Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa
File: 3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa (raw, json)
Hash identifier: 40nqKLZZZ7BcXSPkG4xj8MD60vZ6b+tM/XYDF3bZPq0=
Subject key identifier: B1:F2:C3:F3:84:8D:F6:A6:9F:EF:38:B5:1D:48:F2:77:94:9E:7A:F8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A55944D1C255B373ACD70
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 172.217.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:55:94:4d:1c:25:5b:37:3a:cd:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=0fcbff95-22e1-43b6-ba7a-a40d8e3da1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:59:37:ff:f9:90:ec:52:60:20:66:04:d3:e1:
26:16:d0:23:86:a2:eb:39:9d:67:19:3c:82:e0:ff:
ed:56:d9:80:77:b4:36:d9:a8:c3:75:7d:96:f0:04:
2c:b9:67:5f:d5:3e:43:0d:c8:82:9b:d7:ac:ea:27:
32:f1:5a:99:22:3a:8c:b3:66:19:51:6c:6a:a1:c7:
53:cd:2c:0a:5f:49:3d:ce:b6:2e:e7:a8:9e:78:fe:
77:bb:2c:f3:b5:d4:55:6f:fd:c2:83:29:ac:93:77:
b0:6b:c5:42:f2:83:21:73:5a:8e:35:82:82:5b:ad:
7d:b3:b8:45:9b:3e:60:a1:81:72:2d:49:ca:d6:82:
9d:be:f5:5e:73:55:f3:6f:d8:f1:89:e0:d9:b3:da:
4b:3c:60:8a:cf:f9:7e:d7:48:24:7d:fa:7e:83:dd:
95:15:35:be:7a:ad:f8:0a:dc:71:28:c6:01:c4:03:
5a:7d:64:e2:c7:d7:fa:8e:b9:4a:87:26:98:28:76:
ec:c0:d5:e3:68:6e:8d:8d:49:0f:63:67:81:00:08:
7f:7b:17:ea:0c:fc:92:15:1b:61:45:89:9d:26:27:
d6:63:6d:59:0a:e4:3b:5d:83:65:5a:95:c2:da:1b:
eb:87:0c:b3:a3:5f:98:e2:f6:d2:a8:42:92:e6:f5:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:F2:C3:F3:84:8D:F6:A6:9F:EF:38:B5:1D:48:F2:77:94:9E:7A:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3dda9fa8-b69b-3cb4-9bf1-52adf98f1418.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.209.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:0d:fc:e4:95:e3:9f:3d:1c:f3:6f:bb:e0:8a:54:13:cc:fc:
86:1e:99:e9:e9:a2:19:fa:83:17:d4:96:db:ff:93:23:05:db:
19:0f:77:90:29:1f:f0:0e:54:0a:03:38:6c:ff:ca:59:3d:f6:
2a:f2:02:00:02:32:7f:1c:33:f7:af:d6:89:c3:4e:35:e6:33:
c2:2b:40:44:7e:a4:ba:ce:9b:dd:24:c8:4d:3e:ec:74:14:c9:
2e:8a:51:93:d5:55:de:c6:a3:94:38:62:c0:5e:ca:13:b6:28:
01:54:fc:af:bc:0c:cf:82:41:bb:cd:3d:e2:1a:08:58:c1:b2:
c4:fc:0a:6a:22:79:bd:90:55:79:f7:58:e7:4f:3a:fb:48:f1:
dc:84:1e:9a:4b:60:fd:6d:3a:76:ff:fa:ee:42:42:02:62:95:
80:c7:82:94:90:1a:66:7f:a4:c5:db:c2:47:c3:ee:52:90:11:
c2:1f:7c:b8:16:7b:fa:59:43:54:b8:54:92:0e:36:9d:38:eb:
d5:58:59:ff:58:e0:2a:6a:16:d3:1a:13:87:09:fe:b6:ba:ab:
fc:8d:a0:fc:58:65:88:8a:1e:24:f5:88:ca:4d:49:77:af:d8:
c7:ca:5a:18:30:0e:af:4a:4f:17:88:40:f8:79:2d:0d:3b:32:
2e:bb:04:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:56:53 2025 by rpki-client