Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d72a0de-d977-37c2-8e09-b98637059d87.roa
File: 1d72a0de-d977-37c2-8e09-b98637059d87.roa (raw, json)
Hash identifier: hvfNNuvYhUuwgFNIkdkycUiK6OIDX/SIjgBha00tEzY=
Subject key identifier: C7:7D:6B:D9:D5:A7:E8:06:CF:A1:E5:EF:7A:A5:70:FC:B9:83:44:7E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A2005B876FC8DDD2F03EFA0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d72a0de-d977-37c2-8e09-b98637059d87.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 74.125.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:20:05:b8:76:fc:8d:dd:2f:03:ef:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=e38667ea-9a81-4b85-88fb-fb1768db1601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9b:ae:31:1c:cb:f5:d4:f7:a2:86:0f:92:df:
ef:1e:32:ca:62:16:d5:6a:03:5d:a2:b1:06:e5:dc:
e8:b7:4b:bd:e1:c7:88:03:21:31:51:d9:91:98:59:
7e:70:d0:65:f4:64:ec:a3:87:55:1c:9c:54:0b:92:
79:cb:fc:c4:10:da:f4:4d:74:83:2f:de:59:03:4d:
83:fe:e9:9e:65:85:72:85:1d:a1:c1:95:2c:83:52:
8b:5b:c4:31:4a:11:68:26:5f:fe:85:e6:48:bc:9f:
e7:a0:89:45:14:0a:37:5a:29:8b:e2:5a:f3:c3:01:
f2:c0:6f:54:98:e5:4f:64:13:5d:31:3b:05:28:bc:
e8:05:42:6f:fc:08:78:76:3f:23:8c:51:54:f0:5e:
e1:d1:64:80:2d:e4:6c:39:0c:c7:df:f8:eb:cc:c7:
a4:38:93:93:40:d2:31:d7:cc:3c:91:53:44:43:7b:
e1:5b:1c:bd:84:ad:e9:0c:17:64:28:21:20:64:7f:
10:2b:97:1f:58:45:67:4e:24:05:a0:b3:d5:ad:39:
73:15:73:88:18:7c:b4:2f:13:bc:28:be:51:04:36:
94:f0:42:65:17:d9:3b:38:83:e0:cb:06:5f:7a:7f:
d0:db:1d:96:f4:2a:7e:f7:3b:cc:57:67:33:3c:05:
e7:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7D:6B:D9:D5:A7:E8:06:CF:A1:E5:EF:7A:A5:70:FC:B9:83:44:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d72a0de-d977-37c2-8e09-b98637059d87.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:5c:37:a9:24:62:fb:42:4b:c0:83:58:44:d8:e0:c1:64:b7:
b2:92:51:64:f6:3e:b0:95:80:dc:46:da:c0:02:54:69:e4:c7:
91:f8:63:95:34:b3:35:3d:fd:fd:77:8a:54:89:73:4f:39:1c:
b8:4b:b1:dc:91:52:f2:e0:d2:d3:f2:77:09:8e:f1:40:9b:d2:
54:35:e1:6e:4c:10:72:90:72:15:7a:29:80:c6:af:05:af:ca:
34:eb:bd:38:7d:13:05:db:03:d9:f7:77:4c:ed:db:6c:86:1e:
19:f4:18:0e:fd:7d:eb:8b:37:29:2e:3c:03:28:18:72:8f:b8:
7e:e3:97:6c:bf:3d:47:a6:44:51:32:42:a9:2c:2f:bc:d7:d8:
ea:f9:7c:7a:95:0b:d7:fd:76:bd:e4:8f:31:88:06:b0:1d:8d:
49:ac:74:d6:a8:0a:9b:60:00:e5:de:d0:82:36:39:78:5f:42:
32:98:43:4e:dd:b4:20:24:40:78:00:55:63:3b:38:1c:6c:7e:
2f:82:43:2a:bd:a7:e4:74:3c:2d:ee:5c:9e:52:df:39:77:2b:
7b:d8:34:70:fd:07:fb:f6:92:90:32:83:c7:85:bf:f2:42:67:
07:bd:09:4f:87:a3:6b:90:b3:78:a1:ef:d4:45:d5:9d:d5:a1:
24:8c:76:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:57:52 2025 by rpki-client