Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa
File: 8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa (raw, json)
Hash identifier: 6H/92bLkn2J8hevTBw96FBeUg9+9m8BejO/4caMaNK0=
Subject key identifier: CF:11:2A:F0:7E:95:86:54:CD:E2:E5:D4:78:F5:63:E7:66:C2:27:AB
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C582259FE311E4E801467980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 216.58.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:25:9f:e3:11:e4:e8:01:46:79:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=6e075e52-d2c1-47d0-9657-812205904e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:2d:90:3f:70:c3:b2:bb:17:99:d6:a5:ad:
81:d3:ed:37:82:bf:b4:2c:54:bd:6a:c6:ab:9a:fe:
52:65:f7:3a:29:9b:dd:88:e0:ba:b1:80:94:21:96:
a5:28:0a:41:dc:29:43:35:9a:bc:34:88:7f:c4:1c:
a9:37:a9:c3:32:01:89:77:8d:86:38:4b:2b:dd:ae:
c6:ba:54:28:4b:41:8e:f6:48:b8:7d:ec:73:6d:af:
81:eb:fe:48:55:4c:b5:fa:4c:83:74:b3:45:67:5f:
3f:43:33:8c:86:93:ac:62:2a:0e:c3:ad:b7:78:2a:
b1:27:bc:96:74:5b:c9:f2:2e:f5:8c:8c:ae:5d:3f:
0d:af:03:78:97:f7:69:90:87:91:ef:a6:fb:45:b1:
d4:95:77:c9:ad:9d:05:64:63:4e:db:7f:dc:4b:53:
72:3f:b1:e4:4f:af:03:ba:1e:b2:d6:72:17:5d:08:
bc:f5:ad:03:02:21:69:d2:a4:55:ce:ed:75:a5:b4:
08:a5:b8:33:02:c6:1a:b4:8d:80:34:f1:a9:48:35:
43:ab:cf:1f:19:07:81:53:34:ec:6d:40:74:e1:b4:
93:56:b5:ac:e6:8e:f1:9f:9d:4c:77:f0:7a:96:5f:
e5:be:39:7b:75:c0:c7:69:99:f6:b0:c6:c4:fe:a2:
99:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:11:2A:F0:7E:95:86:54:CD:E2:E5:D4:78:F5:63:E7:66:C2:27:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/8cfe6a28-4ace-363a-8f77-fbfd9f33de5a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:5e:68:9f:cd:41:32:0d:5f:c1:84:05:32:46:58:f1:e9:b5:
e0:63:25:32:35:03:ce:8f:94:2f:a8:13:b0:d2:f7:fd:3d:70:
77:bf:da:96:e6:6f:d9:ce:8f:5b:b4:40:d6:b5:8c:c3:32:9b:
e7:a8:af:6b:79:2a:ce:b4:81:f5:07:3c:02:3d:db:d9:44:63:
23:60:ad:6e:19:5f:69:33:4d:1e:0e:62:14:ec:45:9b:6d:5a:
dd:77:58:e7:c4:b8:40:69:67:c4:f6:76:9d:d5:69:e0:e5:3f:
63:bb:b3:70:2e:80:dc:9f:eb:47:14:5c:be:35:1c:c1:31:86:
c9:80:61:0f:22:0a:f1:2d:c1:d3:6b:8f:8c:1e:3b:af:7b:dd:
6a:f9:ef:92:1b:84:03:26:94:68:30:ad:59:59:e0:03:18:35:
ca:95:15:e6:bd:96:80:25:e0:93:03:85:bb:74:2a:43:4b:c4:
36:f3:74:fe:e1:bf:50:04:93:95:72:9f:21:26:95:6e:fe:ed:
18:01:f4:c8:b5:92:42:70:90:9d:a9:40:d8:90:5a:59:c1:f9:
fa:85:8e:3e:0e:45:cd:eb:30:bd:fd:b2:81:0f:e7:14:92:0a:
3c:3d:cb:f6:65:50:e5:a7:7a:8e:b2:79:ab:63:57:ce:5c:37:
a1:c4:94:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:36:00 2025 by rpki-client