Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d52876f-d752-3d03-958a-59f9f3b98382.roa
File: 2d52876f-d752-3d03-958a-59f9f3b98382.roa (raw, json)
Hash identifier: 7kZ5EPH9xA5ZQLe/i99m+XGFXRRHkZzN2XN5vjQZt3w=
Subject key identifier: F7:F8:56:69:69:05:C0:02:BD:D2:07:6D:90:FF:F7:E2:56:D7:27:4B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584309FF61395824E7F05F3BC280
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d52876f-d752-3d03-958a-59f9f3b98382.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 172.217.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:09:ff:61:39:58:24:e7:f0:5f:3b:c2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=2f47d064-0efe-46f0-ba2a-46c4ed958fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:38:89:f2:c6:ff:bd:05:90:eb:e2:5e:83:24:
b0:8a:60:cf:d5:08:36:73:36:1c:04:e0:8e:12:0f:
9c:f0:5e:72:f4:f3:36:98:1f:ed:ec:1f:91:c4:17:
f1:72:e9:ce:b0:52:53:24:9b:56:f4:07:a9:a8:8f:
23:58:bf:c8:66:0e:03:ed:19:f9:0a:95:0e:55:3a:
45:0e:d9:1c:32:f1:8d:0a:bb:fe:11:50:31:ca:2d:
3a:06:b2:21:e3:08:ed:7a:f3:ce:fe:23:8d:99:29:
b4:73:00:c6:8b:8d:ad:f1:19:75:83:70:dc:43:f5:
f5:d4:2e:45:20:63:c5:5e:e9:1a:77:c5:32:19:8b:
a2:75:85:68:1d:b5:8d:96:e1:51:f6:6a:34:ca:b2:
14:fd:3a:f4:aa:77:42:1a:77:e8:05:e5:27:59:77:
09:5e:ee:b7:6c:ed:ad:b1:8a:4f:e0:d7:24:0a:f3:
b7:4c:98:16:e9:d7:4f:23:d2:d8:40:d3:13:ab:b8:
8d:73:a6:6d:35:ca:21:d0:87:09:59:8b:38:7b:7a:
07:3d:7d:20:53:78:f3:e0:9a:7b:1a:3d:fa:f4:88:
5e:1b:7a:41:ea:68:24:28:f8:03:77:d7:b2:6e:9d:
96:34:7d:43:fa:6f:6f:fa:c5:9c:6e:e1:00:1a:9e:
28:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F8:56:69:69:05:C0:02:BD:D2:07:6D:90:FF:F7:E2:56:D7:27:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2d52876f-d752-3d03-958a-59f9f3b98382.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.214.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:99:3d:d8:12:05:4e:36:19:d3:b3:45:4a:93:c0:e5:0e:cd:
96:5a:36:fe:e9:d1:e8:ce:e6:c7:0a:47:c5:0f:aa:9f:28:ff:
a3:8f:60:a7:f3:f7:b2:21:59:8c:58:a7:29:b5:b3:3d:75:68:
7e:1c:c6:3a:56:39:48:68:81:c4:86:85:32:72:68:ed:08:90:
47:46:27:b6:a8:5e:0e:b8:58:83:4a:8e:73:22:88:75:0d:f1:
97:da:98:fe:9b:db:ee:26:97:45:9b:f2:20:6d:97:c7:44:3f:
87:3e:86:7a:c3:aa:2a:ab:e8:56:07:d5:7a:f6:ca:ba:d3:93:
52:42:d3:a5:39:c3:f3:61:32:38:96:12:e3:a5:9c:b4:b7:dd:
0a:dd:40:76:57:ad:79:f4:fb:70:0e:19:e4:64:02:57:76:1a:
97:99:8c:38:d4:57:71:46:81:8a:7a:60:29:a1:d3:77:44:5b:
3a:9a:a6:4f:87:cc:4e:91:0a:26:4a:fa:bc:56:e4:1e:4c:50:
da:39:14:4c:07:96:fc:d1:7d:7f:54:51:bc:c7:ec:37:8d:27:
f3:32:3d:cb:8f:36:4f:4c:36:35:88:17:84:72:98:ec:d2:29:
78:ae:43:82:a3:4f:38:06:2f:7c:73:06:17:29:14:5a:1f:c1:
e6:c5:8c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:52:43 2025 by rpki-client