Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa
File: a430c233-1598-3766-bd27-1c26e3178a02.roa (raw, json)
Hash identifier: f4Pj5YCtzjPC4pDmk2rVY7t4zlYUQD625Y3APJMTLUY=
Subject key identifier: 2A:2A:56:83:45:B0:DB:65:5F:17:64:E8:39:7B:92:4D:BC:0C:20:35
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C581899F4E8BECABF4727200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 173.194.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:89:9f:4e:8b:ec:ab:f4:72:72:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=caf8cdfb-02eb-4425-b2df-054f25f2fbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:21:af:3c:6f:33:06:2d:38:89:30:fa:10:f3:
5a:53:d9:23:41:99:33:1e:d4:f0:d4:05:9c:d6:8f:
e7:64:3d:65:82:d7:08:b3:fa:85:61:65:8e:5d:fe:
85:ed:c1:b1:bf:e9:4e:e7:23:1c:88:94:d2:9f:42:
0d:c0:5c:82:a2:09:0f:44:27:ed:a1:50:b8:75:1f:
9c:de:29:73:8a:1a:ed:f9:92:f0:c5:07:b2:1a:54:
1a:08:f4:a4:66:18:45:2c:70:ea:fc:84:e7:4e:04:
82:cb:18:ae:f8:d4:77:b4:6a:cf:45:38:20:d8:c2:
3e:a4:92:a8:d4:86:0c:66:11:2d:ef:15:45:68:18:
80:6e:ff:0a:79:50:5a:8b:3d:8f:55:39:7a:ad:6a:
83:47:52:7d:4c:31:cd:83:c9:20:0c:34:f8:50:a9:
cd:08:ad:9b:2d:ea:03:7d:c5:b3:92:81:a4:35:d5:
f3:81:bb:14:bc:62:41:f5:63:2f:83:1e:d5:00:79:
4c:40:2c:41:9c:bc:11:81:e3:fc:0a:22:bb:8b:9e:
74:e1:ab:6a:f9:1b:09:fd:e8:ca:02:7a:5b:34:88:
6a:e3:74:95:a5:df:49:65:dd:c6:7e:4e:24:72:79:
60:5a:ce:6c:48:0a:39:db:48:5a:70:77:bc:9a:8c:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:2A:56:83:45:B0:DB:65:5F:17:64:E8:39:7B:92:4D:BC:0C:20:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a430c233-1598-3766-bd27-1c26e3178a02.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:36:a8:c3:39:64:ad:dc:9b:c6:12:05:fa:34:db:8e:90:15:
c3:71:b4:c1:f5:82:a5:3b:cb:7c:63:db:16:64:06:5b:1f:a5:
71:27:d1:1a:99:3d:bb:0c:9e:d2:f3:c6:52:eb:04:11:40:75:
01:91:c4:4c:d4:11:20:f5:c4:32:42:b2:db:2b:a0:02:4d:57:
6b:d8:a3:74:b9:74:b8:fa:60:21:19:d1:1c:09:85:52:bd:02:
52:fd:93:10:9b:dd:38:5b:59:21:8a:9f:0b:71:2e:9a:12:ff:
57:bc:10:fa:83:20:61:bd:af:1a:b4:65:30:e5:8b:12:cf:eb:
a9:59:87:07:fb:6d:82:c3:7d:b8:07:35:7f:65:55:db:81:f3:
99:1e:f1:bd:c8:ad:f8:d2:44:6a:fd:f1:b4:f8:c7:9e:37:09:
70:1e:70:e0:38:55:16:9e:96:5b:4f:a7:6b:ad:06:72:07:23:
cd:ad:d6:dd:ff:5d:54:a4:ab:9c:5f:fc:2b:12:01:d1:9d:76:
99:a6:d6:c7:3b:96:30:2c:87:74:46:32:d8:76:4a:7d:1e:9a:
93:78:4d:f0:1f:12:bb:7f:e8:2c:c2:a9:8e:df:2b:8b:0c:eb:
62:ca:70:7b:a9:bf:7d:c8:9b:c1:b9:b3:3c:40:c9:18:ff:b7:
66:cb:7d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:30:07 2025 by rpki-client on console.sobornost.net