Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa
File: b803768f-6f65-3934-87a6-cba4dc1d2977.roa (raw, json)
Hash identifier: 5nOK2lQ4EQzYOC7RUAGttq7GW9lBSV8HkpjZ0tMPM14=
Subject key identifier: F4:5A:A2:40:91:13:97:29:55:BE:F1:4F:C7:41:E8:40:7F:B6:5D:27
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB1540D300BC74BA4DF80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 172.217.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b1:54:0d:30:0b:c7:4b:a4:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=95ad7732-15a0-411c-aede-912801fcdcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e4:9c:ae:4a:bf:25:b8:f1:e7:42:64:bd:5f:
66:6e:ad:e7:85:51:b4:e3:0d:34:61:19:3a:7e:72:
d0:e0:52:67:e5:a0:eb:42:ac:21:18:ee:88:fc:b2:
c0:dd:41:57:25:25:ab:47:14:9b:6b:db:5e:e1:01:
e6:7e:29:84:29:ca:46:d6:11:cf:63:78:7a:57:3b:
f8:94:cf:2f:47:63:43:ee:5b:e6:4f:52:f6:50:04:
7b:e3:2f:74:8a:11:aa:b9:a7:b9:7f:ee:7b:1f:51:
98:dd:36:38:fe:f6:a5:ad:b4:2e:01:8f:dd:90:2f:
75:35:6a:86:3a:01:3e:63:11:f9:a1:84:03:a4:e6:
54:49:72:41:0f:44:ce:8c:1f:1b:55:ae:5c:22:59:
ec:e1:12:a0:75:db:68:69:47:b0:d8:75:2d:ec:ad:
f1:30:45:80:54:74:a6:21:b9:94:61:a1:53:10:20:
9c:1f:7d:d6:ce:bb:0f:96:aa:c0:c6:93:4e:59:a3:
83:08:b1:97:95:1f:e5:29:6d:99:89:d0:4e:79:2a:
cb:e2:64:7e:cc:b4:6e:57:54:ab:00:a9:6f:6b:2f:
99:19:09:70:c5:45:5a:41:a0:7a:22:b2:a9:bb:c0:
c3:6d:53:87:79:4e:68:0b:d7:ed:44:9f:16:9e:86:
d0:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5A:A2:40:91:13:97:29:55:BE:F1:4F:C7:41:E8:40:7F:B6:5D:27
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/b803768f-6f65-3934-87a6-cba4dc1d2977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a5:68:fc:d2:74:ed:ca:dc:3f:e1:8a:3e:31:43:0c:29:a3:88:
aa:a9:94:93:26:2c:b6:39:51:96:af:99:da:b4:b2:37:c5:2f:
96:fa:8f:82:cf:0e:ef:26:89:95:65:50:bf:e3:b2:78:b5:6c:
6f:51:2b:66:6d:11:b4:85:2d:7c:91:7f:df:d1:55:60:1d:dd:
2a:bb:25:6c:23:f5:50:f3:57:4f:25:2a:1e:36:68:92:e7:71:
cc:d7:4c:55:f9:5e:09:17:b7:e9:1b:4f:71:38:7e:09:13:57:
eb:9d:28:3e:1e:ba:c0:44:48:09:ef:07:a7:f8:b1:01:f6:4f:
da:4a:bc:57:ef:3c:fc:b2:0b:80:8d:20:ea:8a:a0:37:85:21:
72:0b:5f:f4:74:05:6f:c7:0d:9f:f7:94:ad:29:ef:4b:71:b1:
5a:86:a2:c6:01:7b:27:a4:b1:86:6d:6f:3a:f6:2e:4b:6c:d8:
54:ee:e6:7a:7d:fc:51:d4:7a:e5:c3:1c:bd:98:80:0d:04:9c:
6f:cb:04:30:20:7e:7e:9a:83:26:3c:53:c9:cc:a9:f9:b4:dd:
4c:1f:33:27:f4:bc:97:53:f8:20:bd:e3:14:ad:57:3c:51:eb:
11:28:6d:e2:10:d5:a1:66:a2:da:6c:b5:a2:dd:2d:3c:60:2b:
32:68:46:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:56:04 2025 by rpki-client