Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa
File: 9c0269b3-2815-3270-8720-d4f751b0b0e9.roa (raw, json)
Hash identifier: dPXUxDbB89XfgF42tDZLla7eymA9szm/mPHku+LPVxw=
Subject key identifier: A3:A9:ED:6B:FA:F7:CE:3D:70:07:7E:AC:BD:25:F8:1C:EE:D1:24:FA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F5207F82F87EE67F0FB280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 64.233.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:20:7f:82:f8:7e:e6:7f:0f:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=7b9280c2-861f-41dd-b021-2d8fad716b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:78:9b:13:ca:22:90:4d:3c:37:48:0d:bb:
27:23:9e:11:a9:20:62:35:8d:6e:74:8f:75:da:a9:
c5:38:aa:5d:dc:82:16:09:35:34:9d:6c:43:45:be:
83:7a:2b:7d:ec:b3:c8:2f:30:aa:ef:cd:b1:1b:70:
a6:ec:b0:c8:d1:3b:ca:b7:15:49:bb:64:c4:2e:80:
63:bd:89:60:6c:8b:8b:7d:32:12:d3:82:a2:ff:62:
2b:94:56:de:ea:e4:38:c7:1c:ea:e4:7a:69:23:89:
03:00:de:09:05:8e:29:65:83:db:d0:7c:ed:4a:2e:
0b:cb:0f:d5:b3:d2:6a:35:9f:20:2b:3d:14:87:4b:
96:f4:5a:5f:55:91:61:a4:f1:d9:d6:cf:b0:63:14:
2a:6d:9b:f0:25:3c:6d:4c:48:d6:15:30:6d:b6:2e:
01:0c:38:8d:86:a0:13:6e:26:01:18:0b:1c:32:2f:
73:fa:59:66:f2:69:9f:c8:c9:e4:20:2b:96:a9:08:
28:ff:13:34:b6:0f:5e:ce:8b:90:2c:45:76:4a:77:
c2:75:9f:94:ef:aa:9a:5d:03:ee:0f:43:25:08:75:
7a:bd:0b:84:32:3f:ba:ed:63:8b:8d:84:13:4e:0b:
bf:cf:4d:37:1f:ff:b0:66:87:a3:cb:1b:ec:fa:f7:
f5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A9:ED:6B:FA:F7:CE:3D:70:07:7E:AC:BD:25:F8:1C:EE:D1:24:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9c0269b3-2815-3270-8720-d4f751b0b0e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:be:93:21:cd:7e:b5:7e:8b:2e:b7:55:11:b8:cd:03:43:3e:
d3:eb:dc:32:cc:21:18:ab:24:be:2b:a3:aa:7f:a1:40:c5:42:
04:f2:7f:51:9d:c3:e1:26:0f:55:c1:a3:af:42:e5:05:fc:7f:
95:e0:8b:62:39:eb:97:d4:a2:ac:02:a3:02:5f:40:3f:e4:4a:
37:ad:71:e2:b6:d8:a7:4c:83:8c:2c:8a:95:a9:af:74:66:ac:
18:91:5c:57:fa:67:9e:e6:89:a9:c7:4f:ee:14:2f:bd:8c:6f:
d7:7f:d1:de:a4:d7:7d:ee:ce:f0:79:a6:b3:bb:1c:74:49:98:
92:8c:49:0d:e2:52:b0:56:4a:6b:14:11:22:33:a1:de:f4:d1:
6a:59:85:63:73:d9:81:2f:12:2f:61:98:92:96:5b:68:fa:11:
cf:32:37:28:50:c4:87:67:ef:8a:f8:b9:a6:43:db:82:79:83:
c9:fa:8f:5e:95:09:23:6e:bc:63:84:e7:9e:f7:e2:06:3b:a5:
ed:2c:ab:ad:95:a2:b0:88:a8:c8:aa:00:f0:cc:5e:77:77:03:
58:28:4a:54:e3:aa:16:8a:af:03:c9:d1:6f:db:2d:04:32:43:
fd:a4:b8:81:da:5c:6d:e9:82:09:b3:85:67:40:c9:cf:69:bd:
c8:71:31:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:19:58 2025 by rpki-client