Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa
File: 63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa (raw, json)
Hash identifier: IoXSGNrLWvhbHGk7PSDstv1nt/SVqPdEYGYBWseXr9c=
Subject key identifier: 5D:FD:8F:FA:40:34:77:36:4F:17:1C:13:1E:8A:9D:67:C6:2E:70:B7
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5820716C5D840AAC21BCE00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 172.217.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:07:16:c5:d8:40:aa:c2:1b:ce:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=c0f00528-1b73-4d2b-a3ae-192f623523f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:62:0f:5e:9e:1e:7a:ea:04:4b:a3:d8:5d:e2:
e0:63:37:d5:36:b6:db:75:6c:b0:a1:17:b7:0f:26:
4e:13:c2:c8:b2:8e:55:d4:af:72:59:79:4e:cd:70:
ce:d8:7f:6d:09:29:9d:9e:70:20:de:df:c1:c6:dc:
83:61:20:63:c0:d9:b3:ba:b8:f3:f5:56:00:74:a2:
ee:75:a5:d2:27:7b:06:56:58:0b:09:51:b0:ab:85:
ab:da:85:b5:ee:d0:d7:bf:e4:26:33:7c:e4:43:0d:
a8:37:b0:6b:b9:20:35:d4:e7:a8:0f:fb:d9:da:f8:
11:ff:fd:f1:eb:5d:41:1b:32:8e:f5:a2:13:07:9c:
15:46:00:bb:14:80:9f:a7:c7:df:41:dd:d8:c8:a4:
78:e4:47:16:09:b8:d8:c2:3b:76:79:50:3a:a4:b0:
18:b4:1e:50:a6:ef:d9:dd:e5:03:5b:b9:35:b1:d9:
bf:dc:d8:08:dc:ed:9e:69:0e:2b:1d:e7:70:2c:01:
03:18:d4:f3:c3:17:17:98:c9:86:0e:1a:4f:14:05:
8a:23:b7:44:fc:b0:3d:58:e6:08:fa:a9:34:1c:55:
af:b2:27:98:ab:8e:cf:b0:bd:3a:7f:71:4d:38:2b:
85:60:71:d1:c8:d0:ec:5b:a6:fe:38:4f:84:d2:8d:
21:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FD:8F:FA:40:34:77:36:4F:17:1C:13:1E:8A:9D:67:C6:2E:70:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:95:5d:41:17:fa:bc:ef:77:21:ff:ad:a5:57:99:9e:5a:fe:
33:0f:cc:12:a9:b9:1c:e3:f9:7a:80:88:46:af:ca:c1:c4:66:
9b:4a:d3:d3:fb:3f:6d:ea:e6:2f:1c:d4:82:36:a4:b7:d8:32:
b4:e9:62:b6:c7:72:6b:25:84:a0:2b:46:9a:76:c2:9d:66:42:
b3:00:2b:51:f3:ae:6c:ad:04:03:a5:02:ab:b8:94:78:48:f0:
ce:7d:be:de:6d:5a:6d:27:51:75:ef:fd:10:f0:e0:2e:7a:e3:
36:db:2d:6d:a9:ca:bd:db:52:9c:0d:7f:0b:9d:84:ca:9c:30:
6a:59:74:f6:0f:f8:d3:37:34:5f:b9:26:e9:0a:91:16:61:6d:
29:36:a2:4f:f6:49:8d:37:66:86:0d:1b:98:b6:7e:ac:b5:93:
e4:48:7b:39:a2:3c:ff:d7:10:de:f7:9c:d7:89:2f:28:6c:2a:
b4:9f:86:1e:26:d7:19:97:17:a4:70:50:8d:16:68:73:3b:0e:
4b:02:52:f4:62:c2:f1:1d:e6:cc:d2:84:13:57:65:7b:cd:a1:
71:49:ab:2c:47:c8:85:72:c1:7b:d1:84:2b:db:35:7b:09:b9:
f5:cd:dc:a3:c1:5c:7b:6b:58:2d:d1:9e:de:d4:24:09:a2:ff:
9a:fb:4a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:48:30 2025 by rpki-client