Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa
File: 25d1bf45-3890-342f-9d44-7731a5a90a08.roa (raw, json)
Hash identifier: x1FQMEwxf0pBoHcnotlDSlPero8mNg5xWZGX3uHcD8A=
Subject key identifier: C7:2E:9A:AF:BE:C4:FD:3E:09:21:07:38:AA:5F:09:4B:57:DA:68:E4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BA6A622C71A105E627900
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 74.125.68.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:a6:a6:22:c7:1a:10:5e:62:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=65f00f60-552a-4a87-8540-0e7e5ad834c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3d:28:e9:c5:7c:4c:8e:ea:d7:06:38:9f:36:
a6:4b:45:9b:72:18:e9:53:15:f1:cc:ba:8b:27:c5:
03:1f:74:ca:56:ac:5e:88:14:34:11:b1:c0:e0:ac:
87:7c:fb:40:d6:6e:86:94:69:0e:98:2c:3b:92:34:
d6:4c:41:09:7d:98:e4:e5:b7:62:1c:87:83:f8:de:
1a:86:44:16:1e:9a:b7:19:a5:9b:7f:44:a5:27:87:
ed:53:4b:0b:6b:58:ee:fa:88:98:c3:43:8e:e4:aa:
05:19:ee:90:3e:18:e3:97:d1:0c:33:70:32:c5:b9:
13:fa:ec:c4:25:23:fe:03:cb:a6:05:ad:61:c5:16:
03:bb:6c:8a:93:b2:62:d5:0e:99:66:4b:10:98:1d:
70:9f:1c:7b:cf:30:10:18:de:b6:6f:1f:8c:2b:cc:
6d:3a:c9:ce:0b:23:3d:89:9f:46:65:96:17:52:cf:
7d:6d:e8:e6:ff:ca:e9:0c:14:1f:f5:79:2e:46:37:
a8:32:6e:6e:7e:60:de:66:e8:42:6b:c2:a4:2d:08:
88:96:7d:6d:d1:c6:c7:48:b5:5a:5e:9b:b9:b6:f5:
f4:89:5e:60:fc:b2:5d:27:4e:41:80:8e:d0:70:41:
ab:81:44:b8:1c:83:77:d0:ab:d9:7b:7a:24:4d:00:
e4:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2E:9A:AF:BE:C4:FD:3E:09:21:07:38:AA:5F:09:4B:57:DA:68:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/25d1bf45-3890-342f-9d44-7731a5a90a08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.68.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:6d:9a:c2:0f:a0:a4:c9:0b:58:65:29:1b:8e:03:2a:3a:6b:
2b:0d:a6:41:58:ce:23:60:e6:fa:1e:6e:59:6b:59:7c:08:d0:
fb:06:3c:60:a9:09:3d:a0:ee:97:5d:da:4d:5a:9b:0b:f7:75:
2a:68:25:d0:55:bd:f1:30:be:a1:96:af:45:92:38:c2:03:f1:
44:65:00:4a:35:84:0f:db:71:3d:38:1e:37:ac:cc:05:8b:9c:
30:1e:d8:f7:26:61:d7:e4:2a:5a:e7:e4:71:e0:82:bb:21:42:
3b:9b:50:3f:8c:4c:92:a8:de:2e:78:a1:97:77:a0:a3:ac:80:
18:a1:b0:16:ec:79:8a:60:b2:1a:02:ed:11:2e:4d:ab:c9:bf:
4d:4b:a7:f6:5b:b8:82:45:71:46:17:54:cc:ae:38:94:ce:42:
6a:a3:de:a0:f0:3b:2f:a7:1f:50:a9:53:d0:bc:61:0b:f4:d9:
d9:9a:c2:2e:17:16:5d:11:d6:14:e1:1d:5b:0b:ac:95:bb:25:
aa:0d:5e:3b:d6:dc:fc:5f:a8:29:50:1e:6a:c5:fa:17:f3:51:
74:25:7b:6f:0e:32:23:99:d0:a3:5e:f4:8c:50:28:40:9b:a6:
03:c6:f8:b3:91:b5:ff:54:f9:b2:a5:17:a0:f8:af:58:fa:94:
76:0e:63:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:45:20 2025 by rpki-client