Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa
File: 9242d4d2-ae71-3199-b005-7f03715ae415.roa (raw, json)
Hash identifier: XfPeLmgJOjTF5lJEb4ppI2YvIj1ElqRKjsx27HQHp9o=
Subject key identifier: B3:40:33:EA:8F:0E:89:E3:91:F4:27:FB:C7:DA:A4:81:1C:46:92:4F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E8F51E10177AA5F2C9681C80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa
Signing time: Sun 17 Nov 2024 14:00:38 +0000
ROA not before: Sun 17 Nov 2024 14:00:38 +0000
ROA not after: Sat 15 Feb 2025 14:00:38 +0000
asID: 15169
IP address blocks: 64.233.172.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e8:f5:1e:10:17:7a:a5:f2:c9:68:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 17 14:00:38 2024 GMT
Not After : Feb 15 14:00:38 2025 GMT
Subject: CN=248c4b3f-7933-42a0-a442-ebc877a0a4da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:1f:b3:4b:cc:e0:54:11:a0:ae:44:29:99:
49:13:dc:7e:c2:9e:9f:d1:b2:d6:4b:f1:ac:f9:f5:
8c:60:f1:ae:9c:df:21:b7:38:9b:bd:a9:6f:ff:f5:
95:2e:78:ee:60:a5:d0:44:1f:ec:3d:27:0b:d0:9e:
d5:45:c1:0d:9f:53:6d:83:67:83:c0:1d:6c:6b:46:
d7:73:40:52:71:ac:10:71:02:b3:3b:83:de:e1:fa:
cc:fe:39:28:cf:13:1e:34:a0:6d:ba:a1:99:73:50:
7b:8b:82:bb:9c:af:60:87:19:32:0b:8a:8d:76:04:
4e:ad:cc:e4:c7:14:97:d3:bd:41:56:ad:49:2e:0d:
75:fa:28:4b:c2:04:2e:61:03:a9:92:1e:ec:ef:e0:
ec:cd:dc:90:86:b2:48:0c:aa:da:52:25:16:9d:c8:
00:4e:10:09:cf:28:64:cd:c4:05:ae:e8:c4:eb:e4:
f3:21:0c:0d:60:da:78:b8:00:06:04:86:7f:5f:bf:
c7:4c:ba:eb:04:33:eb:5a:79:00:e0:df:27:19:e7:
ce:86:0a:8c:66:0a:21:7c:6c:5c:60:bd:a5:00:9a:
27:55:7b:12:54:03:80:39:5f:05:7a:e6:6f:5c:4c:
94:b1:90:de:91:c9:10:35:60:2d:d7:4c:0f:ea:d9:
61:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:40:33:EA:8F:0E:89:E3:91:F4:27:FB:C7:DA:A4:81:1C:46:92:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9242d4d2-ae71-3199-b005-7f03715ae415.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
64.233.172.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:ef:fa:8a:60:aa:14:f5:e5:10:81:46:9a:4a:e6:f9:d4:a2:
18:44:56:c6:b7:03:9e:b3:a2:74:2e:a1:82:90:f5:26:05:5a:
ec:ef:b9:56:89:0d:40:95:d7:24:f4:74:04:c4:6a:fe:ef:f8:
9e:f6:95:e5:0d:51:f4:43:b4:8a:ab:75:aa:65:78:3f:ce:80:
90:4f:27:c2:75:24:e4:61:d2:2e:8c:54:2f:77:04:0f:2f:17:
8a:a7:cb:b1:b4:57:ab:ff:ad:f2:b1:cd:e8:93:aa:0d:a5:81:
d5:38:aa:dc:89:a4:b8:4d:17:4f:ac:7f:6a:67:1f:ff:85:a8:
10:c4:fc:68:e5:37:ed:bb:85:76:57:e1:8e:34:b9:65:f2:73:
e4:ff:c6:4b:22:db:c5:dc:f8:8a:83:db:2e:da:f7:67:b2:4c:
60:54:ee:dd:33:0f:8e:02:63:1d:cb:c0:6c:90:fa:14:50:3a:
7f:52:15:68:8b:5f:f4:9a:0b:36:b9:05:39:dc:27:c4:df:85:
38:19:23:20:e9:f9:38:00:c4:e9:bd:24:d0:bd:f0:bc:32:69:
e1:f3:94:2c:65:cb:5e:37:68:d2:c6:22:01:58:ee:90:cf:78:
89:7d:b1:d2:0a:ff:1f:b6:05:92:d4:4b:6a:b6:38:60:7c:d3:
8a:3f:f8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:33:10 2025 by rpki-client