Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa
File: 8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa (raw, json)
Hash identifier: qUjwYxwKqZA4SsIB7s6GfRwDdpDX8iQep8Bx3AhqvY8=
Subject key identifier: F2:24:27:6F:10:60:09:10:88:70:F2:B6:DA:A4:CE:91:49:0C:DD:A1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA50553D51EE1215786C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.44.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a5:05:53:d5:1e:e1:21:57:86:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=63f9baa7-eb5c-4a84-809f-8fd8e9a0c75b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:a7:a6:11:18:04:a7:4a:bb:a2:83:ba:67:
7b:38:e2:fd:89:0e:23:c5:b8:22:37:34:81:6b:62:
db:06:0b:67:f9:ba:9d:60:65:73:8d:71:bb:7e:c3:
80:54:1b:fd:cb:f6:a1:7a:3c:99:4e:53:62:65:7f:
88:df:d9:a0:92:ba:15:64:8a:57:3d:54:b9:c2:e5:
ad:e8:a7:bc:98:05:85:ae:8f:aa:60:e4:8f:22:a2:
23:a9:d8:72:b4:a3:c5:5b:38:bb:56:f6:33:8e:d4:
bf:11:4a:9c:45:c9:2a:b4:88:a9:3d:a1:fd:a3:77:
c1:89:f7:c7:9e:d4:cc:72:a3:7c:b3:a3:57:73:a6:
a4:43:f1:66:2f:81:99:0a:a3:b9:e8:19:08:60:66:
76:0b:b9:92:fb:35:35:25:0f:d3:7b:ac:4d:c2:17:
19:f9:95:44:23:92:95:5b:a2:ed:57:c8:75:8c:7c:
dc:61:90:32:8e:11:88:5d:6a:fa:49:18:6d:8c:56:
4b:29:2c:de:6d:b7:0b:3c:83:b8:d3:d5:c9:7e:66:
71:78:3d:87:d1:16:29:9f:ab:39:15:c0:ff:a8:2b:
bb:4c:85:61:90:66:9a:4a:b0:02:3c:86:9f:3c:d2:
20:18:d6:77:56:8a:d9:29:8a:3e:7b:b0:14:72:33:
5d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:27:6F:10:60:09:10:88:70:F2:B6:DA:A4:CE:91:49:0C:DD:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8b3c7199-9d32-320c-89d2-164cd0bfc3d7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.44.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:36:60:41:43:20:fc:48:89:4d:ac:16:5d:3f:5c:4a:e1:13:
d6:af:eb:d2:bb:65:64:14:2e:60:69:76:0a:2d:a7:11:48:d5:
19:ce:36:1a:9e:bc:9c:6a:fc:ba:e9:83:34:27:d8:b2:d7:88:
17:61:fe:f5:01:15:bc:3e:d6:af:5b:ee:34:93:db:c9:16:77:
c0:1f:a9:96:6e:ee:70:5c:ee:72:33:43:02:69:1d:68:73:61:
04:1b:48:77:76:9a:71:f5:28:87:ba:bc:1a:89:3d:b7:59:6c:
85:52:2a:f4:2a:4e:d9:32:3b:6b:b6:0a:82:9e:6c:2d:2e:94:
b0:dd:33:25:be:a3:e7:a6:24:3e:83:dc:d1:51:b1:37:80:09:
4d:78:6f:0d:31:3d:2a:56:52:27:43:f9:f6:9d:74:60:68:e8:
00:0f:5a:d6:fc:22:7f:52:ac:a9:31:c2:e5:0b:32:51:58:be:
9b:d6:10:27:8a:ef:11:bf:fd:72:41:3b:cf:d2:a9:c0:7f:57:
f0:67:57:fc:c2:af:eb:d8:00:b9:5a:0a:79:59:99:eb:c6:66:
80:ba:ca:92:be:55:47:17:b9:a0:31:03:43:33:da:d1:07:b4:
f7:1d:85:37:f4:df:fa:6c:e0:f5:01:4c:6c:98:1c:da:af:9a:
ed:6a:16:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:01:04 2025 by rpki-client