Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ea86508-ec46-3873-9fe1-5336ed0f72e0.roa
File: 3ea86508-ec46-3873-9fe1-5336ed0f72e0.roa (raw, json)
Hash identifier: NuCC+YdyvvZUibHXnYztY1bMywfDOWDk8aSNNT6DijE=
Subject key identifier: 26:D3:EB:21:13:D0:3C:0C:04:76:83:42:03:2A:34:82:9F:D8:B4:5D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5817E9E00A4C14B8B30C600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ea86508-ec46-3873-9fe1-5336ed0f72e0.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:7e:9e:00:a4:c1:4b:8b:30:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=9cdb4c45-1f4f-431e-be25-2bbaf2b6a211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:57:7e:08:4a:23:da:7c:28:f4:80:1e:e8:b1:
86:eb:fe:b0:57:f8:8d:1a:9a:ae:0f:cf:c2:54:52:
4c:e1:bc:4a:51:c6:e8:0c:8d:e1:aa:7c:1f:81:b6:
2b:b3:85:6c:31:b6:7a:1a:26:61:72:71:bb:d0:a3:
0c:82:bf:3e:b6:10:67:37:c9:43:25:e4:36:58:89:
9a:86:33:1a:a1:56:00:43:62:76:b9:77:5f:d5:de:
e8:ed:c4:25:be:3a:e7:3f:63:83:2d:9d:24:48:67:
da:ec:dc:bf:f6:50:11:a9:94:fb:48:b8:b8:8e:b8:
24:e5:53:02:f4:a3:63:d8:9c:b6:a1:fc:61:da:9f:
53:6e:a2:3a:34:e5:7f:0a:90:7c:cf:35:8b:aa:e1:
2a:c0:d9:6c:8a:96:d5:7b:8e:61:95:af:a4:37:9d:
6b:3b:e6:a2:6a:55:70:ff:9b:a4:e2:a3:d3:bd:e7:
e1:e4:2a:43:e1:45:14:23:2c:14:45:b2:45:be:6e:
7c:1e:f0:65:81:55:98:f6:63:e1:13:dc:19:8f:bd:
a8:4d:17:39:d4:06:fb:e8:b3:d2:76:3b:b7:a8:5c:
50:97:ef:2a:9e:06:fd:08:6b:6a:d6:e2:dc:36:6b:
60:8e:2e:ea:eb:99:d8:cd:0f:dc:0c:99:82:02:4a:
0c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D3:EB:21:13:D0:3C:0C:04:76:83:42:03:2A:34:82:9F:D8:B4:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3ea86508-ec46-3873-9fe1-5336ed0f72e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:3a:c2:fc:df:a6:06:29:73:5b:d6:92:37:12:16:3c:e7:82:
9b:57:99:25:c1:6e:48:dc:33:ae:59:de:7e:54:c5:d3:f1:88:
21:59:35:ba:5f:0f:2f:16:a2:8a:a5:cf:9b:08:c4:07:33:bc:
d4:2c:c0:7e:1d:3e:55:4e:03:c6:b0:ca:21:24:01:7d:06:1c:
ad:5c:c9:6b:da:8e:50:15:6d:d9:30:11:06:ca:c7:44:07:d8:
5c:5e:b5:82:53:c4:aa:bf:f0:40:a0:2d:4c:65:6a:8b:76:2f:
73:23:aa:6d:d8:a8:31:54:f8:90:19:76:3f:dc:8a:f8:59:33:
0a:17:cc:38:ee:7c:db:41:40:9b:ef:3b:6b:f4:ba:49:39:3c:
27:27:64:00:8b:88:82:02:d5:77:97:10:11:3d:64:cd:bb:9a:
b8:67:ba:76:b1:a2:59:53:b3:e7:db:03:66:2b:63:e2:4f:f4:
f9:2d:b6:2e:dd:d6:77:64:08:e4:0f:2f:39:9e:30:5a:d0:ce:
d4:5a:e1:50:9e:54:e6:2b:54:ca:70:b8:f5:7d:ad:69:82:62:
3e:c0:d6:00:57:18:02:85:79:3a:32:a9:dd:c1:25:de:24:93:
42:8e:84:0c:93:24:09:dd:bc:d5:e8:fa:b7:40:ca:98:0d:e7:
ad:90:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:57:47 2025 by rpki-client