Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa
File: 0185b0e0-6696-3609-972e-b79ff80a6c20.roa (raw, json)
Hash identifier: T2om0DZ+VVcrFoBpj2/OkcveUhAkf3R1+20ESCDxO1Q=
Subject key identifier: E9:D0:0F:EE:60:83:85:C9:32:B7:1F:58:B0:4C:7C:03:96:B6:7A:87
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12BA91211CBED3EE78860
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 172.217.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2b:a9:12:11:cb:ed:3e:e7:88:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=a7350a8a-bbca-4310-aaf7-1fe067f05743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:54:b1:1b:1d:a8:9e:3f:90:9f:a4:4c:bb:c8:
a5:03:42:ad:c7:34:4d:36:66:eb:a6:93:07:64:f8:
18:bf:9d:78:24:24:77:38:98:2d:ba:f4:15:60:4a:
a1:a9:c3:15:24:d0:e4:50:5e:f8:b0:60:85:96:f8:
ff:a6:5d:19:f6:3f:b9:d1:a3:8a:de:3a:89:d3:dc:
73:d3:ca:3d:65:b2:e4:d7:9f:9e:f7:41:95:52:ec:
3f:06:d5:30:0d:31:5c:76:e2:89:6f:ae:91:68:41:
40:d3:73:9b:51:f6:df:24:f4:ee:93:20:d1:3c:78:
9a:5b:51:c4:06:29:35:a1:92:3f:36:66:e4:ba:cd:
48:ce:80:53:8a:e8:a7:51:67:9a:6d:57:99:94:3e:
c2:bf:7c:e1:61:54:9c:57:f1:e7:41:82:65:12:81:
8b:3c:93:a8:a8:a8:f0:9a:54:c4:91:a7:98:16:01:
90:fe:e6:36:39:99:35:c1:7a:8c:3e:a0:72:3f:7e:
71:dc:ba:49:76:e0:db:ed:7f:ab:bf:6a:0d:18:5d:
9e:aa:e7:79:69:cc:86:a8:c1:eb:c5:dc:dc:89:9c:
e9:5c:47:5b:50:ec:a7:79:c7:be:35:7a:e0:90:91:
ab:df:3c:e9:a5:8a:0f:70:07:f8:2b:d9:3e:a0:85:
5b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D0:0F:EE:60:83:85:C9:32:B7:1F:58:B0:4C:7C:03:96:B6:7A:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0185b0e0-6696-3609-972e-b79ff80a6c20.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.205.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:29:c6:ec:ba:3e:2c:05:aa:90:d7:dd:f3:e5:f1:fe:3a:8d:
09:9b:3e:74:e0:4c:88:dc:40:cb:51:82:d8:69:8d:5e:78:74:
5f:b5:96:47:3a:b7:61:f7:66:4a:80:a2:e6:83:18:e2:94:02:
b5:6a:ce:fc:4b:71:0b:2f:e0:05:a8:d8:47:d1:bf:2b:21:c1:
6d:4d:8f:4a:53:2c:62:04:73:28:f3:b4:04:85:32:7f:45:7c:
62:e0:a8:bb:c8:b1:bc:56:27:ca:52:72:55:40:2f:a8:65:64:
4e:ed:3d:33:b0:c6:98:4e:ef:42:bc:16:a0:aa:16:7f:07:c3:
28:d4:f8:33:d5:9f:24:14:bc:1b:22:63:bb:ba:a8:ad:e7:a3:
71:f7:4b:db:ed:6d:a4:d9:3d:0a:59:2b:18:70:c4:ce:8c:d6:
11:7b:43:38:88:b2:20:61:a6:49:a3:5c:14:31:53:a3:3d:ca:
a9:88:05:3d:71:fb:fc:f8:0f:63:a0:62:aa:da:fa:54:92:95:
25:26:ee:7d:3f:61:15:0c:b7:36:ec:c9:f2:d0:f9:12:77:53:
ca:ed:b1:d5:b3:57:19:71:c6:49:bf:0f:e1:d3:f8:44:7e:34:
9b:8c:91:73:8e:ed:94:e2:45:86:1c:c8:62:0f:91:9e:c5:a7:
e7:35:8c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:29:32 2025 by rpki-client