Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa
File: 675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa (raw, json)
Hash identifier: m7OuxOLcGdQ3Jd4Ri5yZWZGqA1/yXYBj4Tb98ogKK1M=
Subject key identifier: 58:6B:3E:88:23:B3:25:51:A3:23:AE:39:32:4F:2F:4E:37:10:0C:01
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B33CD9E42A12736600480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 216.58.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:33:cd:9e:42:a1:27:36:60:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=94335acd-cbda-4f76-9c98-4d476c05c27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:76:8a:07:3a:1c:0b:44:94:88:4c:9a:b6:6c:
52:09:fc:b7:d7:f6:c4:a2:6c:f9:0b:00:64:5b:95:
91:ab:03:52:de:0e:de:1d:4f:ba:32:a6:a4:f0:13:
f7:e1:35:34:a9:af:5a:32:fb:5b:b8:1c:85:cf:df:
26:5b:86:22:93:fc:1f:22:e3:76:fa:0b:47:39:cf:
54:0d:3b:d0:2b:19:b5:33:d7:cc:5c:0a:be:e2:2b:
cc:f4:fe:5a:3d:58:d3:89:75:38:0d:95:3e:40:e9:
6e:fa:6a:62:31:ec:81:26:68:c7:df:6c:0f:0a:13:
88:5c:7a:0e:39:4e:76:85:f0:aa:66:fa:aa:36:6e:
5e:c1:d3:b4:79:d8:2d:2a:a9:7a:8a:bd:cf:e5:54:
96:f0:42:f9:c1:9e:8d:64:4e:f8:a8:2f:80:40:7c:
72:a9:c8:a8:12:22:c5:2a:7d:7c:2e:59:ed:83:8e:
1f:c4:35:76:43:0f:e5:a5:c8:ff:89:4e:2d:d2:2f:
f7:07:14:0f:b6:af:66:19:80:e7:f4:f6:d4:56:fe:
97:ae:fd:73:ae:19:c0:7f:5c:d9:36:d0:9d:fb:cd:
e3:36:f3:21:35:73:4a:f2:51:0e:86:e7:70:7e:b3:
c0:9e:a4:45:0b:7d:ab:0b:3b:d2:04:a4:8f:10:32:
8b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:3E:88:23:B3:25:51:A3:23:AE:39:32:4F:2F:4E:37:10:0C:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/675e72b5-cb9f-3cc6-8c63-46ee14999ed2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:4d:58:3c:59:db:59:31:7a:bf:00:85:fe:7d:ca:e1:da:1f:
24:35:09:4d:46:0c:45:de:9b:48:a9:0d:59:bf:4b:57:f4:c7:
79:0e:cd:20:46:b7:79:8f:c4:02:a5:24:a6:09:58:1b:3c:ab:
18:ab:f6:a5:1f:5a:63:b5:ad:79:a5:12:35:17:f8:90:9c:44:
c8:d0:e8:7b:51:7e:62:6e:d6:af:03:5c:e0:ca:fc:f5:14:8e:
8a:1f:40:7a:e0:70:77:45:a3:bb:b5:85:27:0f:fc:60:a2:05:
8c:8d:95:5a:97:90:a1:fd:3f:43:88:31:6b:6b:ab:b0:9b:4b:
19:75:06:00:bd:ee:41:a0:77:c7:02:41:50:cd:37:c9:05:ea:
02:4c:ad:e0:4f:be:3f:44:a7:bb:63:26:59:fc:8d:7d:ab:89:
30:3e:b8:dc:4f:a4:ac:54:36:e5:72:fe:07:38:d4:8d:ab:50:
0a:ae:d3:aa:3c:65:99:26:5e:be:fe:c4:44:1b:e8:21:cc:28:
9f:bb:33:59:6d:c6:2b:c2:12:d6:f5:67:9e:3f:83:78:78:47:
e8:80:38:99:be:8e:6c:65:53:25:37:04:9c:b8:6b:7e:1b:4c:
d8:bf:d7:ea:29:85:f0:f5:6a:5e:9a:3d:59:06:69:b5:05:f3:
c1:6d:32:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:22:58 2025 by rpki-client