Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa
File: a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa (raw, json)
Hash identifier: jCXaUAPpfVX0YpMtV0RMZ6GgAMdpVJVxCqCmMFUcbD4=
Subject key identifier: EF:A0:36:5F:CF:A4:03:ED:56:F7:93:24:BA:15:0A:7C:8B:FF:59:74
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA11FDCAB8D4D90DC1B20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a1:1f:dc:ab:8d:4d:90:dc:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=b9c43651-3e35-40cc-a5db-27eb56c0c56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:71:7c:60:9a:80:4e:bd:4a:e7:a8:dc:d8:
8b:56:2a:4f:ec:53:10:e7:8a:e4:88:bd:47:d8:c1:
a5:3a:56:6b:f4:b4:3d:32:c1:59:a7:b3:c1:9d:dd:
bd:e8:f9:f8:02:06:87:2d:18:3a:e5:5b:5c:12:5a:
40:70:a4:aa:4b:fe:64:89:7e:05:23:03:d2:15:0f:
9c:06:2e:49:77:ca:54:06:aa:f8:2c:9b:f1:49:56:
ae:4c:84:d7:18:55:42:ec:3f:59:4c:20:ac:41:68:
7e:66:c3:e2:65:a2:ee:8d:44:80:91:1f:4f:33:61:
40:cd:09:77:81:56:a2:c1:c1:a8:c2:86:c2:c7:d9:
2b:42:78:df:52:ff:bd:93:5b:d4:4c:60:19:0d:f1:
af:77:81:78:11:70:7e:cd:ed:b8:3a:1e:dc:49:40:
4a:e7:46:b1:46:b2:b7:f9:33:0a:bc:37:0a:fc:75:
be:7d:6c:1b:77:fa:04:70:55:8c:ec:5a:5f:61:ed:
04:62:36:a4:d1:86:3b:50:2c:cb:5b:17:68:67:94:
04:76:72:9a:68:67:63:c3:ea:02:c6:96:3a:8b:ef:
5e:6f:ac:14:6f:55:f6:5c:93:d6:d6:3a:8e:4a:e3:
e1:33:04:a5:13:49:89:63:2e:c4:8e:bb:c4:c5:9f:
af:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A0:36:5F:CF:A4:03:ED:56:F7:93:24:BA:15:0A:7C:8B:FF:59:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a00bd1a7-02ea-3e71-aeac-f9eb6c155960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:96:fa:01:69:ce:15:a7:86:30:9e:dd:ed:15:e3:cb:f9:20:
26:49:0d:ef:d7:ae:d8:46:d9:6a:6d:65:81:e7:44:db:2d:66:
5c:0c:f0:e4:d6:af:6d:42:88:84:bf:05:d9:c0:4f:74:79:be:
f0:ff:14:5a:a0:08:c0:11:0d:bf:98:fb:ce:1c:c8:56:6e:6f:
28:c1:ad:71:5a:c7:af:a3:ba:9a:bb:bb:82:a4:9f:8e:7c:d0:
ef:ee:f7:14:65:60:1d:47:7c:8c:bf:d2:f0:2c:20:82:5c:fc:
88:8a:78:ee:67:10:c0:e3:ff:92:7d:d6:a4:ed:b4:9e:3d:00:
15:df:d8:07:77:b3:0c:16:8b:81:af:40:25:f0:cb:02:13:a6:
b5:82:78:f2:62:92:1f:49:8f:1f:19:99:16:33:cc:87:81:cf:
8d:e4:0f:84:96:4b:36:d6:f1:62:0a:a7:e7:ab:5e:3e:6d:ae:
2b:33:c5:37:e4:6e:de:e9:aa:da:5d:43:c0:b0:aa:45:56:5a:
1b:34:cb:54:ef:34:75:a6:57:ea:43:8a:1e:ae:24:bd:99:49:
30:22:bf:42:8d:78:79:77:2e:06:0a:00:df:1c:9c:e9:c5:60:
38:d8:7e:d5:8f:2f:21:f9:93:db:2d:f3:6b:84:61:79:6c:cf:
0b:11:34:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:30:31 2025 by rpki-client