Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7bea7c09-21fe-3c50-a1e7-5604b3171402.roa
File: 7bea7c09-21fe-3c50-a1e7-5604b3171402.roa (raw, json)
Hash identifier: 5oAAOnMPFE/rn7B2dm1Lw9PiKhjj9PFlN3+j354DNxY=
Subject key identifier: 01:B5:D7:17:5A:92:21:D1:15:F1:50:76:45:2F:23:4C:5F:B0:C0:1F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84BBEC9893792DBEFCBE880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7bea7c09-21fe-3c50-a1e7-5604b3171402.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 74.125.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4b:be:c9:89:37:92:db:ef:cb:e8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=8aa2d5a9-6420-4d23-8eb6-e1c471dfc2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:73:0b:f6:96:9e:4d:1c:c9:3d:9d:02:7d:ef:
63:5b:e9:b9:0e:70:47:f1:30:b4:ab:56:05:c5:f1:
bf:28:2f:5a:03:b0:84:ba:bd:d5:c7:cd:da:a2:d2:
9f:c9:fc:85:62:70:37:a3:29:3c:86:52:f6:2d:3a:
82:4e:df:63:65:30:dd:48:f7:6f:b5:9a:97:98:84:
67:8b:12:4a:0b:a2:6a:5a:63:4c:d3:93:66:29:bd:
45:c5:13:6a:6e:16:4b:66:85:07:4e:97:ba:80:3c:
d4:d2:2f:7c:a0:bc:0a:7e:de:4a:d9:1e:9a:9a:2c:
1f:33:2c:0c:69:16:30:42:cb:0d:87:f5:52:3d:d4:
75:57:92:50:d0:36:b7:9f:2a:37:79:5f:44:95:81:
6f:2a:66:ca:1b:58:c0:c4:c9:e2:ef:4b:ad:99:54:
05:d0:77:ad:c3:fb:4a:81:b6:25:8c:a6:a7:4b:eb:
5e:30:12:c6:a6:b0:6f:b1:99:36:e8:c1:e8:8c:7d:
36:f3:99:73:29:cb:c5:e4:22:96:7c:bf:0c:d7:39:
6f:13:a7:ac:5a:ef:38:d1:54:5a:18:9c:d6:ce:4f:
15:b8:c4:ad:da:c8:d7:04:f3:12:03:62:e8:78:f0:
9c:e9:56:cb:1d:77:71:95:41:07:a3:13:a2:13:92:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B5:D7:17:5A:92:21:D1:15:F1:50:76:45:2F:23:4C:5F:B0:C0:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7bea7c09-21fe-3c50-a1e7-5604b3171402.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.26.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:02:e2:88:be:bf:88:8c:bd:19:12:77:cc:ca:5b:c1:77:1d:
19:e8:0f:0a:2a:19:6f:7b:18:2e:ed:1c:0d:a3:41:95:30:ff:
de:11:30:09:d5:7d:f0:6d:f0:60:a6:92:98:5b:d9:ba:90:93:
a3:9f:a6:b4:9e:86:c5:f1:f4:ef:c9:9a:b5:47:f1:92:7b:61:
19:78:c4:0f:4e:b0:e2:59:bf:7a:32:58:ed:a0:77:e0:d6:eb:
7e:2b:43:43:9e:9e:0e:b4:27:f5:bc:f0:92:b0:2f:f2:d0:3b:
c1:95:fb:21:ce:f0:6d:73:a9:06:5a:22:39:8e:08:78:97:b8:
0b:ef:ed:b0:16:2d:64:01:29:3e:7b:7d:49:fa:cc:53:e9:93:
4e:7c:3e:eb:7e:fd:9f:b9:3b:7a:4b:7e:fe:1c:0e:88:b0:6a:
30:a2:a8:6a:b0:b3:c6:16:db:2e:a5:70:51:89:9a:2b:99:b6:
04:4b:ba:af:24:0d:f6:fe:19:c0:4e:f0:67:8a:28:4e:b1:76:
a5:ca:af:9c:86:d7:6f:f0:4a:13:ad:76:02:0d:4f:78:a2:90:
92:87:7a:08:3c:89:26:0e:72:7f:ed:ce:5e:01:2a:4a:e6:8f:
54:60:30:2e:bb:4a:6e:a8:b9:20:0b:2e:31:b0:1a:f1:46:20:
81:cb:70:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:31:41 2025 by rpki-client