Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa
File: 8f2c8793-be20-36a0-9939-24dfde4496ac.roa (raw, json)
Hash identifier: /PsMarMabtXVgUgU6JP33URqIyQeOKofjYeM3euy9/s=
Subject key identifier: FB:EC:A2:C9:9F:D2:00:C2:ED:F0:F2:1B:3D:EB:49:BB:74:64:9B:1F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F4FD6B9C260C5F726B4E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 74.125.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:fd:6b:9c:26:0c:5f:72:6b:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=04155698-677a-4ef9-9691-e7d11395f372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:2b:6d:69:0a:40:4b:4b:49:c7:20:2e:7c:
4c:a2:52:28:bd:e9:70:36:91:c6:2a:4e:a5:d1:e1:
a7:db:e5:69:09:34:ec:45:ad:62:39:96:b3:e6:a4:
f2:58:88:1d:f0:ed:a5:f3:3b:e5:b1:d1:00:78:8a:
8b:7f:92:c8:8a:28:9a:97:54:1e:da:44:f4:d3:58:
a8:6d:b7:16:95:59:0c:db:df:e4:a2:6b:a6:29:ff:
49:df:85:48:b7:dc:b6:0b:57:57:68:0a:01:01:38:
c6:23:2a:32:fb:b9:d5:eb:58:54:1f:ef:a8:00:54:
50:af:30:12:63:ee:99:a3:92:c1:aa:c0:db:7c:10:
04:5d:cd:78:0f:fc:f5:95:4c:72:69:86:1d:6b:07:
55:aa:fb:37:26:2f:20:67:04:db:6c:77:41:18:77:
63:4a:51:05:58:da:4a:b9:dc:30:6a:82:15:4a:7f:
d5:14:4d:f6:49:b6:0e:1a:19:aa:a0:11:f7:be:a4:
b0:8b:ad:1f:ab:61:1e:96:b5:43:0d:07:64:8b:99:
11:08:2d:0e:c9:20:11:f7:94:60:70:01:6a:bf:2f:
42:a0:fb:00:46:36:23:c6:62:84:71:14:fb:f0:21:
00:8a:d5:28:75:ca:52:db:00:2f:e2:89:a5:b1:6c:
f1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EC:A2:C9:9F:D2:00:C2:ED:F0:F2:1B:3D:EB:49:BB:74:64:9B:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8f2c8793-be20-36a0-9939-24dfde4496ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:b6:ce:ee:59:29:0e:b4:0d:4e:98:58:4e:86:f5:15:2d:6d:
d3:65:60:f7:13:ea:9c:a5:31:c9:01:c6:90:cc:43:bf:07:4c:
6a:c4:20:d3:82:20:c9:a0:59:90:40:a0:12:61:c9:1a:fc:4e:
43:13:45:84:66:97:c1:4a:b6:f0:ef:01:65:b2:b0:ad:11:11:
7e:a9:db:ab:3f:08:92:c5:bd:b0:a8:d8:42:c5:35:fe:ca:8b:
36:22:83:aa:63:85:2f:d2:58:a4:66:c4:73:24:16:41:f8:89:
bf:f0:65:a2:bf:ee:88:cd:13:5f:b7:53:f1:77:d0:df:89:af:
9b:a9:4d:8d:a2:ba:9f:d6:54:08:ed:1d:e7:1c:5b:c8:b3:6c:
3b:44:eb:d1:0f:bc:b5:fe:d5:7d:22:ba:f5:00:5f:fe:d3:d0:
19:e3:a3:9c:58:59:c0:f8:82:2c:95:76:8b:e0:a2:32:8f:b9:
71:de:db:9c:46:6a:ae:66:9e:92:dd:09:8d:fd:2d:9a:73:26:
d6:44:83:df:22:52:33:c9:2c:60:d8:85:48:4d:d9:e3:e7:2a:
99:54:54:b4:64:c3:96:b6:f9:eb:6f:36:ec:f9:1b:34:88:34:
7f:58:d9:7d:74:08:44:45:2f:ab:ef:06:74:46:d5:bf:d7:b9:
95:fa:b5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:17:54 2025 by rpki-client