Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa
File: 3be7d533-8374-34e8-8ae6-527bb38f1d34.roa (raw, json)
Hash identifier: 50Zn6wkisYYVq/1Hf7hJGRQ3onmRGFPRmZ/XeQmfOXk=
Subject key identifier: F8:FB:14:90:61:CC:EE:F5:87:F7:61:C3:71:C5:9D:22:79:70:FB:8F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A5DF113AA15CFD82518C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 172.217.206.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:5d:f1:13:aa:15:cf:d8:25:18:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=f24860a4-ee67-4d5d-bd3f-a260f53e37cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:24:73:55:c1:5f:a3:ce:38:fc:35:3e:ab:d4:
95:6d:6d:a7:93:1d:08:92:39:d0:3d:c3:50:65:dd:
46:9c:fb:ec:61:72:49:48:93:05:22:4a:90:96:37:
23:51:44:21:c4:23:4f:b4:44:f3:1d:19:33:38:ca:
89:6c:78:b9:78:5a:00:ca:59:24:56:a3:03:b5:c1:
ce:ac:b1:b4:58:94:54:48:ac:89:94:2b:74:d0:be:
f9:a7:a9:9a:67:e1:1d:a4:c7:0b:1a:4e:aa:2e:19:
36:01:e9:49:59:5e:83:09:06:d3:f5:a4:4b:23:92:
3e:9a:4e:e9:6c:bd:60:e9:4c:3f:25:26:a3:5f:3c:
bd:d0:ea:52:8e:7a:0d:ef:d6:ce:14:b1:fe:15:78:
0f:72:aa:25:39:ce:ac:19:b4:1e:96:e9:89:61:8b:
91:ba:da:52:d8:6f:80:63:8f:30:67:bd:31:8a:29:
f0:57:e0:cc:23:a3:3f:42:18:02:2e:2c:2f:99:bd:
2c:94:b4:00:c7:0d:1f:11:f7:ad:4f:d0:b9:29:b5:
5a:fd:08:1f:93:be:ba:0b:44:b2:cf:a4:0e:02:fb:
76:ab:0c:a2:56:fa:d8:e0:20:74:19:63:cc:39:4a:
3e:bf:8b:0e:a4:ec:11:98:22:bf:d5:16:39:b1:e3:
3a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:14:90:61:CC:EE:F5:87:F7:61:C3:71:C5:9D:22:79:70:FB:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3be7d533-8374-34e8-8ae6-527bb38f1d34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.206.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:62:49:f5:e9:2a:5c:9b:7f:02:9b:bb:ab:07:a4:b4:0d:96:
d1:34:bb:4c:16:3b:3c:4b:fe:a8:5e:a2:ab:d8:9d:74:cf:ba:
f9:46:80:93:d9:23:ec:93:d5:8d:77:90:66:76:e8:ef:ac:e3:
8f:86:5f:41:bd:ae:71:d5:c0:e9:3d:14:b4:3a:90:b8:01:11:
c4:3a:4c:18:e7:4d:33:2d:a2:ae:2c:f2:7b:b8:24:63:1f:5b:
19:a0:9e:34:70:e7:96:f3:fd:2a:c1:59:80:b9:ab:69:bc:c0:
f8:a0:78:43:10:7c:f3:b2:a3:00:ff:7c:5d:73:ef:92:25:7f:
71:97:c7:fd:a3:18:c5:8a:12:84:51:08:33:e8:b8:bd:5a:1c:
66:37:8e:f3:67:1e:d6:b6:ca:7c:84:ba:40:e3:1e:d4:ab:27:
bb:8f:17:75:a6:ee:72:6e:28:77:be:7e:21:e0:d8:fd:cf:2f:
ca:09:1b:bf:fb:64:3e:23:20:53:df:bc:4d:9a:89:42:76:dc:
97:7b:38:91:ef:76:9f:fe:2e:eb:b4:c7:70:7b:95:04:4d:5b:
6f:82:a3:92:fe:e5:cd:85:15:08:73:c4:41:58:e5:c2:a2:f0:
22:68:74:cb:cd:17:36:82:81:29:dc:aa:44:2a:ad:d7:a6:46:
c8:4b:3b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:19:13 2025 by rpki-client