Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa
File: 9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa (raw, json)
Hash identifier: DTpgCrGn7dfqsJseUXDAQmkVe68ctBKBQqcJqxWEqtE=
Subject key identifier: 1E:B9:4E:71:12:BF:FF:68:AA:E7:EA:73:0D:16:3E:35:EC:E0:91:28
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB7967AB9A193DDE93000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b7:96:7a:b9:a1:93:dd:e9:30:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=0836c88f-87e7-40fe-b422-431dbd969724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bf:5d:eb:09:b8:b8:a9:b3:10:69:ac:f2:e0:
e0:7a:f6:7f:d2:48:de:14:c9:28:ac:f6:f2:8f:f0:
77:ec:b1:e5:c7:a9:ae:8c:71:ec:87:bd:c7:3e:0d:
f6:ba:27:bd:62:a8:86:d5:71:e5:0c:56:af:36:d4:
ba:8d:78:58:79:00:19:9e:91:3a:3a:5f:1d:c8:5e:
f2:a8:9d:1e:f7:db:38:cd:7a:4d:b0:b7:d8:e8:10:
08:29:b1:42:7c:36:89:db:7e:fb:40:f1:19:b7:87:
95:73:a5:3d:8a:a0:5d:af:ed:9e:62:2a:af:8a:fa:
d5:0b:e7:0a:76:cb:a7:a0:c1:ce:d5:0b:a4:46:09:
f3:d9:cc:94:70:c8:5c:c4:14:75:bb:39:82:2b:f4:
48:f6:7d:83:d0:19:37:b8:aa:c6:6d:53:54:4a:05:
d8:da:73:c0:86:c8:8c:9b:db:48:49:e4:b0:8e:f1:
d7:85:1c:03:0e:f7:80:b8:a2:66:e1:fd:31:47:f2:
a2:2f:95:fd:97:49:68:30:22:0c:0c:98:08:fd:61:
d5:04:17:4b:b5:4e:6c:b0:f7:7d:d6:1d:ee:08:ea:
1d:15:81:c5:85:cb:82:3e:5b:b4:c3:cc:a1:01:30:
35:f6:e7:45:bf:c1:51:1f:3e:21:7d:6b:36:7a:67:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B9:4E:71:12:BF:FF:68:AA:E7:EA:73:0D:16:3E:35:EC:E0:91:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9a2d00cd-0538-3964-8a28-ef8b6b7ee043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.124.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:5c:ce:d8:76:44:90:d7:c5:b8:6e:b5:19:71:9c:c6:bf:ad:
ad:cd:54:fd:49:56:30:9f:30:84:00:64:b9:9c:4f:c8:bc:13:
6f:3a:f0:92:7d:b9:82:ca:53:42:ee:7a:47:0b:06:83:95:ce:
37:ee:83:e9:a8:1b:d7:29:e2:85:8f:f2:95:ec:8f:d1:80:32:
1d:f0:a5:47:57:54:97:b5:c8:6e:c5:c9:f9:2d:8b:48:9d:49:
df:e0:bb:c7:00:62:e4:5b:4c:38:55:fc:94:b1:a2:f0:d9:39:
d0:d1:9e:a2:b5:f4:57:bd:7e:44:93:f1:da:59:cb:4a:80:90:
a1:c8:69:a4:26:ec:bf:26:49:0b:35:36:3b:7d:2f:26:7a:2c:
ff:b3:d2:b8:c6:75:15:68:58:f7:3b:72:c6:03:ad:1d:ba:4e:
2b:49:97:be:20:ea:ce:ef:b7:3b:f7:5c:31:6e:75:69:a4:61:
00:80:4f:2c:7e:87:f0:36:87:a6:81:f5:29:10:5e:af:37:45:
9c:a3:a5:db:94:81:58:2c:94:f1:1d:0b:a8:1c:c4:63:3b:f1:
c8:3f:22:cf:9f:08:07:aa:21:60:a6:43:68:bb:80:27:3e:cd:
1e:8e:58:cf:0b:b6:44:79:4f:a7:03:6a:b0:6e:de:a5:ff:21:
ff:18:de:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:33:11 2025 by rpki-client