Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa
File: ade63972-a7fa-3aa6-9cdc-7f422468c453.roa (raw, json)
Hash identifier: zJskgVh43Xf/Fy3UYkdgw4pttBaIgFPJgVR+/+2CWLo=
Subject key identifier: D6:EF:10:E5:63:41:1E:C0:7E:65:40:6D:5A:97:6C:DD:4E:73:1C:9B
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5820756B7F267AC3B322940
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 172.217.222.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:07:56:b7:f2:67:ac:3b:32:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5b4a20dc-4843-4f17-a8ea-5b7ba267390b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:55:df:ff:4d:3d:b4:61:f4:db:1c:f8:51:
54:e4:4f:8b:db:b4:31:80:f6:dd:52:0c:b6:86:d7:
b8:20:b1:ed:2b:06:0a:29:13:1d:de:6c:05:ff:1a:
69:af:73:e4:21:45:f1:3d:05:8f:b6:40:b9:a4:9d:
b1:49:77:02:0a:e9:d8:fa:07:93:a4:c4:bb:93:81:
8f:9c:5c:e9:e9:14:e2:79:50:ce:25:9f:28:52:b1:
d9:bb:ef:64:28:69:e5:a0:2c:69:49:40:30:6a:e2:
8a:ea:8f:1c:26:56:d4:b6:1f:bd:33:4a:31:b3:19:
a7:a0:ee:d1:74:9d:30:69:a1:8c:57:74:e8:c7:fc:
12:ce:bb:10:9d:d4:45:b4:7d:82:ac:e9:bf:a5:ab:
ba:cc:83:cb:e0:70:55:b9:a5:61:79:cd:0d:26:7f:
65:c4:ee:42:c4:9f:cc:bf:72:3a:81:4e:5c:75:4b:
85:7d:34:71:a8:b8:dd:76:3a:1f:01:be:cb:ae:8e:
a0:88:88:9c:c0:df:f9:48:07:d6:04:c0:a7:79:70:
17:a5:21:af:db:0f:65:c9:79:42:a8:0f:7b:73:4c:
ba:5f:75:d6:0b:59:1b:85:77:12:30:cd:b8:e9:08:
3e:0f:d4:b3:28:6c:d9:96:c9:b3:d4:0b:4c:f7:d2:
a9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:EF:10:E5:63:41:1E:C0:7E:65:40:6D:5A:97:6C:DD:4E:73:1C:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ade63972-a7fa-3aa6-9cdc-7f422468c453.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.222.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:55:7d:d9:f1:f6:ed:45:2b:6d:8a:51:97:53:f1:e6:87:a0:
62:7a:5f:72:20:7c:1e:b3:60:69:4d:bc:e1:25:3f:a9:dd:c6:
4f:74:1c:a7:29:9d:fa:b6:b8:f8:90:63:f6:1a:63:30:1b:8a:
03:12:88:d7:0e:97:b0:4b:af:35:0f:02:a5:f1:38:65:83:1e:
7a:db:b6:22:4b:b4:df:de:77:ce:0b:41:37:3e:46:9e:1c:2d:
3f:03:68:5b:1a:22:99:7c:2f:ae:67:bf:bc:98:85:bd:d7:1d:
6f:de:b3:7e:35:71:7d:d6:1d:cb:49:93:bc:33:98:58:57:fb:
23:d5:4a:7b:a2:a8:4a:6c:d5:80:62:24:85:91:5b:66:bf:be:
f7:b8:18:ad:6c:df:83:25:f3:58:cd:dc:12:4d:44:b4:d2:45:
e7:a2:9f:d6:05:91:f8:a6:78:9d:54:05:bd:84:0c:26:72:e3:
d2:60:bb:1e:89:74:98:25:da:bc:60:24:89:bd:19:04:c3:ad:
ed:c4:72:09:08:f1:74:e0:c6:ad:1b:81:e2:88:79:81:b2:0a:
9d:ae:d7:e7:43:ff:01:47:43:63:df:ca:07:7d:23:6f:20:2d:
fb:d8:51:c4:2a:b6:66:64:6f:dc:bb:58:e8:07:7b:e5:77:8b:
09:8a:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:32:48 2025 by rpki-client