Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa
File: 0299a712-fc10-3ade-be7c-01c58b9e9b23.roa (raw, json)
Hash identifier: 4LpFRVurAoPUePQkYQdj3y/KeDV431QodAY+QPOyZMc=
Subject key identifier: 05:EE:3E:1B:71:2F:33:A3:A1:E6:E0:49:60:1A:9F:17:7D:94:4F:4B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5820C4C5E59D7A86E710080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 216.58.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:0c:4c:5e:59:d7:a8:6e:71:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=af85111b-1016-40c4-9de9-8343e5221d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:aa:27:5a:09:72:de:14:0f:3e:b3:0d:e7:b1:
bf:d1:a3:d6:b7:11:11:b2:18:ac:b9:7b:b9:aa:56:
40:d3:45:76:b9:1e:05:d7:df:00:fc:de:0b:d9:b5:
cd:58:0b:74:61:6e:a3:f6:68:96:1a:82:a3:f8:b7:
29:6a:a9:cb:38:2c:38:64:42:75:d9:63:25:eb:8b:
e7:08:9e:8e:cc:60:64:b6:a9:ea:1a:dc:e8:44:4d:
6f:bd:6f:64:7c:5c:cd:7b:91:bb:4e:a9:2d:c9:e8:
8b:19:57:1d:7e:24:7f:eb:2c:0f:40:06:63:1c:25:
df:c8:e8:88:2f:45:37:f7:d4:33:16:0f:bf:d1:dd:
ed:5d:23:84:a0:9b:41:f7:d4:bd:4a:45:0c:f9:a9:
c8:ab:bb:11:01:2a:4b:8e:a8:22:d9:fe:98:3a:c7:
6d:a1:c8:8b:1f:f1:f9:e8:bf:6c:0d:64:23:41:00:
b4:96:76:28:ee:6d:9d:34:e0:73:d7:10:86:dc:ae:
96:ac:7e:e2:ae:53:93:fd:41:20:ae:b5:6d:37:da:
d0:8e:3c:d2:94:19:72:a9:cc:4d:b5:69:fa:d8:29:
ce:15:2f:3b:15:3a:2e:91:37:cc:98:a1:65:bc:8f:
78:14:7b:9f:c0:f0:d4:08:4c:a2:e4:ac:8c:5d:a0:
cc:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:EE:3E:1B:71:2F:33:A3:A1:E6:E0:49:60:1A:9F:17:7D:94:4F:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0299a712-fc10-3ade-be7c-01c58b9e9b23.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.202.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:df:84:2e:d4:f1:ff:0e:f6:81:c6:e7:c0:60:e3:82:f7:f1:
0b:56:f0:d8:31:c5:f2:23:0d:b1:40:24:96:95:78:4f:ae:ba:
5b:81:e8:9e:ed:3e:76:2c:1e:20:c1:01:39:94:93:d4:85:d8:
33:ef:ac:61:16:8d:5f:61:a2:14:2e:5f:70:9c:03:ab:8b:56:
1a:11:96:06:19:bb:8e:3b:63:65:d9:b2:01:8d:b2:de:a3:a1:
35:f3:72:74:cd:2d:fb:ad:74:e3:23:bb:6c:bd:48:db:25:43:
c1:2e:1e:21:08:70:a8:3d:44:ad:0e:72:68:4d:ae:00:a3:84:
c5:79:0c:56:33:30:4e:5d:33:2c:43:ae:02:7c:10:f6:95:93:
71:78:93:f1:fb:d4:04:ed:a0:45:ba:b7:03:d7:b1:fe:bc:f4:
bf:b3:52:d7:ee:52:03:84:33:f4:22:06:3b:8b:90:7d:b4:db:
bd:86:43:26:e5:72:87:bd:ef:c1:20:1b:c7:45:86:5b:a3:98:
49:91:f0:bd:e1:ea:fc:79:8f:44:68:dd:0d:29:0a:0d:47:8b:
c3:99:1c:c7:a5:48:c3:d7:bc:cb:31:15:1e:9e:ac:14:ac:1f:
fa:b5:46:08:2b:be:7c:7c:c0:ec:72:3b:60:ca:63:1c:71:aa:
54:c3:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:30:31 2025 by rpki-client