Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa
File: bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa (raw, json)
Hash identifier: pFKawRy/Kw/EmIdbUwAWVBip6FUENNEZvGVeqeHzvsE=
Subject key identifier: D4:38:89:48:CE:D4:DB:47:94:83:C9:29:BF:63:D8:C4:E3:5C:1B:7B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AACC708C51E25D9E2D440
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:ac:c7:08:c5:1e:25:d9:e2:d4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=a84ebd85-b382-4ddd-ae71-42a04baa6165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:33:2d:b9:42:d9:a1:bc:55:10:f7:f4:b3:a3:
9b:0b:6a:61:21:5f:3d:39:e4:89:f1:a8:b6:03:91:
7c:36:4e:be:a2:2e:57:33:1c:c1:b1:a3:50:ea:e2:
ce:87:f5:a7:72:7d:43:07:b1:06:b8:4f:71:17:59:
d5:3a:7b:30:84:08:bc:b4:1e:09:d2:5d:bb:5e:f6:
87:43:2b:69:15:17:f8:03:99:96:17:9d:a3:7f:44:
85:e8:ec:5a:aa:cd:82:da:8b:56:f2:0f:05:33:dc:
7f:3f:6d:6f:9f:b2:c5:04:77:76:f6:7c:88:e3:1e:
f5:f3:2c:58:b2:5b:b1:6b:75:b3:33:14:06:34:dc:
d3:90:79:28:0d:c8:82:db:bb:0c:ed:a2:41:5b:14:
2f:98:4e:e7:4b:26:a0:20:cd:8a:c5:54:36:ae:7e:
ab:7a:e5:16:36:1a:b2:4f:83:29:8d:4e:7d:33:74:
a2:42:2a:89:73:fa:78:49:81:be:89:91:75:5c:a2:
6c:e4:e8:92:ea:81:82:80:42:3d:2a:69:7d:10:84:
30:cf:8d:9a:07:94:c6:9e:09:02:63:64:b3:4c:37:
d0:a5:3d:99:b8:d4:ab:bd:da:34:27:77:96:78:cd:
fc:d3:ee:52:35:31:ec:f7:73:91:59:3e:a8:fa:c8:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:38:89:48:CE:D4:DB:47:94:83:C9:29:BF:63:D8:C4:E3:5C:1B:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bd7d0bdb-a183-3a95-9a3b-60787423aac3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:4c:22:92:da:a3:f9:5b:8b:78:14:80:1a:65:4e:3c:93:7f:
5b:c9:bc:12:12:40:0a:c5:90:ce:48:58:85:cf:51:fd:89:ec:
36:42:fd:b5:1b:c5:aa:3d:f7:1b:03:ac:fc:e9:6c:6e:44:56:
12:5c:35:5f:e0:c9:37:ec:5d:b6:a9:22:46:67:57:d6:1d:6b:
a8:d6:ae:cd:6b:55:51:23:14:25:8f:ee:69:16:13:70:36:c2:
71:32:47:87:69:0a:6e:88:d0:c6:30:69:96:ec:92:23:a0:a9:
56:af:22:53:2f:14:7c:94:91:a3:10:e8:03:1b:52:a2:5c:53:
aa:7e:47:15:0e:c0:b6:7f:0a:23:35:ad:6e:e8:dc:fe:d9:e9:
0b:5f:3a:9d:1a:79:92:5b:e3:1c:99:8e:96:07:33:ac:94:88:
64:ca:76:c8:a7:f1:6d:2f:72:29:15:36:e2:44:74:d4:8a:1b:
c1:0b:e7:69:92:6a:5e:d9:23:3d:7a:e0:c4:ed:15:3d:8f:70:
3b:6b:42:5c:62:af:7f:4c:b3:98:07:8f:6b:e9:e2:c6:52:35:
e5:c4:bf:14:11:23:7e:e2:5c:55:10:a9:41:b8:c8:e7:58:32:
25:6c:04:54:5d:d6:a3:00:e3:2f:46:4c:8d:41:de:4a:39:7f:
c9:cd:0b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:02:04 2025 by rpki-client