Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa
File: 4788700d-5f68-32af-b8a9-fbb0558d4b24.roa (raw, json)
Hash identifier: cxbhVtt/GnQPcn8yO4sFBTm+N++yk5uUsy5fM7iQ28Q=
Subject key identifier: A6:96:33:69:68:79:11:C7:ED:E1:6C:52:C6:7D:BD:57:4F:FE:0E:47
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B3C4A54FEBEC05F8A09C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:3c:4a:54:fe:be:c0:5f:8a:09:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=060dbd93-9b7a-4eef-bc78-a7c9052b24f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:a6:ea:03:44:3e:32:62:67:24:43:e3:ca:
63:14:ac:a2:ad:71:93:83:b7:ad:3e:5f:8d:fd:b5:
a9:20:e1:8d:6a:78:5c:99:2e:61:86:ff:84:3d:d0:
0f:1e:2f:5a:78:02:44:7e:ff:c5:c0:06:7c:29:60:
8b:b1:b9:f1:b7:7a:3f:0d:74:2b:ec:46:54:2b:da:
78:54:e8:17:ec:fb:16:33:98:d7:30:a9:b1:c0:02:
de:c0:ae:9e:17:67:79:a0:35:28:b6:55:ee:9e:92:
be:e0:e4:d6:65:c7:72:15:31:97:6a:62:12:dd:17:
f8:95:ae:58:f6:a6:6f:84:64:0c:4c:5b:72:56:59:
39:9f:a7:7d:b5:7d:1e:c1:ca:0a:29:c9:83:7c:00:
14:86:36:2f:6f:fd:4c:11:ff:90:8a:c2:8a:8d:95:
4d:a8:02:2c:1f:9b:10:d9:75:05:84:48:88:94:85:
29:ac:5e:0c:d2:18:66:71:74:21:1f:27:21:a5:20:
b7:4b:a3:eb:35:7a:77:16:2e:9e:ca:fc:27:b0:b0:
71:ec:9d:88:4f:cf:20:b2:b8:ac:67:f2:af:45:a6:
a8:d2:29:c2:e1:57:ec:33:df:d7:8a:80:e8:54:3c:
09:b1:77:3b:cd:72:f9:96:aa:a8:11:c7:04:02:35:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:96:33:69:68:79:11:C7:ED:E1:6C:52:C6:7D:BD:57:4F:FE:0E:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/4788700d-5f68-32af-b8a9-fbb0558d4b24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:d3:d0:df:2b:8e:ef:21:70:58:43:4b:f2:b6:d8:31:3b:bd:
cb:ac:f8:42:cd:22:53:4c:4a:1c:6f:f1:c5:20:1a:10:97:c9:
f4:45:0c:b7:e4:d5:f3:77:2a:f0:ed:23:53:81:f7:83:39:b6:
14:7f:68:02:09:b2:ce:bb:fd:30:70:4d:0c:a0:54:7e:da:b1:
d9:0d:ed:22:84:3c:e7:e9:41:05:8e:0e:a3:2f:0a:24:da:ca:
01:4a:43:18:28:12:c2:e2:30:33:a8:f6:d8:90:62:61:b4:43:
aa:a6:9f:dc:5f:c1:1a:4c:51:8b:64:cd:3e:92:ba:a7:1a:d5:
bf:df:da:0a:bf:f2:e5:53:f6:85:d3:52:f8:f2:e8:46:e9:e0:
83:eb:08:1a:57:ff:df:af:85:83:31:50:76:c2:4e:4f:39:4d:
9f:e5:00:c2:e3:6b:c8:6b:81:73:c9:24:bd:ab:0c:e0:41:46:
eb:e3:84:9f:29:c3:f5:42:a9:06:d2:38:56:ae:bd:b4:fd:47:
71:e0:be:e1:75:c7:b4:dd:2a:aa:bb:43:c3:13:0f:06:03:7d:
3b:3a:7d:8d:9a:9a:3f:dc:2b:39:18:cb:3b:f9:27:96:7d:23:
4f:e9:ea:77:17:3f:82:ae:77:d8:8d:5c:1e:60:bb:2d:1e:00:
f9:9d:a3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:21:57 2025 by rpki-client