Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa
File: 68f36d92-4799-3e71-ac26-4f8973932a80.roa (raw, json)
Hash identifier: qkxHIHyop18Ep2JeFPk/w31F24/i7rk+mNEbz8A8pz0=
Subject key identifier: 8B:47:0E:96:DF:7A:38:52:27:90:FA:08:F0:96:D9:C7:DA:BF:FF:0C
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12E8EB07FFB5EB24AC380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 172.253.56.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:2e:8e:b0:7f:fb:5e:b2:4a:c3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=1fc85095-905a-404d-ab06-1840127f0836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cb:88:a1:1c:81:f0:bc:33:51:a0:f7:a7:29:
f2:d3:19:e8:2d:d9:18:0c:8e:bc:77:1e:61:90:e7:
4c:75:94:d8:3b:88:57:1f:cd:55:57:d6:3c:04:3e:
06:14:23:0a:f9:05:c3:ce:cb:58:75:bd:65:81:23:
d8:6d:11:41:86:a7:85:37:07:52:78:e2:5b:10:68:
0c:5e:82:23:9a:db:7b:28:82:13:9e:4b:cc:23:d6:
04:dd:8a:35:83:18:f4:c5:78:b5:1d:99:a9:c6:ff:
49:0a:fc:d7:bb:18:f1:f7:d1:26:e5:87:b8:20:00:
d8:e0:1d:6d:d1:83:75:d3:0a:93:03:77:db:f4:58:
8a:62:65:16:ab:17:bf:8e:18:a9:41:9e:3e:84:f7:
bb:97:1f:46:1a:69:e7:bb:99:31:1d:9d:09:0f:ba:
1d:99:41:7b:0f:31:80:25:2e:57:d7:d3:11:a1:ab:
70:b1:60:3e:d1:8b:3d:83:d4:c0:2a:19:ec:59:8e:
59:d1:43:00:f9:41:a3:66:3d:d0:77:bc:6b:43:b6:
cc:5c:b6:de:4a:c1:a4:98:8f:05:cf:14:07:ca:fc:
96:5b:c8:09:77:10:c0:14:4a:bb:3c:77:16:ca:68:
7f:d0:3c:49:b3:37:3b:93:a5:4f:f9:c9:c7:f8:7e:
bb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:47:0E:96:DF:7A:38:52:27:90:FA:08:F0:96:D9:C7:DA:BF:FF:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/68f36d92-4799-3e71-ac26-4f8973932a80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.56.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:67:3d:a6:9d:51:f9:b5:55:6d:9d:9c:26:27:2c:f9:6d:43:
24:41:be:33:41:0e:90:51:b2:a0:55:61:35:b8:e6:52:e6:f3:
1e:f1:cf:7d:3e:a8:8c:4a:a2:b0:b0:76:ac:36:27:f7:bb:4f:
47:da:ce:f1:55:2e:31:96:65:51:9c:70:94:7d:b6:48:79:cc:
24:82:73:31:28:7c:68:52:7e:b2:a5:77:2e:0b:eb:51:23:3e:
17:70:80:b3:7e:9e:5d:fd:31:fd:03:ab:72:10:66:f8:2e:78:
07:22:24:ce:4f:70:9c:56:1c:9b:de:a8:54:23:69:72:6f:5f:
15:81:87:ae:75:04:0b:11:02:ac:43:10:cf:45:96:c6:16:4a:
06:59:dd:a7:c7:50:bb:58:1a:df:16:9c:fa:03:47:ea:a5:e6:
ce:d9:58:2e:76:27:8a:7a:01:4b:e0:97:2a:5d:c3:b2:c2:70:
d4:a6:e8:1e:ca:0e:76:21:a3:08:20:2c:38:2a:5d:6b:09:b9:
36:7d:d0:2a:81:fa:e2:e8:1c:e4:3c:b8:71:7b:d1:5d:07:6e:
2f:17:c1:bb:4e:64:a1:01:6e:fe:06:59:a1:75:40:d3:2b:aa:
a2:bc:3f:f1:ad:b0:49:bb:88:e3:93:9d:ca:c1:80:b0:fc:de:
08:8d:e0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:32:50 2025 by rpki-client