Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa
File: 2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa (raw, json)
Hash identifier: 8+dFPZB8yvME7x61ZveFQe3jEHgYTYzAJJ8WSxTzvxE=
Subject key identifier: 0F:79:12:B5:34:EA:E8:CE:8F:85:90:A3:7C:EB:9A:6F:42:0D:74:B1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848EA91F8E5CD13E7EFB95A7980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa
Signing time: Mon 17 Feb 2025 20:40:09 +0000
ROA not before: Mon 17 Feb 2025 20:40:09 +0000
ROA not after: Sun 18 May 2025 19:40:09 +0000
asID: 15169
IP address blocks: 172.217.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:ea:91:f8:e5:cd:13:e7:ef:b9:5a:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 17 20:40:09 2025 GMT
Not After : May 18 19:40:09 2025 GMT
Subject: CN=fb87d6a6-4b9c-4e0d-8dc7-5fef99015790
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c3:8e:8c:7c:27:a9:d6:e9:38:a5:d6:08:7d:
ab:81:fb:d2:82:97:c3:f8:77:7e:a9:54:46:8e:e8:
ec:8d:ea:63:09:42:66:c0:c6:c5:51:a5:10:39:81:
24:30:70:be:4d:88:2d:f6:60:95:f5:13:dc:4c:51:
24:a2:54:e5:80:64:99:30:33:eb:71:6a:b2:c5:7b:
ac:30:9a:21:3b:c0:cc:91:3e:82:fd:b1:39:bb:b6:
04:d8:3b:2b:6b:78:61:32:9c:16:8b:34:46:2d:ad:
19:01:04:bc:1d:ac:0a:f9:b4:3f:f3:a8:38:23:ef:
0e:8a:dc:9f:13:65:d2:6d:d5:d8:09:49:f2:02:03:
b3:f7:d4:b6:ad:0f:a5:36:0f:53:7a:e2:d8:7e:f2:
82:07:4f:6b:9c:0d:f3:a3:c5:09:3d:9a:17:bf:84:
c9:42:b1:4e:98:73:c3:3a:4f:51:4b:ee:7c:4c:5c:
e8:73:5a:70:04:a4:ec:be:35:ea:e5:aa:e6:3a:4c:
78:4d:d8:38:b8:2c:12:58:71:dc:bb:78:21:40:a9:
fe:7a:51:ef:ff:0e:1b:ba:06:01:e9:51:f0:67:88:
6d:7e:61:02:19:11:c2:fc:bc:e2:df:c2:74:ac:ec:
cc:1d:58:84:c3:f9:3d:34:4d:ec:ef:0e:b6:55:7a:
1d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:12:B5:34:EA:E8:CE:8F:85:90:A3:7C:EB:9A:6F:42:0D:74:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2eea5e43-4a27-3928-9a6b-fbb5cf230878.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.79.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:93:bd:41:36:be:5e:7f:2e:5a:49:d8:47:79:e3:c9:3b:14:
31:bd:03:05:46:0b:e8:59:b0:04:77:57:d9:f2:d9:66:07:3b:
3a:7d:2f:9e:b5:18:c5:d1:41:7f:18:da:e6:be:2c:bd:ac:61:
0e:55:36:12:4b:e0:71:7a:bf:03:b7:b4:88:52:65:7c:0c:5f:
be:d1:b1:1c:29:ff:7c:e4:37:f5:1b:3b:08:43:2f:c2:43:36:
aa:d0:ed:b8:00:5b:2f:8c:08:fc:d6:d3:64:cb:bc:bf:be:c1:
27:02:a7:85:4d:90:04:54:06:cb:00:68:34:bf:7c:f4:7c:64:
21:13:a2:55:aa:92:2e:4f:e8:42:38:2e:c9:c3:97:6b:ca:b5:
02:7a:f1:c8:e5:d4:00:72:d1:01:c1:3c:16:05:fa:9e:07:5a:
a7:da:a4:44:51:35:21:05:08:4b:a4:d5:5d:77:b1:f0:b3:62:
19:7e:db:b0:3f:5d:bc:da:13:e2:3e:3c:60:c1:9b:a8:e1:a5:
9a:9e:c9:e9:9c:87:7f:ec:e3:63:51:a3:c0:dd:78:0b:74:e6:
d8:56:54:3b:8b:57:49:f5:13:4f:49:76:11:47:cb:04:31:29:
f2:53:b3:4f:fe:4d:92:6d:a8:47:1a:b8:67:01:e8:a1:00:db:
14:f8:f3:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:30:31 2025 by rpki-client