Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa
File: 71caa928-410b-3dac-b40d-bf6cf8a7795f.roa (raw, json)
Hash identifier: CDxlvgN6aOHkLmJC6pbECaxLsyyg6hgYgMpUPfDVgXw=
Subject key identifier: F8:80:43:6E:27:25:DF:FC:05:4B:2C:7A:4A:EA:5B:63:E7:8D:40:E6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5820C33ED403CDBB60EB488
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 172.253.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:0c:33:ed:40:3c:db:b6:0e:b4:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5cf7ed81-6057-4343-bbc4-f0487c183a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7d:59:a3:03:e2:b0:51:b3:5d:dd:74:63:28:
67:2a:2a:19:f8:03:ca:57:ca:fd:73:e8:8c:ad:9c:
ff:ba:4a:4b:3d:19:3d:88:9e:9e:a5:8d:e5:a4:36:
b9:7e:16:e2:15:ee:0e:44:0f:d0:35:fa:b0:65:f5:
4f:6d:c6:4e:79:31:fb:ec:ee:b1:50:b3:31:cd:e8:
55:d0:98:40:2d:8a:5d:6b:2f:3e:1f:b2:0a:87:07:
c2:5b:dc:62:c2:c2:88:c9:27:f5:0c:4f:24:8c:23:
e3:71:0b:7e:34:40:9e:2b:05:5a:94:c8:d5:9c:9d:
54:34:ae:84:4b:a2:01:15:22:ed:83:c4:1c:42:27:
43:10:5f:ae:a5:17:13:2b:94:b2:ed:ac:4e:9f:7d:
e0:ca:19:4a:45:33:03:c1:11:26:94:d1:8e:f1:79:
1d:05:90:18:ea:2f:55:ae:80:27:47:62:88:4d:ac:
85:d3:8e:4e:40:16:48:9d:e3:2a:b3:ad:a0:a2:1f:
60:f7:7b:e3:47:8f:04:dd:a2:83:06:59:93:24:28:
0e:8b:8c:a6:a4:8d:64:85:a1:58:2e:f7:1d:45:72:
f5:1c:fc:0f:e7:96:8e:11:32:0c:1d:43:25:d1:40:
c6:a5:7a:be:1f:ce:71:07:42:37:18:b3:68:0e:f4:
1c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:80:43:6E:27:25:DF:FC:05:4B:2C:7A:4A:EA:5B:63:E7:8D:40:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/71caa928-410b-3dac-b40d-bf6cf8a7795f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:ed:86:22:65:af:a8:06:04:0d:7a:95:73:9d:c7:74:f3:cd:
8a:3e:7f:80:87:03:76:33:fe:72:4f:2c:92:4b:fe:3e:ce:1d:
7e:5c:49:06:a7:ea:fc:92:fe:e9:87:a6:73:62:0c:54:8a:d7:
3f:4d:86:af:29:84:8b:e2:04:28:0c:37:85:fe:da:92:a4:53:
0c:da:bd:70:71:da:35:cf:de:43:a1:d0:81:d2:eb:c8:c3:9d:
1e:f1:b0:2e:85:29:13:ee:81:39:8e:ad:0c:09:b9:ff:c0:a8:
26:62:4e:e0:76:42:40:38:81:c2:12:a2:d4:6a:d5:e8:d4:3a:
17:4b:b7:33:2f:6b:36:85:72:ee:9b:ea:a6:2e:b7:b8:31:ee:
20:91:05:30:43:23:fa:3c:eb:d1:70:4a:81:71:9e:0a:c0:f4:
c2:5f:ee:20:83:62:9d:9b:2e:89:d8:cd:b9:83:e2:74:df:0c:
7a:6f:1c:38:0a:b4:8d:5b:06:05:9c:3c:89:6d:2c:73:0c:dc:
4c:f3:2d:ee:74:05:aa:aa:c7:d7:b3:c1:7c:aa:49:c0:67:1c:
51:2d:a3:b6:24:b3:af:b6:47:2c:d3:02:82:98:d1:d0:39:d6:
2f:89:69:fa:4a:54:fe:f8:36:1d:3a:07:26:b4:46:6f:72:03:
33:58:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:31:40 2025 by rpki-client