Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa
File: 52603226-b4de-3bb1-a725-54436b999c2e.roa (raw, json)
Hash identifier: ejkGUYFvE2HS+ePryFQ8busp2KQvWMP1TB5cFTJzltI=
Subject key identifier: 01:63:D8:12:08:0F:98:ED:3C:62:CB:61:CD:52:2D:BD:7A:75:AB:7B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6EDC7A7F7F71F8B9A780
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 172.253.57.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6e:dc:7a:7f:7f:71:f8:b9:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=87546932-0040-40f7-abd3-7205c48b25ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:13:5b:21:dd:26:58:7a:c9:d0:5d:89:3d:1b:
49:9c:09:6f:75:b6:92:82:e5:2f:08:67:9c:67:00:
76:bb:fa:fe:5b:49:3c:98:c7:54:a6:13:ae:e5:11:
bd:3e:9a:0e:63:ba:29:0e:03:68:34:c1:95:00:a5:
97:e8:d7:98:0f:f1:ab:47:56:74:ee:40:a0:7e:ca:
fc:eb:48:0f:db:49:0b:6b:37:82:a0:e9:81:31:71:
f0:bc:21:bf:d8:60:7d:66:f2:7f:99:86:b4:e6:1e:
44:23:64:e5:bf:9c:0a:10:b4:c6:1b:b6:49:6f:29:
12:ff:ff:26:9b:f6:58:76:7c:c6:a4:37:bc:86:63:
41:fc:fb:f2:df:23:42:4d:68:0f:ca:18:00:74:53:
5f:21:f6:6d:0b:48:25:52:4e:72:34:7b:99:8b:b3:
9c:e4:aa:39:e6:9b:8f:86:d6:5b:d3:fb:62:64:ea:
bd:47:b7:91:fd:53:ba:ff:80:e0:43:39:7c:f9:49:
17:a7:6a:56:c4:9f:05:a8:b2:a8:e6:1f:37:e2:5c:
be:c9:7a:ef:b8:e8:c8:43:86:15:de:b3:39:45:7b:
38:e1:2b:3b:5b:68:0a:2f:45:1a:7c:bf:b2:10:5f:
18:13:9d:50:76:08:ab:f0:20:4c:36:33:2f:5d:9c:
da:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:D8:12:08:0F:98:ED:3C:62:CB:61:CD:52:2D:BD:7A:75:AB:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/52603226-b4de-3bb1-a725-54436b999c2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.57.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:85:b6:4f:70:4e:6c:20:f4:28:f0:02:b4:5b:4e:aa:5a:5c:
9e:95:e7:6c:c2:0d:7a:91:a1:cc:c8:e5:22:0e:86:a0:98:00:
f6:b0:6a:a0:f9:2a:80:9a:ba:16:01:4a:65:a0:fa:c4:50:bd:
5d:22:ab:c8:5a:b2:96:2a:bf:ed:66:ca:c0:c4:71:9e:d0:12:
1e:25:9a:66:c7:90:de:ea:de:4a:de:f9:e4:41:07:7d:da:20:
0e:81:5e:c1:df:23:b3:d5:c9:98:05:91:f6:88:98:1b:f4:9a:
ef:e1:e0:e5:e7:95:4a:ad:c4:39:0d:9d:fd:11:36:e7:1a:a2:
6d:84:1e:6e:8d:10:27:92:a4:35:4e:4d:27:0f:10:ff:c2:c4:
71:03:97:ca:dd:a0:a4:05:f1:90:51:1f:61:0f:72:51:21:68:
7f:57:76:0c:b2:4f:b0:74:d5:2d:fe:96:20:ad:15:c6:1d:21:
45:33:01:c3:79:b4:25:46:48:70:e6:6c:0a:42:ea:aa:81:c3:
b5:ce:f9:5f:32:b2:de:1a:f1:93:93:77:51:08:4f:97:d4:08:
4a:eb:a9:cb:4b:aa:10:70:eb:4d:d6:6a:20:44:1d:10:1a:18:
23:0c:dc:e5:c4:74:5c:e3:f1:58:09:e9:21:d5:df:fe:81:84:
14:9d:8d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:40:24 2025 by rpki-client