Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa
File: 41c74682-e260-397d-8267-3a4dc0e8f079.roa (raw, json)
Hash identifier: 9bjnuc1JFFUS0BTxr2ziKf5+4Lz+xgFZo9BIzMIWIjM=
Subject key identifier: 69:ED:1A:64:8D:B3:80:D6:E9:E3:26:A1:AB:4B:A3:D6:FF:CB:0E:A3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AAD7D3A53228C60DCEA80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 172.253.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:ad:7d:3a:53:22:8c:60:dc:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=63ad5bfa-f437-452b-b955-858fc0c6f62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:be:51:e6:cd:38:a1:ef:af:33:0d:d0:0b:
d9:e2:18:94:5d:ae:9c:ad:5c:da:d4:12:a2:b8:ba:
fd:ed:a2:f8:f3:39:d0:f1:10:5f:5a:7b:14:ac:18:
e4:28:6b:59:02:c2:a4:98:de:ec:31:43:09:c2:4d:
f5:05:d1:fa:94:6e:55:d7:f1:b6:04:3d:54:cd:03:
f2:8e:c3:6a:4c:22:67:9a:d6:e9:15:75:15:65:ec:
e1:15:41:9c:6a:33:48:7a:d1:f1:eb:3a:54:c3:71:
20:8f:c1:8b:39:31:d4:40:65:29:4f:f0:db:44:84:
10:e5:ee:50:78:aa:96:a7:3b:23:75:90:e7:14:8e:
83:8c:ba:35:a1:1f:99:49:64:90:e5:3e:62:84:7a:
c8:84:70:36:38:ce:a2:a5:a6:2b:9a:a5:31:ba:9f:
af:e6:1b:2e:43:a3:7b:8a:2a:3c:4d:0b:36:79:82:
99:a2:7e:94:e4:0c:16:d3:25:05:98:00:6e:aa:c9:
39:c0:b9:40:f1:ef:6b:cc:5e:e8:d4:aa:65:f2:b6:
b2:b7:12:48:01:34:00:11:35:76:58:d7:ab:2d:af:
ed:7d:16:e4:77:7a:61:bd:98:02:4c:fd:17:a8:57:
46:15:e2:3e:19:1c:7f:cf:b0:fa:70:73:c8:e0:e8:
62:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:ED:1A:64:8D:B3:80:D6:E9:E3:26:A1:AB:4B:A3:D6:FF:CB:0E:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/41c74682-e260-397d-8267-3a4dc0e8f079.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:f4:41:d1:13:ba:c8:23:58:14:06:f7:ba:57:f0:0e:a6:7c:
3f:c5:4c:64:db:db:28:55:10:26:77:ed:b9:a6:9e:18:a9:80:
d2:0c:2b:12:72:e6:3f:29:57:30:9b:ae:32:c5:03:d3:e4:e7:
92:03:7d:0a:fc:ae:24:f4:99:d8:f0:4c:cf:41:f1:b0:1e:54:
cc:fe:34:a8:0b:9c:e0:a2:bb:c1:57:a8:18:bb:ba:0d:79:19:
10:66:e5:a9:9d:07:7f:31:41:c1:9c:a7:ba:26:99:08:e6:fe:
f9:9a:d7:c7:bb:c6:20:04:b8:23:71:c5:ac:19:ff:bc:5e:c4:
5e:62:25:3c:47:4b:9a:8b:33:bd:5f:d9:46:78:fa:5d:32:c8:
59:4f:f6:58:8d:b8:a7:ae:27:a3:fb:41:4e:f5:a5:5e:c4:37:
3b:7e:ce:e3:3e:61:cd:65:40:3d:6b:61:d2:cb:5f:bb:87:4d:
17:41:a0:2f:c8:08:d6:aa:cd:82:04:7e:a8:a8:c4:35:5c:78:
c0:98:f2:f6:6b:91:76:48:91:46:22:31:9b:59:f0:ad:f0:68:
e9:f2:a1:06:fa:42:9b:09:91:10:b3:02:9d:20:b1:fc:94:fa:
24:a4:92:d7:d4:d9:d7:cb:83:5a:cf:5f:69:4c:08:00:44:a2:
75:32:d3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:56:05 2025 by rpki-client