Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa
File: 07ddce46-8efa-397a-a162-a4e2f281fe1b.roa (raw, json)
Hash identifier: dAPftMxFnljr9BiMLy/sTdvSHJuFRbhUIIh7wYxJggw=
Subject key identifier: 1D:10:F2:22:BE:EE:77:86:A1:95:8A:1E:2B:75:B6:5D:C3:6B:2D:34
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB3778825B3A74ABD76A0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b3:77:88:25:b3:a7:4a:bd:76:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=0cf4b64e-6a7d-45e4-92eb-7d210397e4d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:ef:e1:ab:d4:ca:ef:28:51:e0:db:7c:ee:
d6:48:4c:8a:42:5f:bf:09:96:d5:77:15:06:08:ce:
5b:f4:fa:59:16:af:6f:e4:fc:58:b6:36:c4:2e:4d:
cb:01:e3:f5:85:e2:d9:56:5f:a6:b0:04:11:49:19:
07:f6:f9:93:da:f8:3c:68:27:42:34:66:cd:70:d5:
79:4d:7a:ad:27:d9:f1:21:9c:30:72:92:74:46:0e:
87:26:e6:a5:b1:cf:6d:71:79:d5:6b:e8:6e:73:e0:
f8:2c:76:66:e9:9a:37:5c:d3:eb:c9:76:f9:96:62:
df:2c:16:49:19:1d:08:1b:a8:7c:f9:cd:be:64:0d:
fe:0f:37:e1:52:0c:cb:d6:c8:62:d0:aa:2c:60:d5:
83:ba:e9:53:c6:16:8e:f5:e4:f5:ec:0d:7f:52:8c:
59:6d:d8:1a:9a:dd:2a:71:84:f3:8d:63:9e:64:80:
d2:76:9b:99:f4:da:47:c9:2a:3b:62:d2:9f:c6:31:
bb:78:ac:3e:86:78:51:d2:4f:ae:fe:49:28:eb:63:
6c:2e:26:3c:b9:64:47:2f:58:67:d9:54:3d:15:44:
df:6d:2a:af:46:38:15:8f:67:6c:7b:b5:72:ec:71:
1c:c9:e0:50:98:be:46:db:48:6d:a7:dd:11:05:e5:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:10:F2:22:BE:EE:77:86:A1:95:8A:1E:2B:75:B6:5D:C3:6B:2D:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/07ddce46-8efa-397a-a162-a4e2f281fe1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.4.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:3b:ac:1b:31:b8:d2:d2:63:91:6b:d4:a2:27:af:d8:0b:32:
01:09:a6:b2:d9:76:d2:de:48:e2:d1:10:20:c0:cf:2c:b7:c5:
3c:89:a8:d8:c0:09:89:01:19:03:9c:0b:9c:22:b9:3f:b9:9f:
7c:e5:5b:b2:cf:6e:98:79:7e:e3:df:c4:ee:d4:db:69:dc:b1:
32:1f:cb:59:44:b5:7f:53:cc:0e:8c:1d:87:77:51:10:13:7b:
f7:0f:50:25:ba:3e:a5:16:0d:88:69:02:3e:a9:cd:2e:4a:e2:
5e:98:d4:83:9e:f6:37:6a:be:f8:71:14:24:ca:93:4b:44:83:
3a:e0:d8:19:9f:75:6a:b7:ef:f9:18:74:3e:1d:13:08:ed:ad:
11:81:0a:e3:20:16:fd:99:6a:4c:3e:9b:1f:65:4a:38:c2:50:
bb:b2:36:e7:5a:74:92:17:7d:9a:28:f1:87:ae:5f:38:63:11:
2a:bf:be:59:19:c7:f1:2f:fc:9f:dd:12:76:bf:e1:29:ad:ac:
1c:4b:a5:a8:79:fe:47:de:19:c9:60:fa:6b:85:6b:34:89:cb:
14:bf:c8:74:d7:1d:d7:79:7c:ea:88:fb:1f:06:d8:83:0e:b0:
9f:1e:28:60:bb:71:78:e0:82:0d:5b:6b:cf:a3:68:84:fb:56:
29:46:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:27:28 2025 by rpki-client