Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa
File: 6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa (raw, json)
Hash identifier: s3sOdn8f0/YfhBWWUGmlZvTMdeJ2SyT3rqKRh4QSqaU=
Subject key identifier: 45:AF:FA:40:C9:65:33:80:8F:BC:35:C9:71:BC:4A:1E:4C:3C:DB:61
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B3C8FBA64065F66D1E300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 11344
IP address blocks: 209.85.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:3c:8f:ba:64:06:5f:66:d1:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=51b8f661-a5ec-4bfd-a82f-46ffb7eb47af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1e:71:b8:9d:a9:53:18:72:4f:d9:e3:9a:c2:
6a:f8:0f:dd:b3:7a:8d:6c:de:73:ae:26:da:07:26:
1a:3e:c4:0b:07:75:1e:ff:f1:0d:5b:15:61:52:00:
84:de:ac:0e:5c:af:f0:8d:05:78:1a:a6:66:be:57:
67:dc:6e:54:f2:55:42:28:be:7e:88:b6:30:dc:52:
f9:c8:ef:35:12:f3:97:84:79:b0:dc:7d:94:ce:3c:
8a:77:33:2c:f4:43:0c:a1:26:92:79:82:80:f4:29:
62:58:9e:c8:92:97:8b:c9:6f:ad:d0:c5:2b:21:76:
40:20:7c:4f:c7:66:f6:02:b6:6f:b8:2d:eb:ac:f6:
ab:1a:13:16:2e:72:a4:2e:b1:f6:f1:ec:06:28:e1:
2e:a6:0c:c9:35:06:93:c0:b2:e4:50:3a:86:68:74:
22:f9:9d:0f:3e:92:29:d3:8c:16:34:73:a5:b9:0c:
0b:04:ee:b3:16:04:e3:f2:73:cc:68:07:47:c3:1a:
ed:53:dc:64:87:10:32:88:9e:94:62:2a:40:2a:90:
98:50:ba:36:be:a4:1c:3d:36:1a:54:9c:c2:69:5a:
73:eb:49:b2:1c:32:a1:66:d3:17:e3:e9:04:10:30:
2d:d3:73:0f:ac:8a:e5:32:a3:9e:95:65:eb:dd:01:
f3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AF:FA:40:C9:65:33:80:8F:BC:35:C9:71:BC:4A:1E:4C:3C:DB:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/6eb0581d-13dc-3c9a-968e-4e75c936b29a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:fd:44:b8:1b:16:57:fe:7b:ac:74:43:fc:a4:c3:58:62:56:
92:5c:e2:67:ea:54:ac:2e:b6:87:cb:10:84:4d:92:80:3b:93:
29:79:ae:43:47:5d:22:2f:d0:b8:32:5d:b2:02:84:02:00:37:
55:e2:ac:97:d5:80:0a:9c:3e:2c:e0:3d:85:c5:ec:5a:8b:4c:
50:cd:c1:54:38:99:e2:a1:ce:d3:ca:03:60:58:09:f8:9d:3d:
90:d0:56:e5:4c:39:b8:cb:ab:f6:22:c4:e4:1b:96:5e:65:25:
8d:d2:27:2c:3b:90:c4:91:2d:09:fd:ae:0a:1f:4f:2d:73:42:
e6:99:b7:e7:c6:72:ac:e4:fc:16:63:15:06:86:ec:37:1d:da:
23:1a:c1:fa:b3:66:74:da:f3:8c:a7:ad:a0:69:1f:b4:60:31:
45:d4:e0:03:95:3e:0c:29:92:7c:67:c7:86:0d:95:c9:9b:17:
31:86:58:c7:8c:2c:77:65:9b:7a:06:44:d0:61:5e:36:34:4a:
50:b9:a8:77:06:16:67:86:45:cd:57:b6:1c:62:ad:6f:6d:5c:
58:db:5b:00:c3:92:7e:ca:06:e9:24:5b:d4:72:cc:dd:a8:a2:
da:e6:56:78:09:ed:de:2b:07:f7:b6:3c:9e:99:be:4d:34:7d:
fa:bd:45:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:42:21 2025 by rpki-client