Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa
File: c23a993a-b379-3356-a21d-447f6f63600a.roa (raw, json)
Hash identifier: zaFfCK0E1OAEmb6AgfoSirZY3ZKLrR16X9/2/+HcClE=
Subject key identifier: F5:A9:32:DA:64:F4:CE:55:E0:88:36:53:66:82:2B:30:7B:85:24:82
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C84C1B5C910113D7147B7540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa
Signing time: Wed 05 Feb 2025 14:00:51 +0000
ROA not before: Wed 05 Feb 2025 14:00:51 +0000
ROA not after: Tue 06 May 2025 13:00:51 +0000
asID: 15169
IP address blocks: 74.125.201.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c8:4c:1b:5c:91:01:13:d7:14:7b:75:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 5 14:00:51 2025 GMT
Not After : May 6 13:00:51 2025 GMT
Subject: CN=3b3826ab-672b-4395-902f-8fe397b19f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:87:9e:71:e7:7e:2a:29:61:21:54:95:08:13:
d4:0d:49:03:48:35:bf:1f:86:b7:d8:cd:4d:9f:f7:
99:39:54:1e:25:eb:6a:6a:60:6d:7d:15:cd:e7:e4:
a2:19:32:32:07:56:9c:d1:a9:cb:2b:12:b3:d8:05:
52:80:ab:ce:55:e7:7a:13:1a:4b:5d:1f:77:30:6a:
aa:f7:e9:0a:13:1f:96:49:98:e7:cf:71:e7:42:5c:
31:d8:50:cc:11:90:04:3e:a6:c0:a0:28:b1:bd:14:
08:5c:90:5c:05:6e:86:08:a9:99:59:31:eb:a1:82:
ea:9d:16:3b:1a:f4:6d:f0:91:3a:d3:0f:d0:bf:75:
80:28:1b:d1:dc:2c:00:cb:b3:d8:16:ce:a1:59:e9:
11:45:1b:2f:2f:37:ef:1b:58:82:ef:8d:a3:b3:4e:
1a:ee:d7:81:a9:57:2b:56:c2:31:0a:76:0c:a3:a6:
01:3b:3d:d8:e5:75:53:53:8f:f0:c0:47:a7:62:55:
85:27:e0:4a:76:0c:ca:55:6b:e3:c1:b1:cd:d1:56:
86:4d:73:14:66:c3:fb:f5:4f:2b:14:9f:3b:c5:95:
58:c0:d5:09:6d:15:1c:f6:02:e0:97:ab:3f:dc:9f:
50:9d:69:6b:f1:25:e9:d1:23:4a:52:cc:57:e8:66:
0b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A9:32:DA:64:F4:CE:55:E0:88:36:53:66:82:2B:30:7B:85:24:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c23a993a-b379-3356-a21d-447f6f63600a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.201.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:94:0d:8d:a1:bb:f3:f6:4f:a6:9a:3b:51:70:0a:0c:05:8b:
a6:6f:8e:25:f2:79:96:1d:be:63:25:a5:8a:e4:31:8d:b5:aa:
d5:b8:9b:55:af:87:6b:f6:e9:02:bc:e4:09:11:73:4a:d7:24:
8e:38:58:76:cc:2d:42:c9:27:11:15:dc:fe:ed:2e:e2:d7:b5:
99:d4:52:7f:d2:fc:1a:e8:3a:ba:bf:64:0f:0d:fd:dd:00:8c:
d4:9d:cd:6f:b3:c7:8c:29:d3:4c:5a:00:df:14:b8:87:de:58:
29:4a:85:40:df:7e:96:a7:0e:7c:60:b2:74:dd:82:12:56:b7:
d3:73:4f:3b:c3:71:a4:d0:a2:2a:d4:3b:1b:ce:24:b8:e9:5a:
dc:f7:a7:86:b8:aa:eb:ab:7d:c2:81:ec:a0:d6:64:a3:99:7c:
93:0a:fe:e9:05:c4:e9:3e:b3:ea:f2:52:07:c2:f1:1e:c9:83:
0c:0a:87:4e:eb:5c:31:c4:8a:3f:cf:e1:80:44:79:20:d2:bb:
9d:8a:79:27:df:dd:d9:11:80:93:4e:c8:af:e3:3a:0a:32:a5:
35:9e:64:3f:5d:34:5b:57:e3:dc:42:51:b3:63:41:7c:6e:6e:
d6:7e:be:fe:b7:80:f2:e4:f9:66:a8:a9:5b:a2:77:c4:59:9b:
af:d0:71:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:37:32 2025 by rpki-client