Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa
File: eccc049d-f39e-3a01-8af3-e167539adf3d.roa (raw, json)
Hash identifier: x46eLrmlXR0/xLUier2Z7xSTpNqWrbd7RFtT6vU2Q74=
Subject key identifier: 6D:36:9E:FD:C9:5F:D9:43:B1:C6:19:08:FD:CB:69:8E:32:3E:DD:8E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A58E425D23ACEA17E3490
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 172.217.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:58:e4:25:d2:3a:ce:a1:7e:34:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=2cdfc1a4-fb64-4d34-a32a-c609510a1919
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:fc:ac:8f:bb:7e:aa:9e:ad:6d:94:63:c4:
1c:1a:a9:68:e6:55:41:cd:a0:76:5c:23:20:a7:8f:
c3:39:c5:40:42:35:8d:5f:a8:59:c0:bd:16:8a:21:
77:34:76:05:7c:06:53:b5:c6:62:b2:f6:7e:7f:57:
67:a4:e9:40:c5:83:4e:d6:99:23:94:7f:45:ee:4e:
11:22:f7:3e:cb:04:e8:17:ed:de:b4:a4:dc:05:18:
63:12:7c:4f:55:64:82:c7:19:43:35:cf:e0:9b:3f:
3b:38:e3:5b:2f:b7:e2:f0:87:d0:5d:6b:6c:b2:58:
37:b8:87:72:96:ea:a1:65:3b:38:cc:f2:0b:c8:70:
8a:0a:40:cc:90:62:19:b6:40:1c:98:8b:69:69:1e:
56:2c:fb:9c:25:8a:28:1d:10:3a:af:f6:09:1a:e0:
1d:be:20:1e:44:be:a2:08:db:42:0b:35:ac:a1:75:
e9:5e:76:b3:02:b9:54:03:9d:39:fb:c1:07:e2:51:
5c:69:93:8c:51:12:8d:a4:28:f2:a6:67:15:02:a6:
7e:a2:a0:d6:dd:c0:fc:f0:26:4d:2a:8b:5b:0a:f1:
76:de:42:7d:73:a7:ee:d7:9b:56:16:7b:74:fa:0e:
07:91:ca:f6:f8:37:3c:f3:39:1c:36:58:c5:cb:12:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:36:9E:FD:C9:5F:D9:43:B1:C6:19:08:FD:CB:69:8E:32:3E:DD:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eccc049d-f39e-3a01-8af3-e167539adf3d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:33:25:0a:11:d8:67:ac:96:69:66:f6:ca:69:45:56:7c:f0:
15:9a:2b:97:b3:73:a5:42:48:97:04:8c:a4:9e:3e:00:99:1d:
6b:51:8c:17:84:b2:b4:db:5f:57:db:f4:f1:c8:fc:0b:ee:7a:
33:de:46:5c:55:3c:95:0f:85:24:e7:e4:44:b0:63:a5:ab:c3:
4c:5e:47:d2:32:0e:5a:42:b4:1c:0d:89:8b:a1:08:22:a9:15:
f1:56:92:50:e5:5b:b9:4f:92:10:b5:40:1a:94:b7:64:c1:2b:
c5:eb:dd:d1:d7:5d:52:48:f5:43:b9:ac:da:6f:a8:1e:d6:d9:
06:59:94:1d:bd:7e:f6:43:d0:51:e9:1a:c7:fb:9c:f2:35:e2:
c7:69:cc:96:15:a8:bc:58:42:05:b4:92:82:66:a7:93:f0:7e:
33:1a:9a:61:e3:9b:b8:29:7a:ed:0c:b2:26:b9:82:87:a7:bd:
90:32:67:29:51:fd:05:25:6e:1d:e8:45:66:83:c5:02:36:1c:
42:5a:82:94:a1:ef:5a:89:c4:5a:f6:88:8b:f3:6f:24:f4:c9:
64:3d:89:cc:50:74:7f:bd:cf:63:d6:73:53:14:b6:82:84:5c:
84:15:60:a8:d6:b3:0d:61:f7:58:f6:99:50:d3:5a:51:f4:9a:
97:e8:73:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:53:49 2025 by rpki-client