Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa
File: 1b60dea6-b796-375b-92fa-3d1691aacc51.roa (raw, json)
Hash identifier: IfvIpvef4DDLbmvhI4wIxIsgNdizVLGR7HsMz+60bS8=
Subject key identifier: BE:7C:22:C2:CB:87:B8:36:86:71:DD:A9:C7:BA:51:21:BB:AA:E6:FD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DA8344AE3D30B1941C3B3E80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa
Signing time: Wed 12 Feb 2025 02:37:36 +0000
ROA not before: Wed 12 Feb 2025 02:37:36 +0000
ROA not after: Tue 13 May 2025 01:37:36 +0000
asID: 15169
IP address blocks: 172.217.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:da:83:44:ae:3d:30:b1:94:1c:3b:3e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 12 02:37:36 2025 GMT
Not After : May 13 01:37:36 2025 GMT
Subject: CN=5e981834-8823-4818-8779-cb97e7bfcd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:05:ed:3a:04:ea:6c:dd:e3:a7:e3:2a:e6:14:
e7:c4:fc:84:c2:df:1c:97:13:a3:5d:37:cc:8e:6c:
fe:91:e7:fc:47:9b:1e:d3:b1:b4:5d:c8:82:23:ee:
9f:d5:cf:e5:ce:dd:f8:85:5b:f3:f3:e9:a9:d9:1f:
eb:25:59:52:72:a1:c4:58:9a:26:4b:50:d8:ae:79:
d0:18:1a:92:05:4f:21:7c:41:d8:5e:1a:3b:40:85:
e9:94:3b:bd:68:fa:c7:d5:2c:c3:64:de:0e:20:b1:
50:50:90:ad:33:0a:36:26:a7:e6:ad:29:7c:bf:f2:
ed:aa:0b:ee:66:3e:33:67:ba:48:cf:d5:4c:56:1c:
6d:71:51:85:23:60:28:9f:26:d7:6f:e6:3d:fa:70:
39:4a:d2:85:2a:a4:d0:b7:c0:66:0e:4a:ef:e1:b9:
bb:29:4c:b0:a1:bf:cc:35:7f:98:6d:8d:71:57:a4:
4c:ea:74:70:b7:fa:2b:80:d2:5c:89:f0:4d:94:eb:
53:e6:66:3d:f5:d1:e5:d0:4a:70:64:7a:93:ea:d4:
34:a9:5f:d0:75:1f:5c:0b:5e:3e:3d:b6:52:9e:6b:
ec:6b:6b:65:19:ff:b0:98:ad:68:7a:33:bd:66:ee:
33:85:0f:3f:49:32:0c:9c:31:20:a2:40:22:68:3a:
53:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:7C:22:C2:CB:87:B8:36:86:71:DD:A9:C7:BA:51:21:BB:AA:E6:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1b60dea6-b796-375b-92fa-3d1691aacc51.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.77.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:fd:7a:b1:02:d3:56:e0:ed:7a:c6:7c:13:2f:f9:96:5f:8b:
3a:f7:2b:18:f3:e9:1b:00:a3:2c:6e:1c:cf:b9:09:fb:ad:d8:
12:68:3c:44:f9:35:0d:af:c6:2c:2c:7a:fa:6e:86:ff:a4:68:
f7:1a:a2:62:13:81:57:80:f4:7b:7d:79:ac:d1:ef:6d:1d:4d:
38:e9:13:4c:5a:69:9c:84:b4:33:cd:b9:8f:62:38:3c:13:d2:
42:01:ef:e0:a2:b5:7b:35:da:d0:d4:fb:9c:43:c2:ff:82:fc:
fd:26:03:c5:61:50:99:4d:ff:1e:89:75:f0:cc:79:f1:27:57:
fe:9e:f2:cd:1b:5c:57:b0:dc:95:74:30:70:bf:ee:cc:88:1a:
e7:57:54:0b:95:73:a1:f2:f5:2f:45:a8:19:e7:d1:e1:ef:ed:
40:1d:0d:ee:38:20:b1:3e:12:8f:36:e3:e3:f6:b6:e7:b7:14:
e8:2d:dc:a8:e8:4e:81:00:1b:3f:8e:8b:97:a7:b3:16:73:b7:
dd:b2:b2:d6:b2:9a:5f:1e:97:f4:e4:97:9a:75:35:46:4e:4d:
2c:9f:90:f2:e7:33:31:03:c2:5f:db:50:a6:eb:29:41:1c:a8:
3b:34:0b:bb:7e:86:c0:44:2f:62:9c:41:2b:17:39:b9:50:2d:
67:3c:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:39:08 2025 by rpki-client