Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d293b2d-8ece-319b-aaf2-e38bb2d9712c.roa
File: 1d293b2d-8ece-319b-aaf2-e38bb2d9712c.roa (raw, json)
Hash identifier: 1Ln217XzaFHfxIDxFFX+ZurIWJzcbR950MaCt61cHCw=
Subject key identifier: EB:F6:F9:55:64:8D:98:17:8D:11:8A:E3:41:2A:CD:7D:E2:F4:1B:53
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F4E47923DEC9D0B8D04300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d293b2d-8ece-319b-aaf2-e38bb2d9712c.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 74.125.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f4:e4:79:23:de:c9:d0:b8:d0:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=a7361173-46df-4a18-b68b-21cc783b0e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e4:94:49:bf:fa:43:2e:61:76:26:9b:d1:9f:
0d:9c:2d:df:db:a8:84:50:4f:2f:35:86:8d:2b:25:
5d:d6:4c:b0:42:2d:af:ac:8e:0f:e4:29:83:78:a6:
8f:4a:34:0b:bc:05:8d:9a:2b:dd:21:4e:62:11:11:
c0:35:33:ab:d5:73:29:44:6d:59:8e:cc:44:1a:9b:
8e:87:35:ff:d8:58:e0:a9:87:95:26:b6:87:c7:e2:
32:6f:ae:c7:c7:d9:fd:34:5e:eb:ff:bb:77:bc:90:
7c:73:7e:c4:76:23:25:37:8d:57:42:08:14:84:3c:
05:5b:7c:8a:bb:87:fc:73:73:03:db:0c:64:6a:1a:
18:07:63:7d:d2:6d:60:ae:3b:84:8b:bf:b3:49:6a:
fe:51:44:bd:63:7e:3e:00:0a:5a:69:60:8d:2e:bf:
2c:ef:c8:b1:93:29:91:65:1c:bc:5b:5d:c4:5b:33:
dc:a4:04:46:a4:fd:58:f1:5e:24:0e:a1:1f:fe:1b:
ee:b6:3f:3d:f0:ad:5c:11:1f:72:ac:10:7a:1e:87:
63:f2:ea:9c:b7:9b:90:b3:fb:6b:41:11:39:74:a0:
5b:52:4b:37:55:0a:69:fc:3e:f3:73:a6:32:4e:24:
9a:63:48:10:fa:6e:91:58:14:70:93:da:75:9c:8a:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:F6:F9:55:64:8D:98:17:8D:11:8A:E3:41:2A:CD:7D:E2:F4:1B:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1d293b2d-8ece-319b-aaf2-e38bb2d9712c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
74.125.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:31:76:f1:c6:9f:ff:21:0c:9e:7d:71:fe:de:dd:a6:27:e6:
01:3b:a2:74:81:68:73:a6:53:02:a1:37:a1:ee:62:e2:4a:29:
f6:63:02:e1:a9:cd:98:90:89:df:ec:31:24:9f:04:81:11:60:
78:d5:4c:ba:8f:a2:5e:43:c8:8d:c3:6d:7b:c8:78:ec:ba:3f:
55:61:89:38:9c:52:d2:3b:e9:2a:a6:ed:a9:a2:f1:19:ae:d6:
46:52:8f:0f:41:fb:fd:84:75:65:71:e4:b1:da:db:22:d7:58:
37:53:f0:54:4d:de:2f:96:af:08:90:fd:f9:5a:58:05:31:2e:
55:7b:95:11:34:33:37:a4:f5:ec:f9:34:74:71:a6:11:59:bd:
01:45:9a:1e:f4:02:5c:11:20:7e:ad:ad:7e:05:3c:ce:19:41:
a0:45:e4:23:77:7f:1b:1a:4f:d5:76:48:3d:3e:6b:68:dc:2c:
94:0b:46:e7:d0:c9:cc:e4:01:ef:8b:1a:f1:2e:6e:f1:00:bb:
37:d8:19:37:11:41:39:f9:f2:76:f7:a7:96:14:98:b3:2b:df:
76:cb:e3:08:65:00:9d:dc:83:9a:da:9f:57:a9:eb:aa:7b:03:
48:fd:d8:32:91:6a:ec:08:4a:40:ef:94:68:89:26:3b:0b:34:
f7:d7:d0:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:42:08 2025 by rpki-client