Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f78efb23-6782-3c4f-8332-9c1ccd9c62e1.roa
File: f78efb23-6782-3c4f-8332-9c1ccd9c62e1.roa (raw, json)
Hash identifier: Iutt2tPodRia9Sc2Uej5JfsY2lNWjUk1dNmUsOeIhqw=
Subject key identifier: 09:D5:C2:7F:BA:C3:6A:D2:E3:EB:C9:FC:D7:3D:31:D4:B5:58:F5:76
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA790660570A33EB170C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f78efb23-6782-3c4f-8332-9c1ccd9c62e1.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a7:90:66:05:70:a3:3e:b1:70:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=ad5e1d08-c321-43f6-9ed9-571e1ac5fa04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:46:e1:5d:cd:63:26:b9:75:c7:ed:62:80:bb:
03:71:53:45:5e:e6:2c:ad:82:4c:d4:38:97:48:86:
d6:78:81:6f:f4:ae:71:ef:e9:88:59:50:01:89:45:
9d:57:90:df:4f:41:54:98:24:3f:e7:80:78:cb:e5:
ce:ea:27:32:a9:93:d6:ae:f5:57:c7:4a:f1:71:7f:
ac:39:f0:f1:b9:5d:54:d6:50:4e:b2:7e:af:d7:10:
5e:18:61:ba:2f:0e:3e:19:68:62:cd:59:1f:d9:ca:
9a:1a:9e:5e:f9:8e:97:ec:3e:71:46:38:9d:af:3c:
d5:c3:11:39:57:63:ea:0a:c3:c9:75:f0:88:0e:d6:
a8:c8:a3:3b:09:e0:bb:a2:32:7d:57:d2:ee:75:69:
d4:44:d9:86:8e:c6:ef:ab:93:27:f1:88:e1:b6:a9:
ff:25:3e:3a:c0:aa:3b:ee:ea:4a:b2:ab:6c:3e:31:
a0:57:bf:30:b6:51:f2:ce:2f:02:ae:64:b4:c5:7c:
26:12:e5:b4:22:b6:f6:bd:f7:f9:d7:10:b2:a4:8f:
65:29:5c:0e:68:c5:ff:18:12:f0:0a:43:a1:27:49:
1a:a0:91:83:72:a6:fb:3b:7f:57:0e:97:df:8e:9c:
ff:a1:24:3e:ff:d0:61:df:3a:52:27:30:b8:28:0a:
8f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D5:C2:7F:BA:C3:6A:D2:E3:EB:C9:FC:D7:3D:31:D4:B5:58:F5:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f78efb23-6782-3c4f-8332-9c1ccd9c62e1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:81:5e:2e:47:ba:ea:26:6b:49:1f:36:d0:79:8f:13:b1:d0:
5e:5b:78:32:70:1e:6b:1c:c9:c0:bb:6f:63:a2:78:4a:00:2f:
13:4b:42:81:e7:bc:05:71:91:1e:64:43:31:78:dc:31:42:65:
ed:8d:92:f6:a3:a8:a3:39:0e:3a:8e:24:e8:16:d0:a5:2d:37:
39:3d:b5:41:8d:68:6b:0a:ac:2a:1b:a8:78:7b:66:72:65:2a:
e9:2a:26:e1:0d:67:34:0a:83:ae:9e:14:40:eb:32:22:84:1b:
39:cf:32:d5:3c:2b:f8:5b:d0:2e:76:e8:1f:df:16:6a:a1:f2:
24:04:8a:79:20:ff:ab:c1:bd:5a:cd:fc:34:0a:72:cd:4e:d6:
52:57:17:f9:ff:74:29:94:b9:51:84:12:b6:33:ec:a6:51:23:
4f:c2:bc:f1:24:50:39:4a:90:5e:4a:08:28:00:da:97:f9:3c:
3c:c0:13:7a:33:82:8a:24:34:b5:49:b5:d6:52:21:f0:bb:8f:
71:bf:17:e0:6e:0c:80:80:9a:5b:02:d6:56:71:71:69:71:07:
65:55:58:21:cc:e1:10:8b:92:76:92:a4:d9:0f:7e:bd:a1:b2:
eb:07:5c:fd:c3:de:7f:43:41:32:93:fd:63:b4:4f:d1:b8:a3:
6f:ac:af:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:42:45 2025 by rpki-client