Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa
File: ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa (raw, json)
Hash identifier: tXTI8HbAjhgsuk3fF2U5FGmxDIChaoR9cbHgiP1XSvs=
Subject key identifier: 5F:DB:DA:39:4E:C1:14:61:35:97:8D:E3:98:D6:21:7C:B5:BD:A9:97
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58217A1A6EF745D00D945C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.70.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:17:a1:a6:ef:74:5d:00:d9:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=cecb7fc4-23a1-4df9-889c-c3c55a68165c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:20:6d:91:55:50:22:70:5a:11:43:b7:07:
d3:1a:f2:19:6a:dc:cc:3a:42:04:a1:22:6f:5d:05:
e3:c5:55:4c:0f:1f:18:21:6e:09:66:ac:90:68:62:
eb:b5:9a:86:67:ba:d3:a7:49:da:bf:6a:24:ab:49:
3a:88:60:2f:41:68:43:af:5c:f7:24:49:63:1e:f2:
57:a0:67:e1:75:90:d7:76:68:be:57:d7:cd:ad:16:
fb:27:c3:e2:26:e1:78:54:9c:f0:01:5b:84:56:b1:
f7:6c:83:2c:a1:9b:74:dc:be:f2:ec:93:6f:0d:f9:
6f:56:24:8b:b7:39:fe:12:40:9a:86:b3:95:52:fe:
01:34:05:aa:21:ea:f0:b1:49:ae:00:35:12:93:1a:
cc:e8:89:20:15:5e:be:7d:d7:3b:79:bb:e5:bd:71:
f5:7c:6f:4b:fb:45:15:a3:60:51:19:db:9a:f0:2c:
28:83:fd:36:18:8e:5f:ac:37:10:97:42:74:8f:70:
2a:29:88:65:e7:2f:b0:4a:3e:94:26:bc:2b:98:c0:
69:8a:a7:30:22:d8:e7:9f:2f:41:48:c2:ef:85:d0:
06:9b:0a:43:bc:9b:1b:79:94:95:50:d0:36:db:56:
d8:06:e6:ee:82:af:a5:75:4f:de:f2:8f:cd:92:e4:
ff:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:DB:DA:39:4E:C1:14:61:35:97:8D:E3:98:D6:21:7C:B5:BD:A9:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ae1b453c-8bcf-3cb3-8026-935fb62e93c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:84:65:65:1c:e2:7e:9f:04:e5:e2:17:02:19:23:79:7e:c2:
52:bc:2a:44:91:73:3c:0a:e7:65:53:a0:35:53:6c:47:b3:51:
df:3c:c8:d6:45:d5:6c:ac:19:7c:82:30:b0:8e:8a:2a:c5:d5:
3a:e3:97:1d:10:ac:0b:0b:7b:14:fb:9c:b5:46:2d:ce:bf:96:
51:28:29:e5:6a:d7:6e:36:d0:e5:06:fb:09:f1:35:ac:74:b2:
ff:9c:b8:07:07:36:86:82:66:97:ad:d2:ba:f5:b4:a3:0f:23:
73:bb:ee:70:c9:75:58:9f:3c:ef:7a:66:39:ba:8b:bc:68:71:
ba:a7:bd:81:6d:41:74:18:48:9c:fb:49:de:0d:f6:a7:bb:bc:
63:3a:78:a5:a7:45:c6:d0:29:96:c2:0e:bc:63:10:91:5b:b7:
32:69:28:a1:35:fa:93:af:7a:16:93:7f:c8:5d:a2:c1:f5:18:
77:7d:37:64:77:f7:6b:45:66:0d:98:6e:d9:8a:95:17:82:df:
2c:f2:a8:80:17:1f:73:2e:f3:6c:36:ef:ea:3a:a3:14:3c:c1:
80:fc:31:ce:c9:11:61:15:e9:f5:bc:af:91:a8:a2:d4:58:a3:
c0:5d:8e:51:2b:87:85:61:7d:70:c8:b2:59:40:09:49:25:67:
64:35:2d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:27:17 2025 by rpki-client