Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cbb97d-a169-317b-ae93-69a3033c9909.roa
File: 17cbb97d-a169-317b-ae93-69a3033c9909.roa (raw, json)
Hash identifier: HKKxw11Ju7grErrJWR+0raat4LKH431BNNSMhrCyiEc=
Subject key identifier: 4A:20:92:C5:32:18:B4:0B:8B:F3:50:48:92:07:4C:F3:11:6B:60:70
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA232BE55C30532ABC800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cbb97d-a169-317b-ae93-69a3033c9909.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.250.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a2:32:be:55:c3:05:32:ab:c8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=a31df2d3-bf3c-43e7-acf0-077c56af4a78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:29:55:4b:ac:91:bf:8c:2d:1a:64:20:0c:e7:
f6:28:55:b3:61:39:63:76:a6:16:48:db:4d:a5:97:
42:fb:94:77:98:ba:8f:32:a4:16:23:90:8a:39:fc:
7c:4d:ef:b4:cf:83:0d:37:72:38:3f:80:de:f3:15:
be:e2:ac:4c:27:26:60:94:54:8e:d7:41:09:d2:5e:
af:51:35:23:d8:52:01:45:a7:1b:be:0f:85:d8:fc:
0f:c1:a9:bc:d7:56:ef:23:ee:2f:74:c1:ca:3f:d6:
3c:9c:91:1a:c3:98:cb:cc:47:25:5b:5a:6f:49:4d:
2c:ab:39:99:2c:65:30:e6:48:1d:40:39:11:51:56:
d7:ff:87:63:6e:c4:6d:e0:44:a6:8b:e1:a9:48:f9:
ce:a7:1c:e7:fd:59:91:a5:11:24:14:31:11:4a:d1:
3b:8c:33:a7:20:d7:9c:7f:4d:21:64:85:f9:97:61:
c4:c8:63:14:4a:81:fe:74:d6:5a:38:69:c6:d3:85:
73:51:ab:85:91:ea:88:9a:05:06:50:ec:6d:e7:42:
60:e4:2a:05:7c:8e:ce:1f:60:f9:da:f9:bc:c0:3a:
ca:f2:1d:28:f8:c7:02:07:75:75:71:05:1e:2c:ff:
dd:f9:c8:ab:c6:d5:9d:3e:b6:0d:15:44:02:69:0d:
fe:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:20:92:C5:32:18:B4:0B:8B:F3:50:48:92:07:4C:F3:11:6B:60:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/17cbb97d-a169-317b-ae93-69a3033c9909.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.250.123.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:67:ed:c8:79:9f:d3:f6:6a:f3:13:52:6f:41:37:4a:de:da:
97:f8:01:a5:0c:7d:a5:a6:f3:2a:5b:60:4d:c7:4d:67:ef:6c:
7b:5b:d9:1b:8c:63:52:7a:ad:1f:e5:f5:1f:a8:f2:4f:a8:9c:
31:d0:b5:fe:7b:a9:98:38:7d:49:c0:82:c0:3b:3e:9a:87:50:
94:7a:b8:cd:49:a3:70:f1:c3:fd:13:43:c6:55:17:7b:eb:da:
ae:0c:06:aa:51:c9:36:9f:b7:e5:55:ac:0f:82:b5:48:7d:01:
8a:4a:0d:a0:a9:cb:ea:c4:7b:c8:d9:ae:8e:32:6a:96:58:5c:
bb:a3:c2:b0:58:08:9c:ea:eb:f0:d0:12:70:e5:80:5d:ac:e4:
70:77:05:7f:8f:83:e7:d7:f0:d8:b2:6e:ae:b2:47:af:4f:c7:
4a:fd:ae:c7:bf:40:ae:3a:18:fa:1d:1c:96:9c:77:70:0a:2e:
51:9a:cb:c3:88:e5:c2:bc:02:7b:c3:b2:88:9a:98:b1:a0:15:
76:5d:f4:c0:f7:f2:5d:3f:a0:1c:be:8f:88:ee:24:87:4d:97:
69:33:8f:00:ac:74:fd:68:ee:43:8c:81:6b:86:8c:dd:e5:7d:
02:ae:98:ab:22:f8:c8:73:2c:65:a5:45:21:47:37:e4:5f:ae:
d8:5e:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:57:06 2025 by rpki-client