Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa
File: d81db5f9-daca-3854-894b-06f15dcabb67.roa (raw, json)
Hash identifier: SURxli4OW6DnQTcoV3QHVokafeVA7Ft/M/vkb1XnnLU=
Subject key identifier: 9E:8E:51:26:70:3E:2C:5C:7E:6B:1B:A8:20:7F:AD:BF:3C:8A:13:F1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584814FE3A3945B6E5DEDE784500
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa
Signing time: Tue 03 Dec 2024 08:35:17 +0000
ROA not before: Tue 03 Dec 2024 08:35:17 +0000
ROA not after: Mon 03 Mar 2025 08:35:17 +0000
asID: 15169
IP address blocks: 172.217.69.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:14:fe:3a:39:45:b6:e5:de:de:78:45:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 3 08:35:17 2024 GMT
Not After : Mar 3 08:35:17 2025 GMT
Subject: CN=4be694d1-7522-42cd-a15b-e6d96cf53828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:89:ee:c6:96:d2:a4:c3:4f:d9:d5:a4:7b:da:
18:86:b8:ab:4c:59:e3:e3:20:14:9f:b9:45:07:40:
d4:00:c5:c6:ff:0e:0a:81:1f:67:ec:99:dc:24:3f:
c3:86:fb:3a:e0:8c:e7:46:c6:47:1f:df:ad:dd:43:
95:1d:45:fd:3e:81:3e:10:b9:77:8b:16:d4:e2:55:
7b:3a:6e:ca:e2:83:94:07:b3:2a:f3:dd:0c:76:70:
2f:fe:d6:d0:7c:88:03:a0:f5:bd:93:b6:40:f0:a2:
46:ae:bf:09:a2:4a:5a:a9:31:9d:7a:47:6b:04:6d:
f2:ce:a9:22:c5:52:90:4a:ed:ce:fa:d1:c1:25:99:
25:f1:3a:e2:b3:45:2b:7d:c0:13:c0:88:23:c5:cf:
70:f6:f3:42:49:b1:9b:68:47:3a:06:47:25:55:be:
d0:91:03:49:a8:f6:c9:2a:e5:62:05:88:d9:da:85:
d0:a8:a8:f1:a5:28:d9:1f:9e:11:3c:7a:c2:e7:59:
4f:8f:ba:1c:b2:0f:83:ad:6f:bf:5e:5b:1a:37:47:
0a:df:62:98:14:c4:f2:fe:74:7f:3a:bf:78:1e:bc:
19:ee:45:e0:3d:08:5b:e9:aa:8c:52:56:31:fa:83:
8f:6d:34:62:e0:48:2a:eb:7b:24:c6:fc:3c:17:ab:
12:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8E:51:26:70:3E:2C:5C:7E:6B:1B:A8:20:7F:AD:BF:3C:8A:13:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d81db5f9-daca-3854-894b-06f15dcabb67.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
172.217.69.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:53:ee:51:32:8b:72:e0:74:cc:8c:51:52:1a:3a:6d:05:17:
15:01:c9:b4:4d:bf:5b:a9:67:e9:f5:b4:8f:80:77:5e:d7:a0:
79:73:66:16:e0:80:ee:61:98:77:ce:98:f3:38:e7:88:6a:5e:
5a:fd:af:c6:27:fb:1b:e8:62:d3:7b:9f:06:3b:0d:90:14:c9:
f9:7d:1f:d3:02:76:4a:36:2c:97:e7:7e:ec:8a:1f:be:74:e7:
35:a0:49:e4:17:6d:11:10:6d:3b:36:5d:72:b8:57:90:70:d8:
56:84:7d:a2:d8:ea:cf:af:25:51:fd:03:41:6a:76:bc:42:12:
67:fb:9c:0e:55:2a:b7:eb:11:31:a6:e8:0f:b2:d5:88:64:be:
82:c6:10:59:ab:49:f7:bf:4a:f5:d4:b8:d7:6d:29:bd:b9:72:
5d:d9:28:6c:15:d0:9c:65:d1:24:45:9d:46:08:fb:ce:02:91:
cb:33:43:21:df:8d:c8:88:14:e3:e7:31:0a:a9:7c:85:8c:9b:
5e:be:3d:ce:94:f4:6d:36:c3:ff:77:c9:36:7f:98:56:63:06:
65:1d:57:7d:9a:10:45:c7:00:dc:60:59:1a:f2:1b:9e:6f:54:
53:2c:0a:22:be:8f:6a:69:91:1f:ca:08:f8:e9:6d:d1:23:d7:
e1:5d:02:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgU/jo5Rbbl3t54RQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTIwMzA4MzUxN1oXDTI1MDMwMzA4MzUxN1owLzEtMCsGA1UEAxMk
NGJlNjk0ZDEtNzUyMi00MmNkLWExNWItZTZkOTZjZjUzODI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApInuxpbSpMNP2dWke9oYhrirTFnj4yAUn7lF
B0DUAMXG/w4KgR9n7JncJD/Dhvs64IznRsZHH9+t3UOVHUX9PoE+ELl3ixbU4lV7
Om7K4oOUB7Mq890MdnAv/tbQfIgDoPW9k7ZA8KJGrr8JokpaqTGdekdrBG3yzqki
xVKQSu3O+tHBJZkl8Tris0UrfcATwIgjxc9w9vNCSbGbaEc6BkclVb7QkQNJqPbJ
KuViBYjZ2oXQqKjxpSjZH54RPHrC51lPj7ocsg+DrW+/XlsaN0cK32KYFMTy/nR/
Or94HrwZ7kXgPQhb6aqMUlYx+oOPbTRi4Egq63skxvw8F6sS9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6OUSZwPixcfmsbqCB/rb88ihPxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDgxZGI1ZjktZGFjYS0z
ODU0LTg5NGItMDZmMTVkY2FiYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArNlFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBT7lEyi3LgdMyMUVIaOm0FFxUBybRNv1upZ+n1tI+Ad17XoHlzZhbg
gO5hmHfOmPM454hqXlr9r8Yn+xvoYtN7nwY7DZAUyfl9H9MCdko2LJfnfuyKH750
5zWgSeQXbREQbTs2XXK4V5Bw2FaEfaLY6s+vJVH9A0FqdrxCEmf7nA5VKrfrETGm
6A+y1YhkvoLGEFmrSfe/SvXUuNdtKb25cl3ZKGwV0Jxl0SRFnUYI+84CkcszQyHf
jciIFOPnMQqpfIWMm16+Pc6U9G02w/93yTZ/mFZjBmUdV32aEEXHANxgWRryG55v
VFMsCiK+j2ppkR/KCPjpbdEj1+FdAt8=
-----END CERTIFICATE-----
Generated at Fri May 9 20:36:18 2025 by rpki-client