Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa
File: 2363796e-1a6a-3118-a421-6fa84d42857f.roa (raw, json)
Hash identifier: +JHfL6FpSQzLZ2yp5Y05Wi5Sgsh6OWc0j80rfrtIO7g=
Subject key identifier: 90:B4:2E:60:BD:21:2B:40:4F:30:34:F1:D1:D9:BA:86:6A:04:99:5B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A78E9CF8DD7C0C64089E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 172.217.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:78:e9:cf:8d:d7:c0:c6:40:89:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=0f85c8ee-4a8d-4e0b-b17f-8197ab8151fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:f5:a5:9a:8b:7e:ba:01:a5:d2:35:3a:6b:e1:
5f:ff:c0:0f:c5:c1:73:b1:b3:7b:83:02:44:e3:8a:
6d:67:85:da:10:2f:05:eb:78:60:49:97:65:7f:91:
a4:23:a3:b4:a1:d7:2b:2e:3f:3e:2a:a6:c2:67:df:
48:0d:66:c8:15:12:9b:21:f5:11:ce:54:93:92:6f:
2a:95:e8:bb:31:93:48:19:f5:6f:6c:17:01:f0:ea:
12:f9:44:a2:d4:b7:02:d8:e2:6c:ce:f8:70:0f:0d:
04:6c:cb:6e:74:f0:dc:c0:84:56:6c:64:bc:d3:59:
1f:03:59:f5:3b:16:34:01:ed:f1:b0:ae:f8:1b:af:
fb:08:27:37:d6:32:42:4f:01:ae:1d:b1:f7:8b:6a:
46:c8:de:a9:20:a7:da:ab:79:5d:8e:00:7e:9e:8e:
e1:84:58:49:19:c5:76:74:b0:bb:ec:c7:55:7e:63:
bf:da:06:d4:54:ab:0b:ea:b5:73:75:2e:c8:39:3a:
fe:e3:4c:fb:63:f8:a2:f8:e7:97:84:b2:8c:79:bc:
8b:cf:42:99:2e:c3:55:23:8b:99:6c:fa:14:9f:27:
23:74:ae:49:57:cd:e5:5e:44:73:df:29:b0:4b:cb:
2b:a8:69:4a:43:85:d3:a5:45:a0:84:0a:24:36:ac:
c6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B4:2E:60:BD:21:2B:40:4F:30:34:F1:D1:D9:BA:86:6A:04:99:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2363796e-1a6a-3118-a421-6fa84d42857f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
07:67:34:7a:6f:3b:fe:00:a1:be:89:25:23:5a:e0:72:48:ac:
cd:13:7d:3f:d5:7a:c7:ba:fa:9d:d7:f0:f3:db:85:44:9d:4e:
a4:a8:d1:92:3d:42:ef:48:ef:45:a4:e3:bf:0a:30:41:f1:6a:
4d:21:9f:5e:61:1b:9f:5b:4a:ff:cb:14:34:9f:2d:d4:f3:86:
51:40:d3:3d:58:86:f5:21:89:56:04:b3:64:09:df:5b:4d:2a:
7c:81:de:b2:0e:5a:2e:c3:38:83:0f:86:2e:36:38:72:d9:f7:
a5:8d:c1:8f:a6:66:03:cf:6f:66:71:ed:f6:0e:e4:5d:9e:84:
a7:10:5f:e8:e9:82:6d:dd:6d:f7:cb:47:9a:0d:16:99:fd:e5:
93:84:24:2e:84:3f:f3:13:3c:12:bd:70:1c:0f:0e:ad:7e:9b:
c0:66:58:a4:c3:87:1e:ef:02:ae:d7:14:80:85:91:da:a6:2f:
b5:99:4d:5a:10:2a:fc:de:3d:9d:6e:59:d8:b3:6a:ee:12:93:
e1:63:86:fa:c4:31:c4:b3:f1:53:86:4e:6e:62:9b:dd:99:9c:
1f:a6:c8:ec:01:3d:31:f8:4a:f3:67:9a:06:8e:9b:49:46:f4:
2f:f4:be:3e:63:05:ae:c4:5a:60:66:db:00:56:c4:4d:7c:b8:
98:2a:4a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:52:37 2025 by rpki-client