Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a06ff5d3-9121-3f8b-a303-f578bbe54dd0.roa
File: a06ff5d3-9121-3f8b-a303-f578bbe54dd0.roa (raw, json)
Hash identifier: C8fNJYPHXmxQ028wI75aFdH2JR5XD5xG1GiK1Xp+D+g=
Subject key identifier: EF:97:00:71:F9:18:43:56:80:4E:BD:4C:B7:77:DC:8D:C2:BE:8E:41
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B5FCCD05F770E102A9F00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a06ff5d3-9121-3f8b-a303-f578bbe54dd0.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 173.194.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:5f:cc:d0:5f:77:0e:10:2a:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=8f892cec-fdbf-45f0-a2bb-b019d1651807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4f:ed:52:db:32:b4:10:fe:3f:00:0b:c2:d6:
57:ce:bb:7b:05:83:7f:ff:d2:ab:71:b2:26:1e:95:
e3:32:b9:bf:b0:49:49:c0:f1:a3:a6:95:f3:5e:a7:
01:60:99:4d:5a:a1:e0:5d:77:f0:ca:14:07:ff:8c:
0a:b0:8a:63:70:24:c2:01:fb:bb:90:0d:44:b2:c7:
df:2d:a9:63:86:63:e3:61:6a:37:0d:f9:11:7a:33:
1c:da:77:37:f1:e5:88:37:de:61:f6:a9:0b:f6:d2:
cd:02:38:a7:68:45:43:61:45:58:9b:55:ec:52:ee:
65:81:55:12:1d:e8:1b:e5:f5:ef:e5:9f:0b:df:7e:
a9:24:b1:3f:c4:c8:26:27:11:f0:48:47:65:f1:18:
f7:47:ca:3c:69:54:6e:ee:e2:ee:2e:99:01:ed:fb:
9c:1e:bf:d1:3e:8e:bf:29:c5:51:ad:aa:c3:4f:77:
56:51:19:45:d1:3f:ba:6a:af:e1:78:36:e1:b7:b0:
a3:87:39:cd:22:64:04:be:22:5f:98:a2:0b:c5:01:
c3:3a:5f:6c:37:4d:5b:05:36:b0:2f:07:2d:aa:68:
bc:e8:31:42:99:01:04:f2:e1:0d:e7:43:d2:c2:64:
3e:7e:5a:56:57:f8:9e:23:b7:5f:c6:fd:13:58:d8:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:00:71:F9:18:43:56:80:4E:BD:4C:B7:77:DC:8D:C2:BE:8E:41
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a06ff5d3-9121-3f8b-a303-f578bbe54dd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
173.194.195.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:fa:5a:b5:49:94:99:57:27:16:65:2c:01:b3:06:7b:de:09:
02:17:43:f2:4d:71:8e:50:94:a0:3e:f6:18:f2:b3:3b:d4:88:
ec:2d:c1:53:1e:6d:9a:06:92:70:35:17:e8:88:ad:b6:41:a9:
be:b4:ac:19:96:c8:ce:df:de:a8:c5:fa:e2:8f:ca:f0:c4:82:
1e:15:7a:0f:14:08:08:e1:74:00:16:cf:77:eb:ec:fe:e8:f6:
ba:0c:6d:b3:96:38:e4:22:11:2a:c6:83:3b:76:28:d2:3d:1d:
93:e5:b0:63:9f:d1:23:30:c8:fe:1f:18:08:8c:7d:73:cb:94:
ea:33:db:7d:86:7a:72:00:2e:35:66:d7:4c:ab:f3:3f:a5:af:
99:32:5c:f5:a7:cb:f3:c5:48:f9:57:74:0e:ec:33:f0:a3:37:
e9:9a:6d:81:48:28:46:14:6a:60:b5:6a:93:38:7e:f7:50:15:
0b:8d:e1:c7:26:41:d9:39:3c:e7:76:d2:6f:a2:cd:f0:0a:75:
05:ce:35:96:59:65:a3:ca:33:6c:30:94:3d:e2:14:a5:16:f2:
3d:13:a3:4f:4f:71:16:df:a8:d0:6b:a3:b5:f3:d6:20:7d:98:
b8:6e:1a:8f:86:e3:9d:0f:6c:f2:59:2b:e6:f2:a0:62:0d:fd:
12:e2:43:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:19:13 2025 by rpki-client