Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4d76c0-fd22-3414-9a03-f8b1677b5508.roa
File: 2c4d76c0-fd22-3414-9a03-f8b1677b5508.roa (raw, json)
Hash identifier: YmonwS+yGr7H9t84JENzDJxCk6eVWeXDR2zl/m6vOpI=
Subject key identifier: 3D:27:BA:C7:3E:B2:D1:E7:64:11:71:A9:D1:B2:80:4D:76:95:DB:51
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BD8041F05A0E82D552040
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4d76c0-fd22-3414-9a03-f8b1677b5508.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 64.233.160.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:d8:04:1f:05:a0:e8:2d:55:20:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=1ab43324-d833-4b8a-9a8d-de98780ba2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3b:2e:b8:ba:c3:cd:1c:dd:0e:02:b5:27:55:
60:04:57:64:d2:6d:3d:56:d1:67:d0:22:19:ba:27:
8d:51:83:6d:82:48:eb:c3:ad:c4:cb:3d:94:6f:64:
23:51:0f:8e:00:8d:06:d1:78:46:c6:d0:88:ad:68:
8b:be:17:18:f6:7e:05:8f:dc:0f:1b:85:e7:c6:f6:
e1:9d:96:4a:c1:ed:d8:4c:f8:db:e9:75:46:7e:e9:
34:b8:af:2b:12:27:85:08:8d:33:ac:65:02:ac:53:
64:7f:8f:64:b0:8f:9a:96:d0:57:51:2f:c1:52:86:
0f:c3:19:28:da:5c:7f:be:0e:d8:7d:c6:c5:fa:86:
e8:70:20:94:f9:ef:00:4c:3c:53:50:3b:53:ae:8f:
40:76:88:35:93:d8:e6:5a:47:a6:39:fa:63:3a:26:
0c:c4:55:1f:d6:c6:c9:58:a4:e0:93:de:d3:3a:be:
87:e1:34:4a:85:fe:8b:92:ca:da:d0:d7:ab:b8:0b:
cc:3f:1d:ec:7e:bc:63:14:79:9c:10:74:7c:b6:5c:
9b:51:07:19:53:b7:e3:56:6a:f9:00:57:02:b0:d9:
2f:ea:c8:3f:e9:8a:8f:20:bf:6c:2b:02:d8:52:ea:
8d:29:7f:a8:d6:93:a5:95:b4:01:aa:b2:a1:03:91:
f8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:27:BA:C7:3E:B2:D1:E7:64:11:71:A9:D1:B2:80:4D:76:95:DB:51
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2c4d76c0-fd22-3414-9a03-f8b1677b5508.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:89:26:6b:b3:1b:0c:de:80:84:72:7c:17:83:b7:05:06:3b:
a8:19:7d:8d:73:45:1e:f4:de:32:be:13:fa:91:04:ec:f5:4e:
95:c8:b0:a5:8d:99:04:b2:3f:82:f2:39:f8:4d:df:f1:33:6b:
2b:62:75:c8:67:83:c7:10:bc:91:e8:a2:01:5b:bc:39:40:f8:
5b:45:ef:80:2d:d4:f7:c9:d9:f6:5c:41:c7:d9:ab:56:93:4e:
db:d7:d7:bf:68:00:61:ea:b9:ac:eb:3e:7a:27:cf:6e:60:43:
9e:86:1a:85:43:7c:71:44:0e:81:aa:fd:72:17:cd:f2:b2:81:
f1:ca:53:97:d3:dd:47:53:2c:b5:9a:a1:8d:55:76:30:12:0f:
e7:b8:4c:71:ef:55:9e:34:3f:45:52:2c:c5:c2:10:34:3b:00:
30:29:2b:9f:8f:bf:6c:4d:24:26:97:fa:4a:71:f4:ed:fb:f6:
e6:58:70:e8:45:27:c5:c6:4f:90:29:fc:4e:8c:e1:c3:26:c0:
31:de:52:6c:63:2b:4e:47:ab:d5:37:54:3c:b6:60:ea:2d:01:
85:1c:09:29:85:2b:28:10:10:8c:d0:ea:0b:cd:a1:34:45:b4:
94:b9:0d:0a:21:b5:ab:53:fc:8f:e1:d2:69:cc:b6:12:47:26:
37:59:72:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:32:49 2025 by rpki-client