Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
File: 1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa (raw, json)
Hash identifier: GKdQ9GpiQt9J7E0fSz4jrlQA4PwU+nceFcK9bNjfEjk=
Subject key identifier: AA:63:87:2D:AA:F4:7E:5E:10:28:11:9C:1E:A8:81:34:BE:FF:4C:B8
Certificate issuer: /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
Certificate serial: 010D0C9F43285848B35B61DB15E2017EF8528100
Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 8075
IP address blocks: 142.147.61.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:61:db:15:e2:01:7e:f8:52:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=ba805940-9ba3-41af-8e4a-ef3664a95445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:a6:a0:7a:3f:be:d9:08:f2:31:42:72:bc:de:
a5:49:1c:78:c3:38:d8:61:51:f1:54:78:7d:f5:f7:
95:c1:1c:78:b8:af:08:0c:c8:47:47:59:59:2f:68:
1a:c7:64:55:6b:9b:ee:3c:eb:03:c0:c6:40:c2:69:
a0:7e:b9:80:7a:a8:b1:0b:8a:13:45:90:8b:0b:28:
0c:46:02:cd:73:bc:63:60:13:d4:6e:02:47:3f:bb:
28:0c:59:af:71:98:90:b9:88:d0:4b:e7:f4:3f:43:
5d:d3:87:2b:98:11:82:a7:c7:b9:7f:3f:30:5f:2c:
40:c8:74:90:88:60:22:1b:c3:a9:48:7d:0e:ba:e6:
b3:43:14:b4:d2:9a:f7:59:50:c0:08:cb:eb:0a:52:
7e:9e:b2:04:d1:90:cb:df:26:1c:60:db:64:7d:9c:
cf:53:39:20:e7:21:db:29:6f:b7:42:da:4a:ce:b6:
68:ea:25:16:07:42:e3:88:a3:14:23:58:45:f3:f4:
eb:8f:65:a9:fa:e7:19:26:32:03:e0:6a:e5:14:9d:
db:be:50:9d:91:81:72:31:b5:78:e1:83:3d:33:71:
6d:a4:da:d1:0f:dd:b1:ec:8e:87:7c:e8:5f:e9:2b:
81:0d:87:e3:e0:44:43:b0:83:fc:c6:0d:5e:b2:22:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:63:87:2D:AA:F4:7E:5E:10:28:11:9C:1E:A8:81:34:BE:FF:4C:B8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/1f6b0878-6104-363b-b3e2-bdcb3fc14d4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl
X509v3 Authority Key Identifier:
keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
sbgp-ipAddrBlock: critical
IPv4:
142.147.61.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:7d:1f:fa:e7:a6:52:45:be:be:be:f6:ea:2a:5e:f1:78:68:
52:0a:82:32:98:ed:03:7b:87:b0:db:27:e2:b6:e0:b8:21:14:
57:79:60:da:1f:82:4d:94:a4:d1:f9:24:fc:97:93:9c:c7:be:
61:95:7d:1c:12:8e:22:74:ee:85:36:73:75:3b:9d:2e:70:bf:
d3:aa:59:9e:be:9c:7f:80:9c:df:e4:40:36:1a:ea:4d:45:06:
9e:14:19:f8:65:1c:0f:ef:ca:15:c1:b5:ab:0b:aa:8c:9b:35:
b6:a7:3b:ca:03:be:cc:cf:e9:e5:fc:02:e6:bd:5f:0a:ab:39:
15:00:0e:5a:0b:34:e8:87:b2:07:ba:bd:f9:ff:84:c1:c7:e4:
07:cb:be:ef:a6:b7:eb:2a:b4:69:06:10:17:63:4c:bf:4e:71:
ab:75:5c:d1:71:4e:91:b4:02:85:d9:d9:2c:47:07:b0:88:d5:
6b:a3:62:2c:0f:60:27:09:4d:2d:c6:17:d3:77:50:c1:03:03:
85:18:71:17:4c:8f:e6:ff:a3:77:e5:23:db:61:23:e0:d4:90:
b1:60:d6:9a:81:67:75:f8:56:92:74:75:bb:11:eb:43:16:92:
02:5a:33:06:bb:22:ce:73:dc:a1:3f:f3:2f:65:9e:32:5e:d0:
bc:80:e4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:33:04 2025 by rpki-client