Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa
File: d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa (raw, json)
Hash identifier: Ryc2/v4fy3wE0Y+3It/DdODgyljW+iu1BaK7hxVRA0s=
Subject key identifier: 16:37:82:F0:88:2D:1D:B5:32:A8:77:74:A6:5A:9F:61:CA:7B:C5:17
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B38C3C1F1390CD9967480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 216.58.204.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:38:c3:c1:f1:39:0c:d9:96:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=627bf5fb-f208-445e-973e-800d389e9a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:e0:bb:49:be:10:49:37:34:bf:b7:b3:4f:
27:ac:7c:f7:4b:05:93:fb:76:d7:34:d4:94:ef:9c:
84:ff:6c:63:bf:a8:f2:63:ad:21:4d:f8:a4:fc:20:
e3:35:c7:1b:52:b0:e4:00:90:5c:0c:04:b8:04:c2:
df:80:10:17:22:d7:c9:14:fd:9d:f4:3a:7f:7b:6c:
39:c5:55:28:4e:69:d6:92:bd:c6:93:5d:2f:36:8c:
32:92:b6:76:47:d9:6d:9f:f6:9b:62:7e:5e:7f:0a:
d7:8e:75:80:ea:2e:91:6a:0f:6a:6d:f0:1d:9a:a1:
9a:9d:6a:9a:f8:a1:3e:98:24:7a:77:0d:b6:e6:1d:
06:84:b0:c2:8e:ae:f6:04:78:a1:13:59:c3:35:0f:
82:ed:fe:27:b5:04:83:0e:a1:6a:e0:54:96:dc:28:
6f:80:03:cb:5e:37:1f:a3:28:78:f3:46:9c:4c:4b:
d6:78:6a:96:3d:a6:f3:c3:98:15:70:b1:12:8d:4a:
09:18:4e:c7:e9:7a:ed:d7:2b:24:f9:be:96:f7:01:
fb:2b:22:8b:0b:fa:ec:98:2c:61:25:42:50:4c:19:
3b:92:37:1e:98:5c:b4:46:84:a3:92:18:0b:54:a4:
07:4d:1f:31:c2:be:3a:01:2f:27:5f:b8:1f:68:8d:
44:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:82:F0:88:2D:1D:B5:32:A8:77:74:A6:5A:9F:61:CA:7B:C5:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d8fec74f-a0be-3c2e-b675-d05ed7e6434a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
216.58.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:94:76:e3:a3:b1:29:65:23:8a:e8:59:49:98:9a:66:88:83:
65:cc:18:62:35:26:ba:a0:1d:0d:4a:1e:97:7e:78:24:13:e9:
70:88:93:98:e0:8c:12:c8:75:60:ca:17:84:01:c6:0d:c9:a3:
d8:7c:b6:98:25:f5:97:09:9b:53:5b:f7:23:8e:96:40:cb:c4:
73:eb:b0:75:19:3f:a0:4c:56:d0:ea:03:39:df:ca:de:15:7b:
14:00:1b:13:f6:20:bd:80:c6:15:6b:41:80:6a:5b:93:45:85:
23:85:82:d1:20:06:18:ce:cb:07:36:a5:39:f2:db:78:64:1c:
bb:c2:47:01:11:66:4c:d6:cb:51:9d:70:ba:b5:78:ab:86:68:
fa:20:3b:f6:a6:0e:95:f7:e1:96:f0:ed:73:87:c5:fa:89:d8:
65:16:37:42:1d:85:5a:e3:da:86:8d:06:23:3b:ef:0b:6c:79:
ae:a8:46:a4:1b:59:06:5a:9f:ff:a3:79:b5:6d:13:f3:5c:75:
92:33:52:b9:65:61:24:58:14:0c:c4:96:18:23:3d:a4:7b:ca:
1d:0b:04:08:c4:26:9c:c1:da:92:93:79:77:8d:30:b4:7d:d6:
aa:67:4a:97:a5:50:25:30:c3:b8:ac:d4:d8:28:70:42:7c:32:
39:a8:c7:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfmKzjDwfE5DNmWdIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTExNjE0MDA0MVoXDTI1MDIxNDE0MDA0MVowLzEtMCsGA1UEAxMk
NjI3YmY1ZmItZjIwOC00NDVlLTk3M2UtODAwZDM4OWU5YTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZXgu0m+EEk3NL+3s08nrHz3SwWT+3bXNNSU
75yE/2xjv6jyY60hTfik/CDjNccbUrDkAJBcDAS4BMLfgBAXItfJFP2d9Dp/e2w5
xVUoTmnWkr3Gk10vNowykrZ2R9ltn/abYn5efwrXjnWA6i6Rag9qbfAdmqGanWqa
+KE+mCR6dw225h0GhLDCjq72BHihE1nDNQ+C7f4ntQSDDqFq4FSW3ChvgAPLXjcf
oyh480acTEvWeGqWPabzw5gVcLESjUoJGE7H6Xrt1ysk+b6W9wH7KyKLC/rsmCxh
JUJQTBk7kjcemFy0RoSjkhgLVKQHTR8xwr46AS8nX7gfaI1EkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBY3gvCILR21Mqh3dKZan2HKe8UXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvZDhmZWM3NGYtYTBiZS0z
YzJlLWI2NzUtZDA1ZWQ3ZTY0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2DrMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHqUduOjsSllI4roWUmYmmaIg2XMGGI1JrqgHQ1KHpd+eCQT6XCIk5jg
jBLIdWDKF4QBxg3Jo9h8tpgl9ZcJm1Nb9yOOlkDLxHPrsHUZP6BMVtDqAznfyt4V
exQAGxP2IL2AxhVrQYBqW5NFhSOFgtEgBhjOywc2pTny23hkHLvCRwERZkzWy1Gd
cLq1eKuGaPogO/amDpX34Zbw7XOHxfqJ2GUWN0IdhVrj2oaNBiM77wtsea6oRqQb
WQZan/+jebVtE/NcdZIzUrllYSRYFAzElhgjPaR7yh0LBAjEJpzB2pKTeXeNMLR9
1qpnSpelUCUww7is1NgocEJ8Mjmox6c=
-----END CERTIFICATE-----
Generated at Fri May 9 19:18:13 2025 by rpki-client