Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa
File: de6a6b49-15fb-3327-a988-9139a73a70b1.roa (raw, json)
Hash identifier: nSgNXQlfxVTsdzK2U8pV6arfcjnEitOg6DEQeM1Z0kk=
Subject key identifier: 62:C1:03:B5:A7:38:4D:83:13:DC:F1:EE:A4:E7:7D:B4:76:7D:D0:A9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62A9A38A10960E8A0E99FC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:9a:38:a1:09:60:e8:a0:e9:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=8e3b6459-cbc6-4012-b945-b4c72e8587f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:d5:3a:52:3e:1e:e2:6b:8b:f7:0a:c0:1e:
83:05:5a:34:55:08:c1:47:28:41:4d:f9:50:85:16:
b5:02:75:5a:55:fe:a5:ce:0c:4c:73:c9:f6:57:16:
4b:38:b7:e0:f1:36:14:69:23:39:0b:bd:13:d8:26:
76:cb:f7:f8:e8:54:af:11:1a:6e:7c:f1:70:7c:0e:
e9:eb:a7:6b:26:a8:1f:8b:d6:9c:cf:e9:3d:71:76:
08:7a:d7:1f:8e:cd:05:cb:52:bc:88:b8:97:8e:02:
31:2a:a7:11:67:c2:65:b7:a7:16:82:c6:0e:9d:4e:
a6:36:e1:3b:d2:41:13:a4:e7:35:03:4c:0e:05:2a:
73:be:05:76:20:8f:a2:d7:82:c5:e6:f8:57:41:81:
5d:a3:da:7a:ba:d6:0d:62:d9:7b:68:a9:18:47:a8:
61:ef:13:9d:12:8f:4e:ce:3a:38:0b:31:01:89:bb:
c8:fe:2b:e8:31:d5:d6:ee:18:2a:88:34:bc:8b:54:
58:d6:ad:76:d6:a1:1f:fe:90:97:11:d7:b3:f8:8d:
00:9f:92:e2:c6:fc:4c:bb:1e:94:09:14:f5:c8:96:
dd:de:5d:e4:3d:e8:0c:2f:07:e2:ce:de:a2:0f:c8:
f0:1d:4f:e9:3e:11:9e:1c:ae:14:08:dd:be:d6:36:
d6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C1:03:B5:A7:38:4D:83:13:DC:F1:EE:A4:E7:7D:B4:76:7D:D0:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de6a6b49-15fb-3327-a988-9139a73a70b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:f7:04:13:4f:11:59:3d:81:70:13:b4:d5:60:7b:60:a3:40:
92:e5:95:6f:61:61:14:d0:aa:51:fd:c5:14:4e:90:c1:61:3c:
e2:d9:9b:9d:2a:de:63:42:e4:15:72:0a:7b:67:57:93:36:57:
12:2f:a0:20:0a:34:d0:50:95:b0:98:61:3d:01:d4:55:f2:28:
d5:6b:76:71:3e:a1:ee:96:fd:9f:73:8f:4c:61:46:d7:e9:3c:
a3:b3:0f:22:7f:1a:1b:9f:f1:b9:17:7d:09:5e:4d:36:5f:a0:
42:ba:1c:44:8d:5e:e3:79:75:82:f0:3d:a3:53:77:81:92:51:
85:1e:98:8e:df:4d:ba:48:8f:a0:ea:a1:a4:89:6a:77:ae:cb:
b7:66:9d:63:9e:c2:30:00:76:f0:ac:dd:7a:f7:4e:d0:3e:d1:
ea:5c:04:9e:e6:0b:ff:2e:32:a5:df:dd:14:e1:0b:51:3f:3c:
3c:93:cc:eb:50:59:cb:bb:3d:d5:aa:cb:54:9c:03:e2:a3:21:
19:92:c0:8f:5c:d4:3c:78:a8:a8:61:3d:ef:77:59:ca:8d:be:
fc:9e:6b:a0:d8:08:3f:73:52:43:2c:a5:e1:c6:7f:ee:d9:ad:
18:fb:d0:7f:44:32:9f:1e:b7:13:b6:4e:a5:d6:44:04:1d:4d:
f8:86:77:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:08:20 2025 by rpki-client