Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa
File: 5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa (raw, json)
Hash identifier: Yb1JVm/wF6ny/MH7/dvDiRFnXsX36itb+cmTc2RUe/c=
Subject key identifier: C5:E9:24:F4:E4:C4:97:89:05:6A:45:C8:6C:DE:39:67:05:76:C0:E8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B5DB6D909983F46D52E80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 172.217.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:5d:b6:d9:09:98:3f:46:d5:2e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=73073cc4-31c8-4ec5-a789-50c6f55d57c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1f:46:c9:eb:5a:3e:4f:d4:88:9c:8a:7b:8d:
ac:6e:80:f3:b3:c8:13:b9:4e:5c:e4:d8:bf:1d:ef:
45:d7:6f:ab:3e:c7:9a:59:80:3f:d0:64:37:51:a8:
0c:76:2e:5c:ff:da:c1:9c:4b:9e:14:bb:03:36:8c:
0b:93:31:4b:fe:1b:30:2c:fc:b3:07:44:84:93:ad:
bd:dc:86:b0:32:ed:73:1d:01:79:f2:7e:d6:db:07:
07:1a:6b:c0:55:5c:e5:65:e9:a5:3c:e8:c7:ef:0e:
6e:69:4a:03:a4:b2:78:7a:dc:62:51:af:97:ae:e8:
e3:4b:e6:7c:38:b9:e3:9b:73:e4:cf:7c:ca:a7:2f:
ea:59:a6:de:3b:b9:bc:02:0d:d7:e6:8f:19:7a:b1:
d5:d3:f9:0f:7e:f5:ef:0f:d5:d3:fc:d9:84:b6:ed:
f3:b6:19:fc:98:31:5c:cb:31:8d:5c:63:94:fc:44:
a7:7c:c3:9a:55:37:b2:b6:1c:c4:70:71:b1:67:1d:
4d:65:54:3a:b2:44:2c:81:67:2c:6c:b9:2c:15:92:
75:0a:be:2c:02:30:72:24:69:83:7f:3d:e3:24:d8:
20:99:24:3f:c1:d5:96:6b:1c:00:61:11:d4:64:d5:
6f:3e:fb:f6:c4:f5:e7:3c:c4:f0:43:67:93:58:6a:
22:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E9:24:F4:E4:C4:97:89:05:6A:45:C8:6C:DE:39:67:05:76:C0:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5d9b5a77-20a4-35a2-95d8-4380dd74a384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:8c:db:a7:54:c7:f1:21:d1:21:25:de:f6:ec:0d:89:c0:ce:
07:af:66:e8:5a:4b:c5:79:f2:56:e9:0a:f2:76:01:79:f6:24:
38:a8:70:20:cb:ae:4d:0e:88:25:6c:e8:1d:9f:9a:56:a9:ab:
34:f5:9a:89:c7:88:b2:35:c4:00:0e:90:49:70:d4:06:4f:ef:
2e:9c:50:09:05:b0:ba:e5:42:f6:1a:0d:4a:50:6b:71:1d:27:
f9:7e:dd:09:a9:04:fb:0c:b2:32:0c:3e:d6:bd:6f:b5:fc:94:
4d:10:5c:65:2f:db:f5:bf:d2:bf:28:f9:ea:da:fb:6b:4d:f1:
35:67:7f:d0:46:ad:92:7e:1d:6a:cc:7c:b1:fc:d5:7e:55:5c:
e6:ef:81:c6:ff:53:02:da:3e:13:3c:e9:68:84:14:ff:83:46:
f1:0b:a2:35:32:8a:0d:79:30:0d:e7:b0:35:b2:2a:2d:6a:22:
25:6b:1f:b0:a1:68:6c:c7:45:52:79:ba:33:2d:fd:b1:0b:ff:
83:a3:d7:b0:6b:03:d0:3b:8b:b4:15:c2:76:62:cb:ec:5c:b3:
5e:45:93:0f:8d:b9:f2:b1:ea:30:24:85:62:c5:ef:b1:af:c5:
1e:9e:dc:da:6b:9d:9f:38:ef:b9:7e:88:cb:ef:ab:b9:01:c5:
47:53:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:15:50 2025 by rpki-client