Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa
File: f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa (raw, json)
Hash identifier: mXHYETt4jpUOoT/8NpFx9kwz2Sb5fUHtRCcriB+2M1Y=
Subject key identifier: 60:9A:51:64:79:3D:F4:50:24:F9:07:BC:C6:76:9C:46:C4:7A:8D:E3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5822957472C2A7EDC569600
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 216.58.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:29:57:47:2c:2a:7e:dc:56:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=4480cae6-c805-4146-a180-e9ed83009534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c2:03:f2:4e:5b:c8:16:47:5d:37:b2:8a:4b:
6f:b3:75:ac:f7:1f:31:c4:d8:69:6e:32:92:15:58:
ac:3c:2c:dd:49:4e:e2:cb:ee:98:0c:e9:26:8f:f9:
db:fc:ad:c5:dd:3e:9a:55:b1:13:a6:55:2e:11:9a:
d6:4d:4a:43:74:e7:35:f5:8f:5d:b0:d6:b9:f1:6a:
bc:5e:43:f2:2e:79:e0:92:2e:16:d8:39:00:d1:4c:
48:04:9d:9d:55:b4:8d:da:da:bb:d6:b9:ab:e2:d2:
17:d0:cc:df:a2:d0:e6:d2:2c:4e:1a:b7:3d:a8:b0:
35:29:1f:a9:d0:6b:11:85:9a:16:82:64:6e:9d:55:
aa:80:1a:88:89:89:50:9a:c0:9e:bb:7b:4f:19:dd:
dc:81:3d:a6:5a:96:5a:b1:4a:ef:49:7d:59:12:09:
86:e5:73:f7:7c:00:b9:05:29:26:9c:58:56:41:e8:
0b:55:25:dd:3c:c0:a2:4c:ed:bc:cf:02:ba:7f:a0:
f2:73:4f:65:f2:52:50:be:09:c2:9b:ab:f1:2c:50:
f4:a1:a5:14:cc:81:cb:b3:68:69:1e:41:fd:1a:92:
af:e2:7c:d9:5b:ae:dc:12:66:ee:9d:bc:77:ce:d6:
94:d1:6d:51:a0:8b:ec:36:f7:10:d7:fa:5e:01:b3:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:51:64:79:3D:F4:50:24:F9:07:BC:C6:76:9C:46:C4:7A:8D:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/f57fe48d-a2d0-33a9-8e48-c2e92d3865ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.203.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:4e:54:0f:1f:65:c6:0d:8c:1c:2c:48:0b:e0:41:78:00:de:
75:fd:4f:75:a0:a6:f1:3e:3b:29:1c:33:de:af:9f:04:a5:3e:
f8:d7:92:86:07:a8:31:a4:b1:fb:75:a0:19:77:8c:46:32:2d:
50:5d:6d:55:04:6c:ed:2f:a2:df:d3:ca:ab:16:f0:5b:73:86:
a8:26:30:4b:86:21:b5:8f:3a:94:2e:d8:84:2c:e4:83:85:49:
39:49:7c:c9:38:3a:c8:39:f3:d7:be:ce:15:28:38:6b:b6:35:
61:31:ee:dc:6d:38:6b:22:48:b4:68:51:51:48:68:5d:e6:be:
8d:a2:a1:88:1a:b3:de:9c:b4:ac:83:0e:c6:46:57:b6:08:6b:
2b:4d:5b:22:f1:32:61:66:40:d0:1f:cf:f4:fd:a9:1c:ce:22:
24:9b:f1:a9:f9:17:3c:46:19:19:1a:48:86:01:38:50:75:6c:
b9:1e:5b:f6:9a:ea:bd:76:d0:67:1d:ca:55:d0:ea:68:df:5d:
7d:45:af:ce:8a:e7:98:6d:67:c8:1a:91:34:d2:c3:0a:00:30:
0a:fd:0a:da:37:55:24:f4:99:29:08:af:61:d1:9a:d2:74:50:
c6:33:39:87:43:de:46:10:a2:fd:b9:3b:04:fb:e6:8d:a5:f6:
6a:da:4b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:25:06 2025 by rpki-client