Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa
File: 00c8ed4f-37f4-323f-8afb-55168be0c0df.roa (raw, json)
Hash identifier: auuX6Td8/3czyy7m89ll8J17aWD4ruBN8iQOw5mPSmw=
Subject key identifier: B7:EE:8D:3E:54:06:C0:6A:67:F6:BC:62:4F:63:2E:38:FD:6C:DE:81
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58189E6D8AD6FB6397D5080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 172.217.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:89:e6:d8:ad:6f:b6:39:7d:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=57bccb65-d731-400d-9c56-2a05b6f7f8c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c4:8f:a5:9f:0d:80:22:2b:b9:ab:09:6a:aa:
56:a2:36:ee:3f:bf:1f:bf:18:bb:73:8b:da:40:18:
a2:03:ec:b0:ef:98:db:20:1a:53:e1:77:e1:43:f2:
cb:be:8f:cd:d2:8f:ec:64:30:80:5e:5f:37:cc:73:
1d:5e:7a:9f:53:3d:64:07:a2:98:b9:33:4d:f0:ea:
a3:9f:7b:73:c8:7d:9c:0d:54:3f:90:de:b6:03:89:
ee:f3:29:6f:61:46:dc:25:55:18:b2:55:42:39:36:
60:a8:61:55:1d:08:e5:00:40:67:04:89:cc:9e:c2:
cb:be:53:15:28:ac:04:37:a3:8b:de:df:4d:e8:a9:
e6:70:76:05:6b:1f:11:e1:a9:0d:ab:9d:ca:dd:34:
1d:ee:dd:94:31:a9:4b:24:f6:e0:8a:2e:f8:5d:f7:
28:b3:67:f5:bf:57:0d:89:07:6c:c1:5d:10:62:60:
80:9b:29:df:95:fa:35:1c:6c:cf:52:18:78:0d:db:
a8:3e:ae:c4:55:8e:28:29:90:c1:ee:67:85:5e:28:
0e:59:22:f4:a4:37:4b:00:88:3a:f7:5a:5b:3f:da:
c4:da:75:d4:44:5e:08:a5:f2:bb:df:c4:3a:cf:0b:
bb:af:3a:de:dc:f5:49:99:8d:c2:cb:76:02:25:a0:
00:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EE:8D:3E:54:06:C0:6A:67:F6:BC:62:4F:63:2E:38:FD:6C:DE:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00c8ed4f-37f4-323f-8afb-55168be0c0df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:f8:eb:e1:19:ca:21:9e:fa:4d:33:84:7c:dc:61:75:10:d9:
7a:cd:1a:71:2c:74:dd:f3:e7:0f:0e:ec:d9:6f:e2:f9:90:09:
54:eb:6a:01:4c:a6:2c:cd:ef:6b:ae:f3:4b:09:ba:a9:79:a1:
d2:24:51:8f:8e:a1:a0:50:fc:51:ac:b0:43:c7:79:5a:59:e6:
ed:5d:52:20:f9:03:7b:f2:99:f3:0e:69:15:48:9c:a3:e7:39:
37:b6:2b:f6:88:f1:46:94:96:b8:32:5d:0e:98:dd:c4:00:a5:
d2:e4:d7:cb:c9:ff:cc:38:2d:99:32:fe:f0:23:58:4b:e1:cd:
3a:d9:73:14:4a:91:6f:81:40:de:1a:9b:6b:2d:07:d8:94:ba:
27:90:9c:05:89:09:fd:23:b2:5e:4f:d5:74:10:a7:77:0b:8f:
95:b9:e6:eb:d3:94:b5:fd:d1:76:58:fe:ce:2d:26:fd:59:63:
bc:e5:bf:19:15:ea:93:db:c1:9b:5d:0b:6f:6e:7d:5b:e2:75:
2b:fa:2f:fc:62:14:e6:86:a8:6c:3b:6b:69:a9:ee:4b:22:20:
0a:78:7a:29:49:70:67:d9:3b:d4:6f:35:3e:37:92:b1:c6:08:
5e:53:06:dd:ff:7c:0f:ed:ca:a6:12:da:3e:9f:b4:6b:d3:08:
3a:63:35:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:31:39 2025 by rpki-client