Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a25e59-da6c-3e9f-89a2-e5629d1fba9a.roa
File: 76a25e59-da6c-3e9f-89a2-e5629d1fba9a.roa (raw, json)
Hash identifier: Q2XZluer7ptnHwaj+EFX6Cxr2ph8uUOENvqagKcKxok=
Subject key identifier: 74:A4:2D:84:4A:5D:4C:4D:8B:91:7E:77:88:17:ED:7C:C2:A0:8B:E7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AAA95FBB169D4B246BF80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a25e59-da6c-3e9f-89a2-e5629d1fba9a.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.74.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:aa:95:fb:b1:69:d4:b2:46:bf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=a38d92a5-3a38-42e7-a17e-c05ac237d3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:85:34:93:d3:32:df:b0:d2:c3:3a:4d:7f:8a:
c5:c1:17:72:ab:d7:bd:7b:e8:f6:f6:94:ed:bc:cb:
50:68:c4:f8:3e:a9:a4:ab:81:5c:1a:9b:b3:9a:34:
b5:ae:df:bd:53:13:14:d5:3c:8a:fa:38:cf:ca:b0:
0a:cf:7b:74:72:bc:9f:77:a8:d3:0a:5a:d5:f2:23:
a2:f0:28:5f:48:72:35:b1:4c:c7:d0:d5:67:02:23:
18:d9:d6:b9:41:10:52:6a:5a:e1:54:aa:c5:da:9f:
69:f6:70:59:87:b4:8a:e4:61:1f:1d:97:8a:c7:25:
ad:17:ce:a7:7f:34:0c:1a:24:78:7e:d8:e0:35:f1:
e3:34:17:fd:d7:44:c2:e4:2c:49:9e:16:0b:87:5e:
e6:00:ec:d0:92:2c:a9:d5:fa:07:ef:94:89:f3:c4:
4b:3a:43:bf:6f:b2:7a:08:e9:f6:05:77:62:46:8e:
aa:9a:0f:7a:96:17:d1:36:a1:03:5b:8e:b4:18:48:
d0:a8:c2:9e:6d:c0:bf:f8:77:88:cb:3a:0e:07:79:
35:1a:de:39:9e:cd:0a:e7:aa:0a:c6:35:0a:8e:bb:
e4:38:04:57:61:39:6d:0c:89:08:79:40:64:a3:62:
d2:08:c8:87:05:d7:7e:7f:81:48:aa:b3:e5:80:fd:
95:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A4:2D:84:4A:5D:4C:4D:8B:91:7E:77:88:17:ED:7C:C2:A0:8B:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/76a25e59-da6c-3e9f-89a2-e5629d1fba9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.74.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:f9:7c:f5:b7:51:15:e7:09:7b:f8:eb:7a:b3:98:0f:fd:cf:
f3:3f:ab:45:1c:11:e9:4c:dd:0f:b7:ac:f9:b6:90:4c:5d:04:
82:9b:01:4a:3c:26:38:f2:39:cb:e4:1e:ee:cd:a9:c8:ea:85:
35:60:ae:fc:b2:1b:fa:8b:7c:14:21:12:46:7f:68:1b:19:82:
27:52:4e:48:7b:07:3d:aa:30:79:c6:31:75:3b:8e:33:62:61:
fe:69:68:14:ef:e8:16:d5:fe:c1:dd:a0:73:72:b9:9e:a0:5a:
ae:da:4b:9a:6f:33:6c:0c:3a:f3:28:a6:f6:d4:0b:9e:8f:4a:
c5:63:fa:c8:7f:14:62:5e:20:9e:bb:71:a5:23:c7:1c:36:a2:
16:45:80:ce:ae:16:0f:74:99:e8:09:b2:16:16:7a:6a:02:fc:
81:5a:f8:ea:40:74:bb:98:7f:c0:6f:d9:b5:ce:31:8c:79:bc:
62:f0:15:75:25:d7:96:f1:be:97:5a:03:8c:6f:5a:02:81:50:
77:34:81:3e:a1:0a:ec:30:f2:bf:c2:99:fb:b8:fa:e6:2c:31:
87:18:74:5e:14:f7:c4:a6:bf:6d:d4:0a:a0:7a:fc:99:a1:45:
36:fa:21:35:9e:bf:a3:8a:57:5d:de:cf:05:6e:24:a8:2b:db:
c1:be:7f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:52:36 2025 by rpki-client