Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa
File: 66b9e653-d8ad-3093-8f2a-24556d42228e.roa (raw, json)
Hash identifier: LGDLOW0IlD+zhNE0K18ljo9Gib34KhUhLVRHaDaJ2hs=
Subject key identifier: C2:9C:EF:3A:31:DE:9B:B3:80:DE:42:B2:FF:DA:70:E2:58:2E:B0:15
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58172B4A59287C32AA2A7D0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.76.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:72:b4:a5:92:87:c3:2a:a2:a7:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=1f3224c9-6575-4aa2-9ed6-7be2a89c7a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:31:34:bf:8f:4a:2c:62:82:5c:b4:0f:5c:
a7:90:5b:8a:f2:8f:f8:f2:ea:fd:b4:f8:90:4d:f8:
67:d8:22:f7:bb:1e:07:cf:e1:3a:34:f7:45:3e:a5:
39:87:26:19:80:23:17:f8:9b:c7:98:85:94:5a:38:
b8:0a:f2:93:e3:4a:93:0f:29:d5:a6:67:b5:0a:a8:
56:ea:19:a2:13:b9:a1:38:78:f0:d6:51:2f:8d:f2:
4d:dd:28:0f:83:fd:8b:d7:22:e4:b8:eb:f0:10:1a:
06:0a:f1:8a:42:8c:ed:df:b7:e3:8f:60:0f:31:6d:
22:0d:d4:9b:95:02:67:cf:ff:f4:4a:58:d9:85:4c:
65:e1:42:9b:17:d0:42:f7:37:b4:09:43:37:62:3e:
73:2b:b8:e5:8f:1b:2e:80:0e:00:d4:88:2c:d5:81:
0a:21:7c:e3:67:aa:63:20:12:bc:cc:65:d7:32:74:
43:f8:d7:99:64:f4:4d:0d:03:cd:36:be:45:1d:0e:
68:f4:7d:9d:46:08:d9:a3:33:8f:92:91:c5:2c:3c:
bf:82:e4:06:6f:de:f3:0a:79:51:32:dd:34:71:19:
9a:a9:5a:2e:58:cd:dc:a5:10:c5:dc:ab:5e:fa:86:
e4:72:c8:57:ea:1b:98:1d:5e:99:a0:09:29:47:f1:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9C:EF:3A:31:DE:9B:B3:80:DE:42:B2:FF:DA:70:E2:58:2E:B0:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/66b9e653-d8ad-3093-8f2a-24556d42228e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:d0:e3:40:8e:34:1f:5c:63:13:be:8c:95:d2:64:74:eb:22:
01:bc:ae:a7:5c:68:b8:6b:27:52:fd:69:2a:2e:b4:76:67:18:
82:15:db:dc:9d:1e:cb:0a:3e:df:c8:b7:2f:bd:6a:35:be:c6:
38:bc:c1:24:82:38:de:27:10:32:90:75:57:21:d7:80:56:82:
fa:bd:4a:42:4f:8e:32:7a:c8:e5:9e:c6:5a:a4:55:e5:e5:9f:
e7:af:c5:94:ef:d8:43:e1:ac:9b:14:27:09:d1:bc:02:e9:8a:
98:6b:9d:35:42:f2:3a:b9:0d:57:6d:02:60:3a:46:a5:32:83:
09:0a:eb:c8:60:32:64:21:05:0f:e0:cc:39:79:40:aa:20:11:
07:6c:ce:5b:75:95:be:79:e0:8f:fc:aa:87:9c:5b:3f:da:0d:
8a:f7:76:c9:f2:ba:01:ff:b7:8e:cf:db:62:0e:57:0c:6c:ef:
e8:32:df:5c:fa:d0:b9:c5:38:2f:0b:a8:8d:66:7e:d4:bb:50:
a1:5b:2e:85:bc:5d:4c:29:c8:48:5b:e9:c5:c2:ec:e4:97:fd:
cd:9b:2d:56:d1:a4:b4:60:46:4f:87:0d:23:8e:52:6e:0d:be:
93:b5:b8:1f:48:35:ab:dd:81:91:c6:86:df:62:e6:d0:3b:93:
a5:28:6b:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXK0pZKHwyqip9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
MWYzMjI0YzktNjU3NS00YWEyLTllZDYtN2JlMmE4OWM3YTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUgxNL+PSixigly0D1ynkFuK8o/48ur9tPiQ
Tfhn2CL3ux4Hz+E6NPdFPqU5hyYZgCMX+JvHmIWUWji4CvKT40qTDynVpme1CqhW
6hmiE7mhOHjw1lEvjfJN3SgPg/2L1yLkuOvwEBoGCvGKQozt37fjj2APMW0iDdSb
lQJnz//0SljZhUxl4UKbF9BC9ze0CUM3Yj5zK7jljxsugA4A1Igs1YEKIXzjZ6pj
IBK8zGXXMnRD+NeZZPRNDQPNNr5FHQ5o9H2dRgjZozOPkpHFLDy/guQGb97zCnlR
Mt00cRmaqVouWM3cpRDF3Kte+obkcshX6huYHV6ZoAkpR/Fe5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKc7zox3puzgN5Csv/acOJYLrAVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNjZiOWU2NTMtZDhhZC0z
MDkzLThmMmEtMjQ1NTZkNDIyMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArcJMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACvQ40CONB9cYxO+jJXSZHTrIgG8rqdcaLhrJ1L9aSoutHZnGIIV29yd
HssKPt/Ity+9ajW+xji8wSSCON4nEDKQdVch14BWgvq9SkJPjjJ6yOWexlqkVeXl
n+evxZTv2EPhrJsUJwnRvALpiphrnTVC8jq5DVdtAmA6RqUygwkK68hgMmQhBQ/g
zDl5QKogEQdszlt1lb554I/8qoecWz/aDYr3dsnyugH/t47P22IOVwxs7+gy31z6
0LnFOC8LqI1mftS7UKFbLoW8XUwpyEhb6cXC7OSX/c2bLVbRpLRgRk+HDSOOUm4N
vpO1uB9INavdgZHGht9i5tA7k6Uoay8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:59:27 2025 by rpki-client