Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99ddb48b-994b-3f85-8378-3b1b708fe6fb.roa
File: 99ddb48b-994b-3f85-8378-3b1b708fe6fb.roa (raw, json)
Hash identifier: vb1mTDgmEjc38HuTJ3Y07/ajMrBOzn/W6H4eGpSl1sQ=
Subject key identifier: 38:A3:F6:BD:6B:72:35:D4:D6:72:9F:24:EE:8A:86:1F:D2:61:00:D9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B3906F869A2929CD06A80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99ddb48b-994b-3f85-8378-3b1b708fe6fb.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:39:06:f8:69:a2:92:9c:d0:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=5c3accdc-7fe0-4c13-b9ce-6b25f1c93110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cd:06:97:5b:4a:35:1c:49:04:79:28:52:76:
fd:e6:13:c0:f9:b0:ef:1a:c9:66:b0:84:d4:6c:ef:
7b:e7:db:1b:dd:87:45:71:33:04:0f:3f:5d:09:35:
73:62:92:18:fd:e7:8e:75:db:a0:06:85:5e:95:ee:
92:c9:a6:c1:08:c5:e4:17:ba:7c:00:4e:cf:7d:50:
12:73:f8:07:23:45:18:d7:e7:90:e6:ca:a0:1c:cc:
16:f2:ab:6b:99:0f:94:d6:1c:82:52:b5:0e:48:64:
49:51:3d:d7:3b:f3:f9:46:19:34:fa:67:a5:24:85:
85:82:86:43:44:1f:29:d8:19:11:e0:71:51:b6:48:
9c:a1:d2:7f:40:6c:b2:e0:e6:1d:99:c4:8c:01:f2:
3d:cf:49:a8:84:44:e1:62:a6:72:a0:dd:fd:80:3b:
bb:6c:5c:35:11:8f:05:f1:df:78:ed:c9:11:ea:fe:
9e:63:23:a8:f9:f7:24:e0:2d:dd:b9:f5:9d:da:ce:
84:99:9a:59:60:4a:bf:87:7f:e6:31:d8:a9:80:46:
50:16:d0:89:4e:66:eb:24:e1:4d:3d:67:46:55:cb:
91:43:fa:13:ba:d5:ef:bb:14:25:6b:c7:45:66:9c:
07:dd:2b:85:da:0f:fa:2f:dd:c8:ff:9a:1f:80:a1:
ab:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A3:F6:BD:6B:72:35:D4:D6:72:9F:24:EE:8A:86:1F:D2:61:00:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/99ddb48b-994b-3f85-8378-3b1b708fe6fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:1b:f0:9e:d1:b3:2b:f1:a6:9c:d8:1a:32:d4:78:4b:2c:4d:
3e:2d:74:3c:39:32:d7:dd:ef:b2:87:7c:e2:9e:b2:98:0f:7a:
d9:e3:37:8a:ce:66:f7:ba:fc:f2:a9:db:0e:82:4e:ba:77:c7:
a9:cb:fa:17:4d:33:a2:87:e0:0c:e8:60:ad:22:35:64:66:d3:
2b:99:62:6f:88:80:8c:08:8e:05:60:54:92:3f:0c:68:d6:32:
1c:52:8f:a2:fa:22:4e:34:16:1f:c8:e6:7a:b3:75:18:d8:99:
47:ad:fd:9f:43:d2:64:9d:d0:a9:b6:9c:95:bd:e1:e1:ca:eb:
95:c7:a5:00:58:b2:8a:c5:ec:30:ea:c2:95:9b:21:fb:92:77:
6c:d5:1d:69:07:af:f0:d3:c9:3a:40:a5:76:eb:09:64:ab:6d:
1e:25:78:9e:e3:72:16:a6:f9:14:ec:0a:33:fc:4e:47:b5:13:
d4:11:b7:96:ad:ef:b7:64:f3:d5:06:46:25:c4:85:37:e7:b4:
ba:b6:89:d2:cd:34:18:4b:4d:20:d1:3e:20:5e:88:bd:9b:5d:
98:a4:a5:e8:2c:41:8e:45:29:f8:42:e2:a9:41:7b:23:a5:2f:
a2:7e:d4:ad:dd:93:67:6c:6c:f9:5a:72:4c:1a:c7:87:0d:e3:
34:59:f8:a0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzkG+GmikpzQaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NWMzYWNjZGMtN2ZlMC00YzEzLWI5Y2UtNmIyNWYxYzkzMTEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5M0Gl1tKNRxJBHkoUnb95hPA+bDvGslmsITU
bO9759sb3YdFcTMEDz9dCTVzYpIY/eeOddugBoVele6SyabBCMXkF7p8AE7PfVAS
c/gHI0UY1+eQ5sqgHMwW8qtrmQ+U1hyCUrUOSGRJUT3XO/P5Rhk0+melJIWFgoZD
RB8p2BkR4HFRtkicodJ/QGyy4OYdmcSMAfI9z0mohEThYqZyoN39gDu7bFw1EY8F
8d947ckR6v6eYyOo+fck4C3dufWd2s6EmZpZYEq/h3/mMdipgEZQFtCJTmbrJOFN
PWdGVcuRQ/oTutXvuxQla8dFZpwH3SuF2g/6L93I/5ofgKGreQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDij9r1rcjXU1nKfJO6Khh/SYQDZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvOTlkZGI0OGItOTk0Yi0z
Zjg1LTgzNzgtM2IxYjcwOGZlNmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcLTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALgb8J7RsyvxppzYGjLUeEssTT4tdDw5Mtfd77KHfOKespgPetnjN4rO
Zve6/PKp2w6CTrp3x6nL+hdNM6KH4AzoYK0iNWRm0yuZYm+IgIwIjgVgVJI/DGjW
MhxSj6L6Ik40Fh/I5nqzdRjYmUet/Z9D0mSd0Km2nJW94eHK65XHpQBYsorF7DDq
wpWbIfuSd2zVHWkHr/DTyTpApXbrCWSrbR4leJ7jcham+RTsCjP8Tke1E9QRt5at
77dk89UGRiXEhTfntLq2idLNNBhLTSDRPiBeiL2bXZikpegsQY5FKfhC4qlBeyOl
L6J+1K3dk2dsbPlackwax4cN4zRZ+KA=
-----END CERTIFICATE-----
Generated at Fri May 9 19:36:40 2025 by rpki-client