Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa
File: ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa (raw, json)
Hash identifier: Hb5lwznzSx1JjZ0JFd0Axaulae1hwKnkca8luzeAYO8=
Subject key identifier: 07:02:8D:73:51:77:27:56:3F:AF:B3:15:AB:ED:9D:FC:35:8A:C7:89
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84C1AD5937FDDB6D588A180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 74.125.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:1a:d5:93:7f:dd:b6:d5:88:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=fb4da826-5a80-4202-8b47-ab5db03c325d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:72:99:d3:2d:7e:d2:fa:7f:c7:0d:42:64:99:
a2:b7:85:9b:cc:8b:15:d0:67:0f:18:fc:40:1c:ff:
dd:53:55:61:b9:bb:17:ac:6a:6c:23:1f:de:b9:9a:
b0:6b:d7:a3:2e:19:f6:f3:de:d8:91:c9:6a:83:a7:
e8:93:48:bd:6b:28:41:76:13:b7:5b:c6:d3:27:b4:
c8:e5:50:43:c3:1b:36:a1:9f:90:d7:56:33:9b:f5:
49:60:49:fb:d5:6c:34:44:52:f4:29:00:d9:34:ef:
de:db:d7:1b:1e:0c:68:00:0a:24:6d:75:f8:56:10:
8e:2f:3e:f0:ac:3f:e7:20:31:91:b4:63:eb:4c:7d:
40:1a:1f:b9:04:28:26:63:50:f4:94:86:e7:6d:bc:
9e:fd:62:69:54:8b:df:0b:e4:ce:79:ac:50:12:30:
03:b3:f8:87:e0:62:96:8f:74:8f:4b:b7:7c:28:1c:
d5:16:74:46:e2:96:4b:e9:e9:d2:01:f8:33:ca:cb:
64:a1:d5:ec:c6:88:95:d6:bc:31:02:cf:c2:46:5b:
69:7b:ac:c4:63:0e:eb:7a:25:34:fe:05:f8:30:f1:
a5:2b:98:4a:15:a4:8a:9b:59:e4:19:12:4c:cf:08:
65:6c:43:08:1b:7f:c4:08:36:b5:d9:4f:60:ea:08:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:02:8D:73:51:77:27:56:3F:AF:B3:15:AB:ED:9D:FC:35:8A:C7:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ba633f42-5294-38fe-a1b2-d61121b8e9f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.234.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:a1:ea:0f:28:bb:88:ee:c9:05:c5:a2:32:6f:40:30:fd:8e:
a0:2c:7e:cf:f3:ae:7f:20:0b:69:19:3a:7b:e5:21:43:04:5d:
a6:a9:cc:f8:34:c2:59:cb:b4:5d:8a:5a:5d:50:9c:7d:b0:08:
72:b1:0a:4c:36:80:1e:f4:d4:cd:f5:fb:d3:91:79:65:9c:3f:
8f:d7:03:b4:5a:56:94:17:fc:b4:4d:e7:5d:54:8b:95:cf:8c:
99:ca:a5:5a:3d:1d:12:5d:b6:9a:6e:ee:71:bf:94:64:12:23:
9b:f2:9f:31:e7:36:5b:ab:c7:25:98:65:d8:50:a0:53:65:7e:
aa:c6:9c:78:bd:e6:cc:58:61:d5:a8:6b:e5:e9:45:73:4b:6e:
32:ed:c0:23:4e:0f:c4:7e:99:06:15:a5:30:ad:74:6d:d5:d3:
4f:1b:8b:53:d2:e8:7e:98:cc:76:a7:d5:a8:11:b2:79:df:42:
79:f3:77:c1:44:06:cc:34:af:56:2e:76:6a:94:ba:cb:45:39:
ed:36:ac:a7:57:6c:84:3c:70:e0:9b:5d:3b:26:3d:7c:22:98:
aa:7a:b8:38:d2:35:4b:84:99:b0:06:86:6e:27:79:28:8a:10:
ab:c9:37:5c:c0:4d:96:04:bc:ac:c0:79:2d:47:4d:b4:05:5a:
97:01:c1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:36:01 2025 by rpki-client