Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa
File: 0a6e1cd7-cde7-331d-b532-920657d287c0.roa (raw, json)
Hash identifier: ih+WqmcyiH9A0m+TZPzACACWCuvMQYSnp8sLM2/lmSk=
Subject key identifier: EC:91:10:3E:77:D8:AA:20:73:FB:1C:BB:11:01:98:CA:1C:98:81:EE
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A77BF1A6E2437C1D3C0F0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:77:bf:1a:6e:24:37:c1:d3:c0:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=483841b8-0ca6-48e0-97c4-dd32383498be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:c3:38:38:ce:6a:35:cc:19:99:2a:b4:0d:
5b:be:00:8c:a2:c4:c4:8a:a3:4d:3d:e1:4f:82:e4:
2b:62:4d:bb:bd:48:09:b1:e0:50:2c:70:6d:00:a8:
c0:66:ea:98:f0:85:88:d9:ff:6d:0a:cc:ea:f9:8a:
cd:e9:84:4a:28:64:0c:d2:54:6a:fc:e6:8a:6f:2e:
33:76:ea:79:54:cc:2c:6e:4b:d5:0b:7f:76:82:8d:
b1:95:79:a6:84:e9:46:da:14:23:d6:a7:e3:f8:2a:
63:16:e7:c3:9f:84:51:34:b5:c9:1c:2c:ad:c0:5e:
a7:06:a3:79:64:42:cf:09:52:dc:38:88:9f:60:9d:
5a:03:f3:50:b2:ea:d7:7b:ae:48:23:c1:68:02:d7:
ba:c0:e7:f8:cf:34:7e:ee:c5:d6:e5:4c:17:e4:1e:
e5:d2:5c:9f:f7:a6:4d:55:00:6c:da:3b:fe:b3:d0:
b3:b2:dd:83:21:d5:b1:28:a8:e5:bd:19:12:81:c0:
14:6d:88:15:e9:1a:46:9b:8c:74:7a:16:d3:67:d3:
16:77:60:fc:69:db:b1:87:aa:bb:9d:c4:6f:a1:a7:
9e:2b:92:33:78:93:8c:c5:33:55:dd:a0:f7:10:41:
0a:15:85:e7:48:a4:3c:09:ad:5d:30:1a:dc:ed:d3:
03:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:91:10:3E:77:D8:AA:20:73:FB:1C:BB:11:01:98:CA:1C:98:81:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0a6e1cd7-cde7-331d-b532-920657d287c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.99.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:f3:ac:69:b1:7c:de:06:15:80:c7:70:b1:fd:6f:11:2d:e5:
66:a0:c6:61:01:02:ce:b2:7c:15:e8:67:b6:b4:9f:53:8e:9e:
b5:ad:a5:f7:2b:7c:9c:31:ee:55:1f:18:75:0a:f1:f9:a2:ea:
3f:78:06:16:59:2d:2d:8d:01:57:ef:28:a7:5b:2e:7b:87:45:
d6:31:72:9c:70:e3:60:5e:54:e9:66:03:7d:e1:3d:62:9d:22:
51:f1:48:12:36:26:f3:f8:ed:8a:b4:2c:0e:e1:14:dc:17:29:
df:cf:d4:25:6d:24:df:db:b7:94:61:3e:dc:73:e6:64:46:27:
c2:10:30:2d:51:b9:4a:9f:a6:9f:4f:a7:32:e8:da:c1:ac:af:
38:1c:bb:9e:00:75:ad:33:9d:58:3b:78:e0:4c:e9:c3:00:96:
59:04:d1:fb:6d:f4:1e:5a:1c:02:f0:9f:5d:b5:d6:8c:52:ed:
6f:5e:db:26:f0:12:88:d8:e1:98:b9:70:b3:6f:10:18:a8:0a:
fa:44:cb:85:59:cb:4a:bb:5f:b7:c9:4b:f6:fe:6a:9b:28:fb:
00:63:ca:74:ab:32:12:70:5b:ec:aa:ad:e3:f6:cc:c3:b7:bb:
eb:6f:84:5a:fc:b8:82:5c:da:64:27:48:84:0a:44:95:28:bd:
e1:1d:ed:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:04:05 2025 by rpki-client