Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa
File: 8602a905-b263-30a4-8140-3c7d39eccf04.roa (raw, json)
Hash identifier: GPrqXqzXwJvdJFpZn+eYuZ4u1xw8yoKbHeTiG7g0KEA=
Subject key identifier: 82:83:6D:9D:1E:B3:FF:F2:6E:5A:15:E7:8B:A0:3D:73:70:B3:00:B2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C582148DF911DB7555E51ED0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 36040
IP address blocks: 209.85.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:14:8d:f9:11:db:75:55:e5:1e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=44c9c8f0-809c-4bbc-a6e5-abe6cbad6738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fd:b2:38:cf:83:14:10:e5:f0:35:c2:aa:68:
21:cb:54:8e:15:c1:2e:93:cf:ca:c9:bc:bc:d1:9b:
81:00:67:3e:73:41:dd:07:4d:11:56:83:c1:91:b2:
46:d1:d0:51:47:13:8f:4e:2a:b8:1e:8a:06:a6:51:
ca:2f:64:a8:82:93:51:c4:b0:8d:7d:7e:7a:2b:01:
20:3a:28:9d:62:63:6b:d8:ef:ee:16:83:1e:40:20:
83:2a:ce:cd:ef:9d:ae:44:09:22:27:55:02:f6:fd:
cb:b1:46:17:e9:5c:21:f6:dc:27:1e:12:dd:10:af:
88:12:3c:e8:ee:ac:f8:9b:42:db:e5:66:d0:8d:c5:
97:f5:c4:28:13:57:00:84:71:f4:7b:29:8f:cc:02:
27:36:9d:b6:95:6d:4d:5f:2d:fe:55:32:dd:7e:f0:
b0:63:2e:43:46:4d:4c:cd:1a:21:cf:45:22:5a:22:
4b:c5:1d:47:64:be:0e:d2:6e:af:6b:48:04:09:c5:
af:c3:4f:8e:1a:1f:dc:85:51:45:58:bb:05:e5:c8:
91:08:87:e8:a5:b7:a0:3b:8f:30:d8:41:49:96:26:
e0:14:6d:1c:14:07:a0:66:0f:e9:5f:75:99:21:fe:
cd:d9:31:7b:04:1b:db:46:03:34:8e:6f:a0:0b:52:
2b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:83:6D:9D:1E:B3:FF:F2:6E:5A:15:E7:8B:A0:3D:73:70:B3:00:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8602a905-b263-30a4-8140-3c7d39eccf04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
209.85.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
93:2f:0c:b2:21:47:27:66:55:6c:bc:10:69:4a:f0:c6:87:81:
ef:c9:cb:50:fe:35:19:a7:b8:54:9c:d4:2e:96:c6:8b:ef:da:
b6:76:fa:8a:e8:cf:7b:04:71:5f:de:0c:58:0a:74:8a:23:85:
e1:55:b0:fa:d7:eb:10:a4:a7:0e:f0:d4:f0:1c:dc:f8:ef:1c:
76:2d:81:5d:86:a9:a1:8c:2e:99:b4:d1:23:1e:7d:71:01:78:
f0:aa:d3:76:3d:8f:19:2d:7f:27:9a:bb:ac:dc:47:83:b7:8b:
8d:05:45:34:47:fc:27:cb:8c:ef:2f:6c:4f:d5:87:0b:1c:bc:
c6:e4:ca:a9:a5:bb:b2:37:8c:d6:93:63:23:03:f5:ed:fe:4b:
e1:8c:07:36:d0:ff:bc:3c:1d:63:14:17:64:aa:53:f7:61:77:
3a:95:67:de:5c:2b:51:7d:00:7d:7b:5a:89:f7:e8:0f:7d:77:
69:0b:f1:16:a3:bf:11:ff:84:7e:c5:c7:f7:36:e5:fb:76:f2:
ea:53:09:82:0a:cb:c9:0b:04:ea:23:c1:bd:dd:c4:b5:e7:55:
00:25:1b:42:53:2b:84:40:5d:5f:b8:6a:56:69:04:96:9e:1e:
bb:32:47:55:cf:ab:76:e3:b0:d7:b0:c6:af:ab:fa:b6:cb:d0:
13:b2:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:03:54 2025 by rpki-client