Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa
File: 839e5923-d592-30e5-ba37-9fbbbf065f7a.roa (raw, json)
Hash identifier: tR2nhSFqOCi98CZnCwQSt4r4mxSjRJFGhE5II33IOa8=
Subject key identifier: F3:C9:C8:5D:E4:AA:59:7A:1B:4E:50:56:19:87:3F:A5:0E:A8:64:9F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5816DB3205848C9CF618E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 172.217.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6d:b3:20:58:48:c9:cf:61:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=92b0ee0e-dec4-4a32-99da-3cdb9b64330e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:11:1b:db:25:dd:c4:99:33:ca:f5:4e:98:01:
c8:75:27:3a:73:b7:7e:41:cc:d3:e7:d8:5b:ab:b5:
b7:1a:a6:ce:05:2c:f3:a5:ef:f2:e8:e7:a9:51:33:
7b:18:af:58:31:14:e2:13:aa:25:2e:1a:c4:a3:98:
93:5b:91:27:65:d7:00:d9:cf:3f:4b:11:66:2c:3d:
9e:27:ea:f2:e3:db:e2:82:3d:5d:9a:eb:df:a7:bd:
3b:10:0c:58:36:fd:5a:53:d2:49:ec:3a:3e:22:5c:
52:c7:18:0f:7d:35:88:e2:7f:8b:36:75:8d:98:3b:
94:8b:6c:bb:07:f0:0f:f3:49:52:9b:0d:38:fe:d0:
15:4a:8c:69:e7:61:bc:16:4a:95:95:e6:be:eb:cd:
a0:ca:73:b5:df:23:e4:e6:c6:e2:5f:01:fc:ff:db:
2f:c9:7e:63:3a:a8:c3:7f:88:07:7e:e8:ef:ac:a0:
7f:03:0e:8a:83:48:dc:ff:9c:a8:04:0c:30:4d:b4:
d0:62:97:bf:5b:03:db:76:06:e8:ce:47:e0:7a:8b:
04:09:6f:38:b5:e6:70:b1:fb:ad:fb:cf:47:cb:65:
a2:bb:b3:e8:37:bf:4d:a2:ef:92:fb:bc:a8:4b:0c:
80:b6:34:d8:0b:0b:8c:b4:8c:f3:0c:94:8d:c7:c8:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C9:C8:5D:E4:AA:59:7A:1B:4E:50:56:19:87:3F:A5:0E:A8:64:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/839e5923-d592-30e5-ba37-9fbbbf065f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.219.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:aa:c4:64:85:0e:7b:fc:c8:0d:0c:20:9e:57:4e:20:ad:3a:
65:74:86:46:86:6c:5a:4b:0f:45:02:03:1a:a6:ca:1a:c8:54:
33:5f:5f:bb:5f:fe:19:83:f0:bb:e9:a1:64:9a:e0:29:14:4c:
74:6e:87:8a:4b:73:55:78:e5:a5:cf:68:08:1b:ca:83:18:13:
15:aa:ef:2b:7c:6a:54:ea:a7:2e:c5:df:38:b8:07:87:a0:b7:
14:78:e2:04:f9:c4:a6:52:6c:1a:06:53:0d:d4:06:d3:9e:16:
d0:57:11:4e:3a:49:48:53:02:4b:c1:4d:4a:c8:7e:eb:b8:74:
b9:0d:e2:2c:33:84:ec:c3:12:e5:73:ed:70:c5:c5:3c:86:a2:
fa:c6:1c:c3:31:5c:c5:eb:a8:ca:34:2a:ba:58:cb:2a:03:1c:
57:ae:41:af:08:c8:9c:41:c8:8e:e8:0a:c9:06:d4:fe:46:3b:
c2:b3:ed:ff:38:9d:44:94:9a:d8:4b:18:9c:9f:c9:c4:12:35:
2a:0b:51:8d:42:68:52:3b:4c:d4:1d:ea:32:67:d5:aa:69:1a:
9a:d3:f4:ae:9d:27:83:42:32:04:25:57:09:76:5c:3f:b2:fd:
1f:dc:1b:90:66:0c:b8:5d:53:6e:c0:ce:75:99:f0:75:4b:50:
9e:f7:35:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:42:10 2025 by rpki-client