Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8001ad8a-257e-30e1-9921-efa36d9bac39.roa
File: 8001ad8a-257e-30e1-9921-efa36d9bac39.roa (raw, json)
Hash identifier: swRO8ouTK1fnepweS1aq4aLZol0jGIQhaZbkKYg11XU=
Subject key identifier: 77:7C:D5:A0:80:31:F7:7E:E6:11:98:83:4B:DA:55:E3:35:3C:7F:7D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6A2647EAFCFFFE1C86E0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8001ad8a-257e-30e1-9921-efa36d9bac39.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 172.217.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6a:26:47:ea:fc:ff:fe:1c:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=8bb1586c-1016-4f90-ab61-afcfff19b642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:2a:83:86:98:51:22:0c:47:ad:c0:39:04:
8c:22:0c:9d:d2:26:34:07:bc:87:40:d1:31:5e:b1:
e9:e2:06:bd:73:c8:12:29:09:4c:a8:ed:dc:72:4f:
44:63:d3:59:bc:8d:f6:86:27:95:d2:60:9d:36:5b:
23:90:fe:27:22:32:9b:34:3f:bf:e6:f5:b9:0e:54:
a0:8a:d0:d1:37:22:38:aa:99:33:16:52:0d:a3:43:
c4:2a:6e:9e:60:21:4a:89:3a:6f:10:64:dc:3a:3a:
c4:25:f0:0f:c0:7a:19:6a:c2:ea:61:26:44:4e:74:
e8:2f:ad:89:ed:8a:77:9e:1d:fa:47:f9:6e:46:1a:
1c:46:a7:af:89:2f:bf:05:79:1a:be:e7:8c:ce:0e:
9f:f8:0d:8d:83:a9:5e:d5:b5:a5:1d:e2:6d:02:65:
8e:31:9b:52:3d:88:c8:46:0e:21:76:e7:cd:08:5e:
ce:f3:7d:a2:2e:ca:0f:04:be:6e:d3:fc:fa:08:8b:
76:03:24:10:3b:a8:d3:94:a5:55:73:12:d9:0c:ef:
a7:ea:cf:29:dc:d5:16:5a:b8:1c:13:c2:69:68:4e:
88:3d:0a:d9:6c:a3:ac:78:a6:86:a2:1e:d6:7d:bc:
bd:8b:bf:b6:d9:8a:cb:32:25:99:2c:f1:f6:5a:c4:
d5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:7C:D5:A0:80:31:F7:7E:E6:11:98:83:4B:DA:55:E3:35:3C:7F:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8001ad8a-257e-30e1-9921-efa36d9bac39.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.198.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:a4:8f:43:4c:50:2a:9c:26:a1:7b:5c:5f:fd:48:86:fb:bf:
5e:b1:85:5f:14:44:a6:14:71:54:72:ca:b8:36:45:12:0e:be:
c1:e0:f1:cc:7f:f0:95:44:22:e3:3a:80:b3:5d:f0:fd:36:cb:
b5:17:35:a5:b0:37:37:98:b8:bc:0e:c7:f7:17:42:9c:0a:a8:
9c:e3:de:09:ca:d6:9e:91:5f:ef:f5:2a:e7:75:67:14:bc:75:
fb:15:24:57:24:b7:3d:b9:07:41:3d:81:5c:31:e5:17:18:e6:
c5:4e:59:6b:36:14:6a:7c:be:aa:ba:07:56:7b:79:ce:8d:bc:
49:db:9c:7a:ab:3e:a8:46:e5:4d:19:9a:0f:29:22:7b:75:f1:
ee:95:48:56:b2:e8:51:e7:3b:4d:ea:1f:54:92:44:72:7e:b7:
80:18:61:0d:fe:9d:66:bb:da:4d:50:0f:c0:33:d2:24:6f:80:
6a:90:93:76:0f:5f:74:d8:38:97:59:d3:48:ad:a1:5c:1e:a0:
07:f3:50:08:12:05:0b:40:5f:6c:b1:af:64:28:99:f4:6f:7d:
3d:67:52:d6:97:77:b8:24:8c:59:51:8c:2a:f9:12:6e:05:21:
9d:31:72:59:4f:f4:fe:c0:91:ea:a9:ea:19:b6:45:62:03:00:
f0:5b:54:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SmomR+r8//4chuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
OGJiMTU4NmMtMTAxNi00ZjkwLWFiNjEtYWZjZmZmMTliNjQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+oqg4aYUSIMR63AOQSMIgyd0iY0B7yHQNEx
XrHp4ga9c8gSKQlMqO3cck9EY9NZvI32hieV0mCdNlsjkP4nIjKbND+/5vW5DlSg
itDRNyI4qpkzFlINo0PEKm6eYCFKiTpvEGTcOjrEJfAPwHoZasLqYSZETnToL62J
7Yp3nh36R/luRhocRqeviS+/BXkavueMzg6f+A2Ng6le1bWlHeJtAmWOMZtSPYjI
Rg4hdufNCF7O832iLsoPBL5u0/z6CIt2AyQQO6jTlKVVcxLZDO+n6s8p3NUWWrgc
E8JpaE6IPQrZbKOseKaGoh7Wfby9i7+22YrLMiWZLPH2WsTVfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHd81aCAMfd+5hGYg0vaVeM1PH99MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvODAwMWFkOGEtMjU3ZS0z
MGUxLTk5MjEtZWZhMzZkOWJhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNnGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACSkj0NMUCqcJqF7XF/9SIb7v16xhV8URKYUcVRyyrg2RRIOvsHg8cx/
8JVEIuM6gLNd8P02y7UXNaWwNzeYuLwOx/cXQpwKqJzj3gnK1p6RX+/1Kud1ZxS8
dfsVJFcktz25B0E9gVwx5RcY5sVOWWs2FGp8vqq6B1Z7ec6NvEnbnHqrPqhG5U0Z
mg8pInt18e6VSFay6FHnO03qH1SSRHJ+t4AYYQ3+nWa72k1QD8Az0iRvgGqQk3YP
X3TYOJdZ00itoVweoAfzUAgSBQtAX2yxr2QomfRvfT1nUtaXd7gkjFlRjCr5Em4F
IZ0xcllP9P7Akeqp6hm2RWIDAPBbVOM=
-----END CERTIFICATE-----
Generated at Fri May 9 20:27:05 2025 by rpki-client