7:c0:68:db:70:
0e:a1:0d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:04:05 2025 by rpki-client