Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85b3c63e-8456-30e5-a327-96b8ceb57878.roa
File: 85b3c63e-8456-30e5-a327-96b8ceb57878.roa (raw, json)
Hash identifier: gDqiPRlE34MP4K5IFnmrNthX1arlk/mODbMXOrhSDzU=
Subject key identifier: 04:7D:94:34:31:DD:44:A7:E9:F5:95:41:DF:35:7B:0A:18:00:71:CF
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328583AA7B84FC8006D008C5A569BE8
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85b3c63e-8456-30e5-a327-96b8ceb57878.roa
Signing time: Tue 20 Jul 2021 04:00:00 +0000
ROA not before: Tue 20 Jul 2021 04:00:00 +0000
ROA not after: Sun 22 Oct 2023 04:00:00 +0000
asID: 15169
IP address blocks: 172.253.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3a:a7:b8:4f:c8:00:6d:00:8c:5a:56:9b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jul 20 04:00:00 2021 GMT
Not After : Oct 22 04:00:00 2023 GMT
Subject: CN=009d71fb-7848-406e-8aef-0fc524bdbd34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:74:64:ab:43:c8:0c:09:6a:a6:c7:15:00:3e:
83:37:e4:a3:d6:10:9c:e0:96:d2:4e:43:7d:28:b3:
bc:4b:0a:2e:87:da:8a:5d:82:6f:7c:ba:7a:fe:fb:
9c:a4:59:e3:38:57:3c:db:9e:d6:d0:5c:bb:3f:fd:
19:1f:a5:f8:db:8e:a2:56:d1:1b:68:64:a5:af:8c:
5f:9f:41:05:3f:ef:73:68:67:ea:fb:d2:c4:dd:8c:
68:8e:b8:e3:1f:28:dc:d2:06:f8:8b:d5:0b:ff:b7:
14:1e:72:60:a4:3d:ab:30:a6:15:fc:8a:3f:a5:71:
bd:4e:fe:b4:30:d8:cb:ff:e1:fa:5c:88:c6:4d:07:
21:f4:68:43:39:7a:a8:f6:29:31:c0:34:3f:52:8d:
63:d9:d2:1c:58:d3:cb:af:07:3e:53:2a:38:1b:a0:
e2:fc:8c:46:f3:04:5b:ca:62:b7:1f:44:d5:69:ef:
f4:56:0e:7c:05:29:c0:d4:8c:f5:f5:a2:8b:45:bd:
ac:20:f0:8f:d1:af:59:1a:66:58:0e:72:56:de:28:
f4:1a:54:b3:b5:5d:66:39:b2:83:cc:dc:cd:fa:38:
d7:0c:9a:f4:56:e7:de:84:9a:b8:02:69:2f:4f:59:
81:dc:09:dd:85:1e:aa:30:00:11:06:3f:26:30:d0:
3a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:7D:94:34:31:DD:44:A7:E9:F5:95:41:DF:35:7B:0A:18:00:71:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/85b3c63e-8456-30e5-a327-96b8ceb57878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:d5:4c:44:e4:5d:2a:74:f3:82:d6:29:ce:d2:2d:01:e2:0d:
8d:66:a9:1e:20:58:b2:59:87:c1:53:a8:1f:2d:6e:20:1c:94:
ab:dd:92:9c:3d:0f:66:4e:c0:28:53:3f:f1:58:d9:24:0b:6c:
d2:41:21:8a:06:a1:b5:b0:2c:b9:e1:ea:78:1a:42:73:36:84:
50:b5:9b:47:5d:89:51:f1:52:55:55:a9:05:25:b8:a9:50:9f:
b4:4a:09:a9:5c:57:ed:f6:5c:83:2f:17:ee:28:eb:50:d9:fd:
2a:d2:31:62:0e:7a:e5:2c:2c:fe:21:5b:10:25:d0:6b:a6:96:
74:90:7f:87:4a:14:34:54:8c:45:a4:44:f0:86:5d:84:b5:11:
c4:af:8b:51:92:05:eb:ce:b5:6c:e9:e4:3a:15:11:30:81:97:
75:f2:84:ca:fa:01:96:14:28:13:2b:ff:2c:21:30:ec:65:c8:
55:39:c7:a7:6e:18:60:56:b8:1d:52:bc:93:8b:67:3a:9e:57:
56:77:e7:7d:e0:a7:2d:cd:32:3c:b5:bf:30:f2:43:e7:ae:12:
7a:62:e0:e6:d7:a4:69:d0:a7:08:d2:92:c0:7b:01:66:ad:a8:
82:ce:0b:9e:2e:0d:ac:87:ca:b2:79:07:5a:34:40:99:d2:70:
41:06:8e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:04:57 2025 by rpki-client