Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa
File: d5e70c7e-2fb9-323c-a160-17182970c9ca.roa (raw, json)
Hash identifier: aW04dc2TjsRzILYWGBROX9mH0+Dpob36n0/2RfB5M3I=
Subject key identifier: 2C:9F:E4:B9:B8:40:5F:29:BD:45:28:C1:68:69:F6:54:9B:E6:0B:C3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5818035A5BDEC1B4D9D0D80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:80:35:a5:bd:ec:1b:4d:9d:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=5fb9c3d6-3454-4c7b-b5d7-64374eb8726a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3f:d2:0c:1b:98:5f:e5:ea:b1:c7:02:33:ec:
1f:ca:53:01:85:6f:44:3d:fc:3e:ee:b3:e6:36:d7:
f6:63:e3:be:fd:22:91:ba:3d:d0:05:a8:9c:89:4a:
ba:83:aa:59:b7:51:75:77:e4:f5:df:d5:bf:93:22:
b2:4a:f8:c4:ae:41:65:bd:f6:09:ca:c3:bb:91:0d:
8c:a4:7f:0e:c6:87:b8:ff:14:42:cb:28:85:91:8d:
3c:2f:3f:c5:a4:9b:94:a8:a0:b4:78:98:13:c5:d8:
69:3f:10:c1:cb:3a:11:77:d7:74:f9:31:d6:86:01:
08:83:02:89:1a:9c:90:d5:c2:1e:f2:62:78:56:eb:
57:7f:ab:fe:07:39:98:11:f3:f9:cf:40:1f:0c:f3:
6e:8c:fd:21:fc:e1:e1:ab:3b:2b:99:7c:0e:19:74:
74:fc:77:fc:82:93:0c:8c:a8:b5:5f:93:a2:20:f3:
8d:7e:20:b0:15:50:64:f6:92:cd:6c:50:9e:06:ea:
26:3b:62:8f:48:0d:a4:b2:01:88:8b:24:dc:b1:b8:
9e:d5:34:0b:13:e9:f1:e1:73:10:02:69:fa:25:20:
7a:9a:62:56:a1:37:24:5a:54:99:d8:80:da:48:18:
2c:be:fd:22:6d:7e:ce:fa:ca:2b:fa:5f:13:4d:29:
bb:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9F:E4:B9:B8:40:5F:29:BD:45:28:C1:68:69:F6:54:9B:E6:0B:C3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d5e70c7e-2fb9-323c-a160-17182970c9ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:3a:77:81:7e:d2:c5:24:9f:fc:af:16:9c:0e:17:c7:a9:d5:
a7:35:70:54:cf:5f:59:e9:ee:0e:4b:08:27:62:02:f0:7a:90:
c4:84:40:30:02:5a:a8:a5:b3:2e:bc:6b:d3:e7:56:c3:08:bc:
46:da:2a:43:3a:5d:99:ec:18:28:52:c4:a1:70:50:92:39:8e:
17:67:9c:fd:f4:f1:c4:6c:0d:d9:13:d5:83:c2:70:8d:b3:2d:
05:d4:84:e1:5f:3c:7d:07:d6:72:96:13:82:96:3a:1d:86:92:
53:70:4e:4d:83:55:3d:62:1a:b6:ae:21:70:eb:fc:6f:fa:57:
67:c0:f7:03:c9:f9:14:66:53:87:fe:13:ff:f4:6b:f1:5a:8f:
e6:2b:fb:72:50:d6:83:b8:fd:54:4f:28:eb:2b:dd:18:93:b4:
ad:e3:48:d7:0e:e5:e4:b7:84:30:0d:ae:22:81:9c:01:18:c0:
33:96:d0:02:5b:c8:e1:1e:dd:34:ff:d9:90:30:b6:e8:6b:4b:
33:a2:10:72:75:99:77:82:0a:26:d6:42:44:6d:84:cf:ce:a2:
64:d7:da:b2:fd:05:68:8e:ac:48:f4:20:2b:01:dd:25:75:2b:
13:53:a4:84:3d:5f:40:98:74:5c:d3:0d:7e:c3:78:4a:33:77:
fb:7f:44:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:37:33 2025 by rpki-client