Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa
File: de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa (raw, json)
Hash identifier: M7pZ6YKNgexY+1VuTBOiIsxUhW30z3j+6AfarRt0PiY=
Subject key identifier: 12:07:D6:5A:58:88:0E:55:46:41:F1:2E:2F:FB:DA:A3:45:74:EB:70
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58170CC41F5BD1848D79A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:70:cc:41:f5:bd:18:48:d7:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=3af1119e-f228-4597-b1da-8f35bf3150be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:54:3a:58:03:1f:f7:df:df:75:8a:4e:e8:ed:
c7:9a:5b:f6:ae:56:53:9a:1f:8a:a2:ff:55:30:d3:
d2:3f:42:b9:18:54:f1:54:57:4c:3a:f4:80:e2:1d:
54:d6:5a:a4:a6:76:bc:92:6b:12:e9:20:f6:4b:01:
1f:ca:54:75:27:29:dd:58:3e:30:c4:cf:b6:d9:ef:
62:6a:f2:0d:2c:40:c3:cd:ce:7a:0c:f1:76:ae:4e:
3f:b6:aa:11:b6:6a:61:56:dd:74:e2:a0:1c:8a:9e:
e4:83:74:a8:f5:a2:19:4c:06:9c:93:50:7f:09:eb:
82:e6:a7:63:f1:57:a8:36:8b:4b:89:e1:35:c5:4e:
59:45:f9:65:11:22:78:19:51:10:f9:ff:72:23:71:
6d:66:d3:fa:14:d5:29:06:0e:90:6d:cc:e4:89:ec:
11:3c:af:f8:52:f1:27:11:52:3d:f0:01:eb:a1:52:
de:0f:9d:b8:b6:a2:c9:f3:17:b8:f3:20:37:f7:dc:
f1:63:ff:80:2e:24:40:39:e4:d8:cb:a7:f8:95:7c:
ab:5a:cf:b5:38:11:3d:f7:33:ed:71:35:a9:aa:ee:
5f:9e:22:de:74:d6:1b:5b:b8:94:be:7e:1a:f4:3b:
78:b6:30:55:2c:bf:f7:1c:39:52:80:ce:62:f9:5a:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:07:D6:5A:58:88:0E:55:46:41:F1:2E:2F:FB:DA:A3:45:74:EB:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/de1fce62-3d34-3fff-9aba-657ec7f9ecd9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.193.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:f0:47:f1:4b:55:a7:9a:d3:c6:d0:95:7b:59:f7:0b:b2:e2:
59:12:42:6e:4b:d2:ab:71:32:8e:d9:72:0f:44:10:bd:79:bc:
d9:9b:a2:b9:a7:5c:4f:83:40:c2:ea:59:52:2e:98:f7:bc:ca:
e7:d2:40:2a:3b:0a:e6:93:bb:3f:bd:50:3e:6b:35:10:1a:03:
57:02:35:9e:7e:cb:c1:c9:6e:df:2d:e7:d5:52:e5:77:9a:8e:
36:28:bb:44:92:03:96:b8:ad:b4:0a:7a:6d:1e:9e:da:36:d0:
4f:53:f3:00:61:d7:19:d5:6b:53:21:fe:62:a2:08:c7:97:fd:
80:8f:5d:b0:10:27:5b:4d:65:af:ed:0d:50:17:4c:98:d6:af:
50:97:7d:30:1f:7c:2f:f3:d5:97:86:41:a9:45:dd:d2:a5:36:
1f:b1:79:14:35:76:1b:2e:33:cf:5a:ce:56:bc:d8:44:1d:e1:
a3:1d:d8:0b:1d:14:b9:a6:30:55:6d:d1:c4:91:fd:e6:58:2d:
40:cc:dc:77:f2:70:20:87:0f:13:dd:0f:57:71:94:89:b2:af:
f1:8a:ee:08:dc:63:37:a6:cd:e7:bd:60:c9:38:5d:9e:f7:88:
89:17:d6:22:08:91:15:0c:7f:66:df:2d:4f:4f:ca:d6:85:4f:
65:c9:73:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:39:09 2025 by rpki-client