Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa
File: cfd34f80-5b5d-329f-818d-08233d807954.roa (raw, json)
Hash identifier: LCeVRZigGTWIuAl3+AlUqNv3gG93W+c9JL555Ilmf7M=
Subject key identifier: 49:BD:76:14:07:94:F0:DE:EA:66:93:7C:AD:F6:3E:CE:45:E3:7F:32
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5820D3BEDFBCD83C9BBB9E8
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 172.217.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:0d:3b:ed:fb:cd:83:c9:bb:b9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=6e6a2f7e-78c3-40e6-98e3-eade2d5d09b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:55:80:c4:40:ce:37:d4:63:ba:77:7f:61:f9:
ba:80:60:bb:2c:0c:90:52:0e:c4:9f:06:f5:a7:26:
64:72:34:61:8f:dc:55:5e:58:1c:a9:4d:81:f9:22:
18:7d:30:5f:1f:ae:87:97:31:98:d2:d0:ec:73:3d:
08:a7:6c:34:62:26:0c:a2:91:8b:b1:d9:47:b0:ab:
7b:31:b1:7e:83:8f:0a:9e:74:93:5d:3a:d6:dd:6b:
32:d6:a9:e6:70:0b:79:ec:31:8e:4c:c6:08:54:fa:
12:23:26:f1:bc:a4:20:23:d0:48:73:14:a4:38:4b:
38:22:3d:98:82:26:2e:f3:75:a7:a4:bd:c5:f4:36:
15:f6:2d:47:40:a5:64:4f:3d:be:d0:b9:75:e6:fe:
65:ff:86:18:f8:08:ec:da:3a:26:2e:13:cb:58:ea:
c4:af:e7:1c:18:87:0a:c7:98:df:3a:4a:a2:fb:13:
bf:d5:55:4e:b9:20:8b:c6:00:be:96:1a:42:5c:31:
10:ca:54:f2:19:33:0d:2d:03:0a:3a:f8:7a:b6:e6:
75:74:f0:87:69:e9:92:ab:9f:1e:71:c1:3c:7c:39:
4f:d7:ad:3e:53:68:ad:c8:42:f8:22:ba:65:2d:69:
ac:e3:93:26:78:0b:4c:7a:ab:6b:16:49:62:f3:44:
c8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:BD:76:14:07:94:F0:DE:EA:66:93:7C:AD:F6:3E:CE:45:E3:7F:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cfd34f80-5b5d-329f-818d-08233d807954.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.179.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:fa:a9:f3:a5:bc:b9:6e:de:43:3f:28:5d:30:00:05:b7:41:
75:db:56:71:c5:8b:0e:b2:00:83:71:fb:c3:28:96:4b:ca:d8:
1a:11:ac:ce:51:5f:4e:ac:86:6d:f9:8b:e6:28:41:0f:83:df:
84:c0:8b:14:98:95:5b:90:d4:f9:30:87:00:14:9f:11:42:43:
a9:54:32:71:67:b6:39:24:f8:54:e3:25:08:23:7f:c4:99:94:
14:dd:93:aa:19:9c:32:da:31:af:d1:a0:b0:ab:79:94:2c:ba:
2d:cd:f1:fb:5c:bc:46:28:54:47:20:d6:db:1c:b0:40:89:50:
57:b2:84:96:7c:69:ee:58:10:41:f3:9f:fc:1b:44:6a:4d:5d:
5b:ac:60:ce:c1:09:65:04:f1:b5:da:0a:e5:27:a6:3b:5b:37:
4d:99:63:1c:74:ee:cf:44:3b:99:a9:84:a6:7d:b3:f9:88:74:
67:0f:1e:7a:49:75:9d:64:41:2f:38:11:73:a2:dd:37:63:4c:
11:c6:c8:16:31:a7:16:fd:68:b3:b5:00:22:b3:b9:1c:f3:58:
7f:ac:62:de:86:0c:88:3c:01:ec:70:ab:e3:ff:a0:df:96:ec:
6b:d5:2a:b9:f2:a2:af:11:5f:b4:40:2e:ca:bc:91:cf:8c:26:
6c:c0:51:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:50 2025 by rpki-client