Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa
File: daf989db-caa5-35ae-bda5-779962f46d3b.roa (raw, json)
Hash identifier: MQ+2q9FUfRR7bJoWNtqKSFkE7khGVljrYEorAktKiM8=
Subject key identifier: 07:56:2F:85:FD:B2:11:0C:25:92:60:40:98:72:B9:3A:6F:0D:63:E6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F4D435440280CB39D14F80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 74.125.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:d4:35:44:02:80:cb:39:d1:4f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=8f0e4718-8fe8-4b2c-bc5a-04c5735efe95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ba:73:f5:9e:fc:dc:f4:ab:dd:38:5c:b2:97:
26:7c:37:c8:16:cc:d8:d0:da:88:26:d9:59:74:89:
91:26:b3:0e:46:bc:98:dd:c0:00:d0:5e:4e:8d:5a:
39:71:5f:1b:ff:45:fe:cf:a0:b3:7e:00:4d:fc:d9:
8d:a7:36:34:21:17:20:37:0c:fa:f6:e3:c2:20:28:
5b:28:2a:c5:43:61:7b:95:b5:12:77:f1:fe:de:2e:
c8:4c:92:b8:7b:14:fd:ca:cb:ed:05:a6:59:c0:0d:
6e:9e:a6:78:39:19:1b:41:66:42:39:f2:a3:e1:1f:
4b:ac:f0:df:82:86:c6:9f:3d:99:71:d0:0b:13:1f:
0b:87:da:89:72:1a:3c:4c:dd:19:36:de:29:51:cb:
6d:2c:ab:3b:3a:ed:49:b3:d8:97:73:4a:58:7d:74:
7c:24:a9:23:55:1d:0a:8a:d4:ca:a6:30:a0:d8:ee:
d0:13:5c:a5:81:e1:0e:b3:0a:60:77:b5:03:8f:2c:
ae:1b:88:6c:3b:a9:45:d3:93:b1:af:f7:fa:40:df:
07:77:dc:04:d8:f0:2c:8a:bc:94:a5:1c:f1:d6:c8:
a6:ac:17:7e:48:34:25:b7:50:ae:21:fa:44:b0:4e:
b0:ce:01:e5:b0:4a:c1:9d:38:f1:6c:9c:01:9e:ab:
c7:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:2F:85:FD:B2:11:0C:25:92:60:40:98:72:B9:3A:6F:0D:63:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/daf989db-caa5-35ae-bda5-779962f46d3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.225.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:e5:15:6d:69:b5:e9:9b:52:f5:52:c4:97:f3:d6:55:f1:03:
f9:17:af:93:c7:37:08:f7:19:69:c6:30:f3:b5:b2:ef:23:a4:
f4:09:59:d3:76:ab:19:f8:f5:ee:f3:91:7e:49:f6:ca:50:97:
d1:75:a0:5c:ca:d2:f0:ad:13:e5:c2:4a:18:1a:7e:6f:4b:6d:
84:c9:e9:39:c3:b4:d4:cf:3a:86:03:46:9e:f8:9a:81:55:94:
93:3c:ac:18:54:6c:a3:9d:43:e9:a1:15:10:b3:d5:50:10:ba:
af:af:c9:3f:0a:9b:c5:49:f6:e2:5f:df:65:04:22:32:09:35:
6f:36:4a:13:f2:c6:19:d7:c4:2e:c7:43:4e:0c:1b:da:32:6e:
e0:56:98:b6:b4:a9:d4:59:d2:6a:4a:c1:66:04:ef:3d:91:ba:
1f:17:89:17:2a:92:b6:28:b1:78:84:fd:26:bd:47:29:62:c8:
c0:31:62:2a:b5:49:bd:a9:34:31:9d:8c:56:0c:a7:b4:42:29:
b9:66:84:07:9c:ba:de:53:2f:9e:df:9d:00:2c:e7:e6:62:e9:
1f:38:24:f1:07:c3:7d:87:3b:e0:94:02:a7:a3:9a:0d:21:61:
06:f6:6b:11:9e:8a:49:aa:f5:4e:73:bd:44:04:12:1e:4b:1f:
fa:b8:a4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:00:02 2025 by rpki-client