Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa
File: a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa (raw, json)
Hash identifier: I1InKC1yyKgM+OnOdqs0zlXQUkzqwYQ8YAAyLUhQMTc=
Subject key identifier: 89:66:16:59:E4:1A:F7:55:A4:9F:0E:65:45:C9:D9:78:CA:5A:D0:F2
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58184CE8B60EB9FD28BE300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:84:ce:8b:60:eb:9f:d2:8b:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=610acd01-9818-46b9-95a5-da10f5fcc9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c3:0d:69:01:03:45:de:d6:61:20:bb:30:9b:
9c:83:a1:ea:e3:bd:68:67:3c:c7:1a:70:03:a0:aa:
9a:b3:80:cc:c1:29:4a:66:47:29:7a:8c:f7:33:a9:
28:89:0e:15:87:e9:fd:dc:3d:de:dd:43:9b:18:43:
f2:2b:0e:b8:85:8f:1b:ad:95:22:8f:c7:e2:59:3d:
07:78:f8:58:88:75:1c:8e:6c:0e:c9:f0:75:04:96:
c7:f4:d0:c8:d3:7b:93:ce:f5:4b:cb:98:21:c0:f0:
6a:8f:db:98:f3:31:c9:31:90:f4:16:82:25:52:9c:
cd:60:4f:df:ce:c0:a6:09:d0:b5:59:a3:5d:82:f7:
65:d9:e9:53:03:0e:ac:fc:1b:16:d1:de:4e:a6:bb:
6a:60:ca:7a:9a:ce:4f:6e:7d:3c:27:2b:9f:d3:7e:
fc:67:c7:21:bb:ac:f0:2a:89:dd:32:d6:11:39:8c:
ea:90:30:ee:3a:a8:4f:c6:97:de:ed:3a:5f:38:84:
15:ae:a1:47:33:41:43:fa:46:2a:fb:85:d4:81:ef:
11:e8:f0:6f:b1:94:1d:c8:e9:5e:0c:30:78:b0:eb:
92:75:ce:b6:21:a1:f0:aa:eb:58:b2:cd:d4:47:ac:
57:46:a6:bb:7a:9d:bf:b2:c1:e2:a4:bb:5d:26:14:
b8:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:66:16:59:E4:1A:F7:55:A4:9F:0E:65:45:C9:D9:78:CA:5A:D0:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a9fe3445-9975-3a6a-8a93-0a68f83f9114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.212.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:77:76:3f:b4:28:fe:3f:98:26:8a:ce:a3:71:78:70:e0:a7:
32:2e:4e:b3:2f:91:e3:72:1f:0b:9f:01:a8:dc:50:4a:eb:62:
7f:2a:5f:94:fc:90:22:cf:4e:90:2a:7e:0d:50:9a:bc:cb:8c:
2b:b7:b0:63:de:57:38:82:22:42:77:54:1b:d1:a5:59:48:e3:
cb:d5:3f:3c:89:b5:62:a4:e6:31:4a:b4:aa:01:39:44:41:52:
2a:15:40:14:a9:c6:79:7b:36:96:96:c5:98:6d:fb:64:82:41:
da:94:d9:7b:90:17:02:c8:c5:fc:4a:93:51:73:a4:a4:6c:16:
7f:c0:13:83:fb:9c:54:9f:29:f4:6d:de:96:9d:fd:cf:1c:f8:
33:80:af:3c:dd:70:54:56:6a:4e:01:24:58:3b:3c:13:3d:11:
be:84:dd:1a:1d:f7:c6:45:4a:4a:19:e9:be:7f:71:c0:51:ee:
60:52:ad:24:63:4b:62:b0:26:61:f3:84:3e:f3:14:11:3b:4e:
9b:38:c7:a3:3b:6c:fd:c3:c0:10:21:3e:ee:7c:ab:29:52:d5:
62:c6:16:a0:c9:0e:be:6f:d5:58:83:84:91:74:a7:24:8b:16:
75:48:c4:f8:ef:5c:d1:98:92:a4:07:3d:f7:60:47:cb:0a:3c:
65:a3:e0:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:34:30 2025 by rpki-client