Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa
File: 63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa (raw, json)
Hash identifier: 4ziSDUoaG7FAvRIIT/hXvBUr9O+pY+UhMJBc82Nrb7Q=
Subject key identifier: 39:A4:59:03:AF:BC:26:6C:42:28:73:02:6A:E0:D6:E5:B5:0D:B9:C1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B359464ABF6106C727B40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 172.217.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:35:94:64:ab:f6:10:6c:72:7b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d98286a4-e403-4266-b378-0e4007ee35d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:63:82:68:e1:5d:30:09:ea:2b:53:e3:24:
7a:d1:89:5e:05:7c:e8:3a:69:67:68:07:e3:fc:85:
ae:56:05:7d:c2:8d:3d:ff:81:ac:7d:23:20:c9:6e:
35:7c:dd:7b:f6:32:32:d2:6e:f3:01:e1:4d:3e:d0:
ef:ad:ea:b7:31:09:b9:d5:f1:ef:6c:89:e6:92:ed:
3f:6f:ef:82:2f:f1:ed:ac:7f:92:5c:24:09:62:77:
e0:4e:3e:3d:c0:f8:4a:cf:85:d4:e4:07:16:c7:89:
72:66:5c:1b:fd:80:9e:6f:7d:83:94:61:57:f8:10:
48:b1:98:a8:c5:fa:90:1b:d9:32:5c:f6:f4:fe:41:
be:fa:5b:a2:6c:54:f2:4f:ad:6c:b1:60:c1:c4:5a:
b7:20:67:2c:63:34:57:71:76:a0:63:ab:a9:f9:44:
66:6c:79:e0:a7:bf:f5:a2:d2:7f:78:7c:29:ee:16:
5d:7d:84:da:66:c7:2b:3c:fb:e2:70:59:c1:74:73:
d6:c1:b5:57:1e:4b:b8:05:10:d6:a4:8a:e4:46:dc:
ca:fc:ce:1c:16:12:5c:85:dd:5e:11:af:b9:f7:68:
2f:28:c1:59:67:71:3b:d3:cf:9d:3b:98:0f:dc:ad:
fa:43:d7:eb:c5:95:26:08:24:14:1c:e3:e5:3e:77:
7b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A4:59:03:AF:BC:26:6C:42:28:73:02:6A:E0:D6:E5:B5:0D:B9:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/63e5c5c9-93fe-3765-9acd-8fe0b767b5dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.16.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:42:54:3c:57:8d:19:c1:74:c8:75:f8:f1:f6:81:e9:41:f6:
17:7b:3b:b1:3e:b9:78:7a:f4:fd:70:4b:b1:78:23:20:91:4e:
d9:d5:c7:f6:4a:ec:af:b2:dd:71:34:b8:cd:a1:d2:eb:10:58:
c3:5b:8c:e1:78:1f:ef:ba:c8:22:97:c8:d0:4a:95:29:83:e0:
ea:ad:c7:00:67:f1:74:d6:ee:a1:78:5b:be:a9:5f:4b:5f:73:
05:55:9d:13:b5:07:3d:7b:2b:e5:a9:85:c4:93:e1:3c:53:96:
08:36:d9:bc:4f:6b:72:73:0f:fa:70:4e:8c:6e:47:5a:90:07:
4f:8d:b6:e4:b2:d8:65:59:1e:05:66:fd:bf:21:ca:27:bc:ee:
9d:f9:3d:e3:e6:fa:0a:bf:9b:51:57:ba:19:01:1d:8e:f2:38:
5b:b5:4e:87:00:48:35:99:08:2e:c5:fc:d2:62:2a:50:74:bb:
87:03:01:7c:60:32:f5:b8:c0:07:40:b8:72:c8:00:bf:ae:b5:
fe:b9:83:c3:f1:6b:f0:a6:85:b7:9e:2c:32:20:87:17:ed:c0:
21:93:d4:2c:21:d3:59:0a:93:43:55:8a:8b:7e:df:a6:25:54:
50:9e:f5:79:6f:96:c4:0a:c4:2a:b7:f4:99:c2:14:69:53:fb:
88:2e:9b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:19:58 2025 by rpki-client