Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa
File: 5a84109a-e093-3cc4-b314-e82aef89a710.roa (raw, json)
Hash identifier: s7IxbtrFrhbNXgTOcQQd1NET0qplv6ZsXryTsICzDRs=
Subject key identifier: 54:5F:BC:A0:FC:59:D5:D1:99:BC:58:DC:9D:2D:FF:85:06:C3:92:26
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B41AE7F2443FC247CEF7C
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 172.253.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:41:ae:7f:24:43:fc:24:7c:ef:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=817b4594-93d1-4600-a6dc-f2fb187ac62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b1:e4:8a:70:6a:88:49:e8:6c:ef:6d:0b:c4:
e9:34:99:cd:12:49:aa:dc:2d:3a:07:b9:93:84:6d:
e9:07:5a:fe:9b:8d:2a:14:53:5f:02:2c:2c:4b:6c:
b8:20:0c:9f:3a:f8:81:4a:42:48:6e:d6:d0:6f:a6:
e6:8b:bb:9b:d9:86:ac:0f:25:f7:f6:2a:d9:e2:ec:
0a:a6:4b:dc:5e:bb:c5:df:1b:e2:6a:a9:e3:a6:ca:
41:81:92:39:95:5f:fc:56:8a:db:a9:92:77:c0:6f:
b7:b0:a1:a7:52:9c:b1:ba:85:9b:12:7c:03:47:f1:
96:6c:e9:9d:69:c6:2b:1e:9d:87:b3:05:97:c0:bd:
64:ef:b1:0d:a4:9a:7e:d2:e0:1e:7f:4b:07:f2:c4:
55:e7:2b:18:09:a5:e0:0b:39:1f:a3:c3:c0:3e:86:
8e:53:18:f9:47:37:5d:4b:e9:ad:17:43:82:0d:74:
cb:fb:bb:22:d4:bb:ed:e9:ee:88:79:0d:98:3b:8e:
44:14:0c:a1:3a:dc:27:70:34:ba:ca:ff:09:a2:96:
9f:a2:b3:17:85:8c:0f:81:19:51:24:28:c3:25:b2:
7c:6b:73:fa:39:c5:5f:16:d3:e9:2c:20:79:e1:ad:
12:93:67:df:be:b2:c5:9e:3e:25:bc:fa:60:02:fb:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:5F:BC:A0:FC:59:D5:D1:99:BC:58:DC:9D:2D:FF:85:06:C3:92:26
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5a84109a-e093-3cc4-b314-e82aef89a710.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:0d:89:9a:c7:ac:fb:3e:ed:a0:b8:ad:3a:d7:a9:b8:b7:2c:
64:a0:04:e7:22:18:07:7c:90:5b:b3:00:3f:be:b4:85:04:e5:
0c:7b:56:78:c5:a2:36:20:e4:cb:18:d3:37:0e:b3:d5:da:c5:
df:3a:7d:5e:29:9d:de:a2:68:ae:57:cf:9d:ef:0c:90:71:23:
51:d0:30:da:38:af:06:90:77:69:e0:c1:93:23:7b:0b:f3:19:
de:e2:c1:09:02:83:7b:b9:3d:21:f2:d7:20:24:a3:99:9f:23:
60:d0:1b:f2:f3:56:af:7b:6a:62:59:9e:99:79:44:33:b6:70:
d2:52:50:7a:c6:b0:f1:2a:1b:51:73:b1:48:8c:f7:51:21:0e:
7a:7f:69:8d:50:5c:b0:b8:ef:aa:ac:25:db:90:fe:4d:a5:97:
3b:dc:c7:1e:f6:44:3e:1e:96:90:5b:72:f7:54:79:82:a0:e3:
cc:ad:ea:a4:ad:82:2f:38:b7:70:d3:97:16:9e:06:2a:51:67:
5c:94:8e:f5:93:40:22:58:5e:87:4b:2f:2a:e9:9a:62:ab:eb:
db:c9:be:02:c4:6e:e0:a4:21:af:c3:b3:f0:54:94:b9:95:47:
b4:6b:cb:2d:04:f2:a2:da:fd:01:2c:95:82:41:0d:0f:51:00:
a1:ae:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:16:12 2025 by rpki-client