Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/45fe4e41-41a8-3927-863b-96a36b95fda1.roa
File: 45fe4e41-41a8-3927-863b-96a36b95fda1.roa (raw, json)
Hash identifier: 2yJYIwsN6EQjl3T/zxGptaBbLMv1nVIH6aaNzJyLQTk=
Subject key identifier: 64:9C:61:96:A9:59:F6:A7:8C:67:C5:78:18:FF:D2:26:49:CC:71:46
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B360CC941205F65379400
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/45fe4e41-41a8-3927-863b-96a36b95fda1.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:36:0c:c9:41:20:5f:65:37:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=58763d6a-9f88-4926-b37c-61b381824a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:73:2f:ba:04:98:c5:9b:1d:ba:05:cf:41:13:
4b:41:79:3f:5e:53:d2:65:19:0c:26:2d:c2:25:58:
98:d5:bb:3b:fe:1d:e4:a9:85:78:64:19:63:87:30:
62:79:30:b3:1c:2f:1e:f4:48:58:f5:0a:52:67:f4:
14:db:48:87:96:53:40:0e:2f:30:12:07:ac:eb:86:
bb:5e:57:fc:17:a8:e1:c1:fe:fe:f2:f9:24:1f:5f:
9d:50:25:de:78:8b:2d:e8:51:65:25:9c:f1:3b:ca:
20:41:92:b8:7b:85:e2:b9:ed:2d:17:d6:ca:52:cf:
7a:87:f6:c9:db:9c:58:ff:8c:00:25:e5:bb:20:94:
a1:96:34:f0:ac:22:6b:b7:7d:d5:6a:59:fb:2f:33:
78:84:a2:d0:70:0d:db:16:7d:8e:c8:ce:6d:56:99:
f1:d3:fd:70:38:fd:56:33:aa:ef:93:ad:21:3b:33:
e9:52:5f:e2:1e:56:85:9e:27:b8:cb:0a:7b:20:95:
d1:72:9b:9e:94:7f:ff:bc:be:11:8e:a3:8f:3c:12:
15:69:2c:04:f5:3b:61:9e:24:44:8a:98:f7:e4:58:
61:97:9e:c4:af:58:d2:db:01:b9:e8:d6:49:3e:8d:
2d:6b:e5:78:ce:3a:0a:2f:84:96:26:98:6b:e5:23:
76:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:9C:61:96:A9:59:F6:A7:8C:67:C5:78:18:FF:D2:26:49:CC:71:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/45fe4e41-41a8-3927-863b-96a36b95fda1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.118.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:4e:80:2d:eb:75:1e:47:3f:e2:64:0b:0d:66:be:99:ed:8a:
0c:96:26:bb:84:2f:47:e3:de:c3:cb:e4:8b:3f:f3:bb:18:c3:
45:9f:d5:7d:7e:08:7e:f3:7a:66:34:88:c6:e4:e8:28:3a:42:
a1:d7:49:a5:be:0d:92:bc:12:15:27:59:14:e6:60:3f:ba:e1:
0e:c9:31:30:bf:76:6b:ae:81:a9:28:70:d8:cb:e2:4f:74:54:
60:ed:a3:08:ee:be:64:fb:13:c3:ea:31:ac:c2:3e:09:98:b4:
43:1c:60:53:2a:28:10:6a:10:6a:09:51:f7:87:fd:01:34:72:
90:d8:bc:35:87:f9:56:e7:6e:e0:8c:68:ef:91:ce:c5:19:21:
20:d0:e0:c0:e6:9f:65:37:b3:f4:a0:10:c1:f0:a7:e5:da:46:
7c:b0:b5:b7:28:8b:ed:a6:9d:09:74:99:51:42:b8:10:77:1d:
32:0d:9d:74:39:d6:21:9d:61:b1:a0:e0:bd:18:cb:fa:ed:c2:
62:4e:84:e1:0a:7c:bb:e2:22:17:3a:82:42:fb:ee:e8:ad:11:
aa:77:fe:d9:28:4e:e4:4b:4d:89:d6:91:7e:72:0f:1a:dc:3e:
06:e7:ef:b6:49:8c:8e:b2:1a:9e:93:9c:b9:cb:d1:cf:70:91:
b0:9e:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:48:52 2025 by rpki-client