Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8a51f56-762d-33d4-8f47-b6b25f534ddf.roa
File: f8a51f56-762d-33d4-8f47-b6b25f534ddf.roa (raw, json)
Hash identifier: /sDahEUPaMHXfBe+pOePWybYNlFOGqjtz2bgrtWnlq8=
Subject key identifier: 17:2C:08:2D:C3:D7:00:66:1C:F6:4D:42:0C:E2:8C:23:00:5B:55:1E
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5820DF6758E6A1264CDE500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8a51f56-762d-33d4-8f47-b6b25f534ddf.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.176.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:0d:f6:75:8e:6a:12:64:cd:e5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=e3927b4c-566f-4f20-bbfe-b89dbb863452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:5c:04:7f:56:b5:6c:67:5d:0a:5a:0c:d6:
c6:dc:1a:ed:93:bc:72:bd:61:84:43:8c:8e:4f:62:
86:f7:64:48:1f:be:59:4d:a9:8c:14:9d:76:19:5b:
3c:ce:08:23:79:a1:c8:07:d7:6a:8e:b8:e9:86:3f:
7a:6c:a8:57:0d:28:ad:9f:70:af:3d:ff:91:d2:29:
be:7d:33:9b:05:06:48:1c:b9:0b:12:78:e3:57:71:
58:a9:c4:d9:e7:4e:6c:80:d8:fc:62:e3:1b:74:4f:
70:56:78:8a:f1:e0:95:c3:22:4f:b2:ee:c9:75:37:
2e:46:39:11:c2:b1:3f:bb:2d:45:f4:2a:c1:70:62:
d1:b9:49:67:e2:ae:f5:79:fe:51:c0:d7:d0:cb:60:
82:03:b5:75:dc:1a:fb:02:f9:96:b8:2a:e8:3a:6c:
08:9f:74:bf:e1:11:e9:20:5a:b6:64:c9:c5:94:f8:
04:23:12:53:b0:f1:70:b3:7b:ac:30:f4:6f:33:4c:
17:43:38:bf:b2:fb:5e:54:f1:05:d7:cb:80:05:37:
0a:d1:54:58:f4:76:96:96:d4:e5:3d:56:0a:a1:c9:
f8:ed:a0:37:ab:3b:fb:ad:07:1a:d1:83:42:b7:3a:
d3:3d:fe:52:98:77:35:36:9f:3d:db:11:e2:72:c4:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2C:08:2D:C3:D7:00:66:1C:F6:4D:42:0C:E2:8C:23:00:5B:55:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f8a51f56-762d-33d4-8f47-b6b25f534ddf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.176.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:39:f6:e2:43:de:bd:6d:b9:dd:d7:63:b5:2c:76:be:28:28:
e1:f4:b2:5c:77:fe:66:92:f7:17:e9:fe:82:4a:2c:0c:73:82:
25:cf:f5:5d:a7:a1:45:c4:f6:11:68:23:4f:76:46:dc:e2:bb:
3c:73:f1:63:e1:78:56:77:57:e2:fe:99:af:87:c5:de:71:15:
4d:33:de:c1:65:09:8e:29:be:38:d0:9e:13:18:95:79:3f:75:
89:16:2a:f7:43:e4:fc:37:1a:d2:14:7a:0e:93:af:a9:85:ec:
2c:ff:3b:f8:06:f1:59:f1:e3:c6:c0:f8:cc:63:9a:83:8a:95:
4d:ff:c1:36:d9:91:78:06:2d:2c:6c:e2:3e:6e:98:ab:72:80:
2e:b1:12:13:2d:b4:9e:ab:74:d3:fb:a1:a6:94:40:a1:c1:02:
b1:0f:71:9c:5a:d8:16:cc:ff:b3:c7:9c:16:54:b0:50:9b:b7:
e0:84:d7:48:11:2c:8d:19:f2:38:24:cb:da:08:ee:5c:e3:ac:
19:55:c4:ac:1a:53:f7:3d:9d:a9:1c:b6:83:12:c9:35:bc:19:
4c:52:2e:2b:b4:38:ae:02:44:af:08:c8:4a:25:c5:ce:8b:8d:
16:8a:16:af:26:3f:ca:e7:d6:ef:5b:ce:54:44:98:8a:eb:f0:
bb:b7:16:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgg32dY5qEmTN5QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZTM5MjdiNGMtNTY2Zi00ZjIwLWJiZmUtYjg5ZGJiODYzNDUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEpcBH9WtWxnXQpaDNbG3Brtk7xyvWGEQ4yO
T2KG92RIH75ZTamMFJ12GVs8zggjeaHIB9dqjrjphj96bKhXDSitn3CvPf+R0im+
fTObBQZIHLkLEnjjV3FYqcTZ505sgNj8YuMbdE9wVniK8eCVwyJPsu7JdTcuRjkR
wrE/uy1F9CrBcGLRuUln4q71ef5RwNfQy2CCA7V13Br7AvmWuCroOmwIn3S/4RHp
IFq2ZMnFlPgEIxJTsPFws3usMPRvM0wXQzi/svteVPEF18uABTcK0VRY9HaWltTl
PVYKocn47aA3qzv7rQca0YNCtzrTPf5SmHc1Np892xHicsTRywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcsCC3D1wBmHPZNQgzijCMAW1UeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZjhhNTFmNTYtNzYyZC0z
M2Q0LThmNDctYjZiMjVmNTM0ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErcKwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFg59uJD3r1tud3XY7Usdr4oKOH0slx3/maS9xfp/oJKLAxzgiXP9V2n
oUXE9hFoI092Rtziuzxz8WPheFZ3V+L+ma+Hxd5xFU0z3sFlCY4pvjjQnhMYlXk/
dYkWKvdD5Pw3GtIUeg6Tr6mF7Cz/O/gG8Vnx48bA+MxjmoOKlU3/wTbZkXgGLSxs
4j5umKtygC6xEhMttJ6rdNP7oaaUQKHBArEPcZxa2BbM/7PHnBZUsFCbt+CE10gR
LI0Z8jgky9oI7lzjrBlVxKwaU/c9nakctoMSyTW8GUxSLiu0OK4CRK8IyEolxc6L
jRaKFq8mP8rn1u9bzlREmIrr8Lu3Fgg=
-----END CERTIFICATE-----
Generated at Fri Apr 4 08:28:28 2025 by rpki-client