Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa
File: 353aa361-816d-338e-89e8-88e5fd85eccc.roa (raw, json)
Hash identifier: yT0QWgKAGoNy+8HCNrYyTDOYyNfklHilM6tgmEzeAt8=
Subject key identifier: 68:22:B9:BC:22:2B:E8:64:FE:C6:B8:0C:88:17:13:18:C8:7B:66:94
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B40B63C0EAC1EC21C7E40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 172.217.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:40:b6:3c:0e:ac:1e:c2:1c:7e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=2198d565-2199-401f-b102-75a52904f3b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b9:95:b7:8d:b0:4f:5f:8a:60:5d:57:d5:0b:
bc:4b:66:da:dc:70:b0:38:67:b4:b0:8d:5e:c0:a2:
92:d8:fe:d1:60:e5:30:85:39:18:90:66:fa:53:bc:
b9:2a:e4:89:56:63:dd:bb:41:c6:9f:c0:b3:0f:2b:
a4:0a:f1:12:62:71:3d:b2:59:0a:39:ac:54:6f:81:
fd:60:1f:83:8f:6b:3b:0d:c0:b0:e6:6c:44:d2:cd:
84:a2:f5:16:bd:a1:c0:2e:65:71:a5:1f:08:75:7d:
ae:69:6e:3c:34:dc:52:7a:6d:3a:c8:ee:c6:82:88:
2d:35:d8:68:4c:8b:4f:e9:60:ad:39:e9:bb:51:1a:
16:7d:38:1f:66:bf:f5:d7:37:99:68:15:6f:f3:82:
60:7e:7a:b0:8e:ec:61:83:bd:b2:2f:a3:a6:5e:4b:
21:66:70:72:ab:1a:d2:b9:11:0b:dc:a2:b6:9d:35:
11:ae:4f:23:1e:49:8b:46:ee:f2:eb:58:6c:ef:e3:
55:23:9e:02:15:1b:51:58:ad:04:5a:c3:66:cc:e1:
0e:4d:66:d9:70:6b:31:0b:89:b9:5c:2a:c5:ca:d3:
30:e6:46:3a:53:7b:55:41:25:02:94:e5:8b:24:a0:
1b:85:cb:b9:86:ae:30:0f:81:86:d4:96:42:de:16:
7c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:22:B9:BC:22:2B:E8:64:FE:C6:B8:0C:88:17:13:18:C8:7B:66:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/353aa361-816d-338e-89e8-88e5fd85eccc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.15.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:3a:d2:10:52:92:eb:57:84:57:66:2d:db:fa:aa:64:94:9a:
63:14:fc:2d:2c:9c:d9:03:f3:95:a4:45:b3:2a:65:a7:52:37:
9e:a7:e4:eb:f2:c1:2c:65:27:c3:6e:8a:b0:c0:28:ee:e9:3f:
88:c9:58:ec:2f:c6:77:c3:d6:c6:66:80:4c:43:45:58:9d:ea:
7f:b0:44:ad:7e:39:f1:35:66:2f:b8:49:c3:1c:af:a0:db:d8:
c4:a4:a1:99:f0:7c:bb:bb:29:5e:d8:30:4f:bf:96:33:48:c7:
6c:6c:53:17:cd:ee:41:13:b4:a1:d0:b2:0a:19:c5:81:52:a3:
4c:cc:c9:c3:0a:f8:e4:13:c7:23:f7:23:0d:ea:cd:a1:cf:ec:
00:2c:31:d8:ee:5c:2a:62:df:57:c6:7a:e1:90:bb:f6:87:31:
3f:a1:7f:d3:4a:a9:f9:64:43:1a:56:04:b3:6d:1c:e4:a6:95:
cc:49:fc:7f:58:78:ba:36:0d:41:91:af:a7:59:b5:d4:fe:51:
93:f8:6a:fe:ab:5c:6f:9a:8f:61:90:23:16:62:69:dc:2d:b1:
cf:ab:bf:ab:78:60:e1:9d:5d:db:2a:96:09:3b:2c:55:cf:f5:
98:cd:51:bf:ea:87:2a:18:cd:29:21:74:d0:e0:58:bc:b4:91:
af:64:6d:f0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmK0C2PA6sHsIcfkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
MjE5OGQ1NjUtMjE5OS00MDFmLWIxMDItNzVhNTI5MDRmM2I5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbmVt42wT1+KYF1X1Qu8S2ba3HCwOGe0sI1e
wKKS2P7RYOUwhTkYkGb6U7y5KuSJVmPdu0HGn8CzDyukCvESYnE9slkKOaxUb4H9
YB+Dj2s7DcCw5mxE0s2EovUWvaHALmVxpR8IdX2uaW48NNxSem06yO7GgogtNdho
TItP6WCtOem7URoWfTgfZr/11zeZaBVv84Jgfnqwjuxhg72yL6OmXkshZnByqxrS
uREL3KK2nTURrk8jHkmLRu7y61hs7+NVI54CFRtRWK0EWsNmzOEOTWbZcGsxC4m5
XCrFytMw5kY6U3tVQSUClOWLJKAbhcu5hq4wD4GG1JZC3hZ8TQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGgiubwiK+hk/sa4DIgXExjIe2aUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMzUzYWEzNjEtODE2ZC0z
MzhlLTg5ZTgtODhlNWZkODVlY2NjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNkPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJs60hBSkutXhFdmLdv6qmSUmmMU/C0snNkD85WkRbMqZadSN56n5Ovy
wSxlJ8NuirDAKO7pP4jJWOwvxnfD1sZmgExDRVid6n+wRK1+OfE1Zi+4ScMcr6Db
2MSkoZnwfLu7KV7YME+/ljNIx2xsUxfN7kETtKHQsgoZxYFSo0zMycMK+OQTxyP3
Iw3qzaHP7AAsMdjuXCpi31fGeuGQu/aHMT+hf9NKqflkQxpWBLNtHOSmlcxJ/H9Y
eLo2DUGRr6dZtdT+UZP4av6rXG+aj2GQIxZiadwtsc+rv6t4YOGdXdsqlgk7LFXP
9ZjNUb/qhyoYzSkhdNDgWLy0ka9kbfA=
-----END CERTIFICATE-----
Generated at Fri May 9 19:25:27 2025 by rpki-client