Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa
File: a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa (raw, json)
Hash identifier: pN0Kp9sJJg3FMTWoENe69qnRWkzzbhdMDjZDIbd5s8A=
Subject key identifier: 16:78:41:88:8C:80:33:B7:D9:73:96:8D:08:ED:E0:AE:DC:04:AA:6A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B32777FDA8E4A1F752226
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 209.85.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:32:77:7f:da:8e:4a:1f:75:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=63009d48-e691-4f45-b92e-ed2f7da8c916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:ef:1b:be:0a:b3:dd:bd:ee:84:25:5f:d0:
77:a5:fb:c2:e0:bc:e2:58:34:f8:f4:7a:be:62:87:
4c:12:52:60:04:9e:5d:df:3e:89:f7:96:8f:7c:1c:
56:a3:3c:f9:28:45:2e:e4:e8:d0:6d:28:26:69:88:
b9:1a:62:93:a5:9a:4d:77:1b:a5:7d:77:f7:77:14:
6e:38:a7:58:7d:03:3a:63:6d:ec:37:5e:a9:b0:08:
39:c6:66:bc:d1:d5:4d:7a:e2:29:56:f5:97:5c:58:
f5:70:e7:8b:db:1d:16:61:f4:45:fa:19:bf:bf:45:
6b:af:5b:b9:e3:52:f4:41:53:6e:8a:a4:45:c7:9f:
1e:f7:42:b1:a6:0b:7f:23:5b:0a:4e:aa:d8:71:2b:
bf:c7:95:96:bc:46:99:eb:87:e9:fe:e8:1c:b2:6b:
4e:b5:e8:b1:01:03:e3:84:6c:c5:3e:f7:66:c5:d7:
de:f3:58:91:ee:04:9c:67:20:3f:6a:a3:63:66:ac:
1f:39:5e:4d:12:a6:70:61:4a:39:5b:66:b5:d8:81:
78:e6:29:ed:61:eb:8f:81:f2:ec:0e:88:40:e5:74:
59:f6:ae:28:44:cd:c7:31:f0:56:28:97:91:d7:f5:
aa:61:26:73:bf:de:70:fd:ad:34:99:a8:58:04:37:
f2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:78:41:88:8C:80:33:B7:D9:73:96:8D:08:ED:E0:AE:DC:04:AA:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a7952bc1-e1d3-33dd-9684-9c9b0b925c67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.145.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:2d:c8:82:a8:82:c8:a5:78:fa:b3:57:d2:27:e5:7a:ac:b4:
d9:2b:2b:00:8a:a3:31:3f:90:54:f4:da:6c:f5:c1:a2:35:49:
c6:8a:37:fa:d8:4f:3d:29:61:ee:92:e2:7e:39:d4:8e:1a:8a:
a5:b2:ea:03:29:4a:e1:3c:1d:11:80:69:97:ba:15:18:93:41:
28:6d:65:46:af:4a:f5:bf:8a:ef:21:69:d9:26:7e:47:e3:da:
cd:6e:4a:f1:c9:61:09:5c:c2:73:5e:eb:a2:01:b3:10:e1:f6:
1b:50:a1:4d:05:e9:59:15:8e:43:89:ea:5c:c9:ad:b5:ce:3e:
eb:cc:a2:71:1e:d2:e6:f4:38:50:42:ba:18:05:dc:85:f1:27:
dd:ae:c1:d7:9c:d4:54:f2:9d:0f:57:6b:64:1a:49:40:78:56:
44:c0:6f:d8:c7:6f:e4:14:4b:c3:92:a0:12:f9:ff:77:5a:66:
b9:1d:68:3a:c7:a4:a6:eb:17:21:10:92:f5:f4:93:82:7d:a3:
0d:11:8f:1e:e4:f6:9e:7b:b2:2e:3a:47:9d:c9:6c:08:83:d4:
5b:f4:a3:b9:a1:e9:52:0c:d4:5a:99:fc:54:27:09:45:0f:e3:
0e:6a:ab:25:4a:e9:8b:eb:05:4e:73:45:a4:d9:65:7f:a4:78:
85:09:97:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:24:27 2025 by rpki-client