Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aabaf016-6c40-39c3-922a-64b8f883741a.roa
File: aabaf016-6c40-39c3-922a-64b8f883741a.roa (raw, json)
Hash identifier: mGstBA2ViC87JKEhqIKTQhBJ6axIknyR4DLBX8yHSPo=
Subject key identifier: 24:F0:44:30:C9:A6:3E:CE:8C:8E:7C:8E:C3:B3:4C:B3:93:2A:49:77
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A78A0147213A384804F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aabaf016-6c40-39c3-922a-64b8f883741a.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 172.217.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:78:a0:14:72:13:a3:84:80:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=f12f41c4-f848-4d8b-8ce7-e5aa12844f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:76:66:89:b5:ce:5d:43:2b:1a:b5:59:05:e0:
fe:2b:b5:6c:81:0c:d3:e2:4f:78:d0:2d:7d:42:c0:
ec:52:bd:63:eb:23:d2:14:db:68:83:4c:05:4c:f5:
72:01:9c:fb:74:b9:d8:20:1a:24:86:c1:f5:eb:5d:
20:2e:c0:ee:9a:28:64:4d:cf:a1:65:00:4f:29:1a:
c4:3f:bd:4d:1a:08:60:93:c3:c4:f4:8e:b2:3f:dd:
7e:95:ea:76:32:b1:4b:10:77:0d:94:30:30:38:ce:
de:1b:6a:7d:62:af:51:36:32:06:b6:eb:a3:a0:a8:
f7:f8:fe:48:d3:6e:a0:9d:92:93:62:1f:28:04:2e:
98:b3:8a:6a:6a:a6:76:00:a0:70:3d:c8:df:9f:c7:
5e:d1:66:69:b1:f0:26:60:f0:e3:0a:3b:19:3b:8f:
5f:58:74:4e:e5:8b:a1:17:f9:f9:9f:42:82:b9:de:
6e:2b:72:91:19:63:70:d6:3d:ae:c2:b3:a4:cc:10:
2a:8a:f4:99:33:61:40:ac:62:e6:df:e9:c5:86:22:
69:c0:c6:f3:99:40:c3:25:62:e7:d9:ef:30:c6:e0:
66:ab:3e:a7:e8:1d:0a:9f:6c:b1:28:ce:42:98:66:
d2:ba:be:cd:6d:29:d8:ac:ad:16:df:2a:2a:91:3a:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F0:44:30:C9:A6:3E:CE:8C:8E:7C:8E:C3:B3:4C:B3:93:2A:49:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/aabaf016-6c40-39c3-922a-64b8f883741a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.211.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:0d:90:8a:97:fe:7c:2b:a2:3a:be:bd:0b:74:56:96:55:f4:
16:52:45:ea:fb:e0:8d:c0:1d:53:9f:ec:39:42:5b:ff:88:9d:
6c:c9:48:3c:79:39:43:aa:a5:38:cc:08:29:f1:d0:b7:7a:7f:
b6:70:50:ac:59:f9:1d:42:95:01:90:bb:e9:c5:19:c0:1d:3e:
5a:07:01:37:fa:aa:7a:86:64:f5:00:f1:e1:cd:a4:0a:cd:7e:
c2:37:ba:43:e0:8d:6d:ca:b5:b6:1b:9d:cb:ce:f2:ce:1f:8a:
40:7d:b9:b4:8d:b5:41:f0:f3:6d:dd:90:89:d0:d2:82:04:55:
4e:ab:dc:3c:02:b8:73:cb:57:92:30:f5:29:3d:de:8f:46:d7:
e3:dc:59:d2:24:f7:ce:30:c5:24:40:82:85:b5:21:1f:75:71:
0d:17:2f:a6:99:13:e9:10:50:b4:d6:90:ef:27:ce:c9:a5:82:
a2:08:0a:3a:7e:ff:43:f7:b6:9a:5c:c6:7c:54:1f:4e:c8:cd:
70:65:13:4d:51:5a:b7:3c:ef:b0:db:46:ac:95:a7:51:1a:ef:
b3:bb:dc:dc:f8:6c:58:dd:94:2a:38:88:83:ac:c5:fb:91:a4:
47:52:52:cc:ba:d4:ca:bc:98:2b:6e:17:15:01:e7:39:ff:12:
30:97:0a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:30:09 2025 by rpki-client