Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa
File: 0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa (raw, json)
Hash identifier: PO2KKQP9OZaF+thY9GI6q348qudJoGjGfNf9z3JRFWs=
Subject key identifier: B9:7C:9D:F5:7A:D2:5C:8E:FD:4A:74:B0:8E:D2:26:73:3C:E0:00:A1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B5FBF481FB1F25FB96700
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 396982
IP address blocks: 172.253.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:5f:bf:48:1f:b1:f2:5f:b9:67:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=b7162df4-0364-48a6-86b2-408fbced50be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b1:e1:97:f6:83:87:5a:d9:c4:2d:d8:65:42:
26:5a:8b:eb:38:e6:4d:93:91:b8:62:ff:80:d6:85:
8e:e5:84:79:6e:46:5e:2d:75:c7:4f:f9:0b:ad:9d:
5d:c4:e2:4f:fc:6f:53:80:fc:91:25:0c:99:69:23:
fb:b4:9d:15:02:5e:a1:e5:e2:d2:a2:0a:16:f2:7e:
ed:4b:d8:c9:93:95:0e:d2:93:28:aa:c7:32:3d:9c:
ba:bd:21:31:ac:bc:26:4d:4f:ba:00:66:33:76:24:
63:1e:36:c3:14:49:bd:9a:1b:d0:7a:2c:de:1e:38:
6b:31:a4:cd:49:2b:cd:5f:f1:a2:dc:0d:49:c8:21:
8e:04:5a:cb:7f:c9:d2:94:2b:62:86:a5:28:78:6d:
74:d1:7e:81:24:65:53:5d:87:50:7b:c6:92:c5:92:
8d:35:28:3a:4d:c8:0e:9b:39:1a:02:2e:31:64:f3:
1d:60:2d:eb:5d:ba:6d:98:5e:64:79:21:9b:4d:29:
39:55:ed:d0:b8:04:90:5c:5a:63:4c:f7:d9:1d:0e:
39:f7:f6:04:c9:9d:ba:44:e4:b8:4e:e6:dd:68:53:
40:b1:7c:39:8c:4c:d9:e2:14:f9:10:f3:7b:52:64:
2b:36:cb:2c:66:f6:77:83:15:d1:44:f0:b8:1e:69:
d8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7C:9D:F5:7A:D2:5C:8E:FD:4A:74:B0:8E:D2:26:73:3C:E0:00:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0d9d3c14-3736-33a4-8def-6c4eb2e01326.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.253.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:fe:02:74:63:a5:30:41:82:e5:0d:92:3b:a2:0f:db:36:74:
f6:08:f7:4d:b9:e0:03:53:05:21:c5:45:45:2e:13:f4:4f:12:
58:a0:71:e1:fb:c4:1c:70:67:01:d4:17:c2:24:b2:0e:e2:8f:
a6:b1:89:d7:ff:1a:99:ae:f8:7e:c5:71:3b:42:cb:7d:bc:73:
64:48:64:94:65:2f:4f:85:ff:b2:fd:1d:cc:d5:00:76:57:3d:
76:9f:7a:74:89:6d:c2:90:9e:3d:0d:00:ef:27:3f:58:5a:dd:
19:8b:43:8a:0d:3e:d6:e9:23:6b:0a:02:77:f6:1e:0d:06:dc:
68:d1:0f:59:62:08:0d:fb:aa:28:9d:16:f3:f2:1d:b4:6c:fc:
66:bb:d2:47:e6:23:e0:e7:a8:27:8f:d0:6c:eb:71:3a:42:53:
73:d1:ab:ed:17:00:9c:fa:a9:84:36:76:f7:35:b1:99:12:50:
b9:e2:ef:ae:ca:0f:a1:6e:b9:38:b7:a7:ef:a4:76:d2:e8:9f:
1c:d0:b3:74:b3:f6:45:c0:3b:6c:ee:0c:9c:2e:6d:77:e4:8c:
01:e1:eb:1b:28:d5:3c:c4:ca:73:99:10:e5:a3:ec:f0:5c:4d:
63:52:63:29:a0:e8:aa:c5:90:16:32:91:38:01:2e:8f:d0:66:
95:6b:c8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:16 2025 by rpki-client