Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19ffba9f-9e66-3e1c-ae00-48f3040ae0b8.roa
File: 19ffba9f-9e66-3e1c-ae00-48f3040ae0b8.roa (raw, json)
Hash identifier: UlvAYsJJ5UmRby8bXZCdHVS1c2ZHBDGkxkF9KewnZjE=
Subject key identifier: D8:08:66:C9:39:4F:FE:68:61:5A:50:C0:EF:8F:BD:89:65:45:C6:FC
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A556C3AC29A8AD3286A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19ffba9f-9e66-3e1c-ae00-48f3040ae0b8.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:55:6c:3a:c2:9a:8a:d3:28:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=61d13638-e4ea-449e-9c9a-c938bff5e742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6c:e0:fa:1e:36:e8:65:1b:83:9a:87:74:9c:
e2:ed:06:a0:d5:47:2f:dd:a7:54:36:d9:5a:61:84:
f8:14:0c:f3:db:55:49:4b:01:3b:b4:ec:bb:4e:bf:
6c:b0:86:55:5f:69:be:28:17:4c:7e:6d:5b:7c:78:
74:67:80:82:c4:73:58:e1:e7:8b:e5:73:28:e9:4d:
ee:24:b8:e3:f7:06:e8:d1:b2:2e:14:9c:8b:dc:2f:
c4:72:0e:53:89:a0:fa:54:65:47:78:42:92:92:2c:
29:e1:75:b9:ea:4a:63:d2:a9:ac:74:b5:e4:df:a9:
9f:51:d8:58:f1:a2:df:af:cf:13:a2:e6:7f:dd:d1:
29:78:4b:21:57:07:f5:ce:83:e2:0d:e7:78:67:f9:
a9:b5:96:70:c2:4d:e0:89:ce:66:7c:06:ef:a6:6b:
98:5e:2e:00:03:09:d4:10:6b:89:a1:70:59:cf:bc:
18:74:07:d4:3a:31:90:90:d4:ec:d8:6f:42:b0:61:
e8:c2:37:47:fd:03:99:ae:b8:68:9a:a3:a7:ca:90:
10:44:85:92:c1:89:f2:6a:05:c5:7f:37:3f:41:b7:
c7:09:3b:88:2a:c6:f2:39:8d:7a:6c:b5:e8:81:cd:
99:15:c7:69:2c:6d:ed:c1:8b:d1:15:3e:8a:82:4d:
8e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:08:66:C9:39:4F:FE:68:61:5A:50:C0:EF:8F:BD:89:65:45:C6:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/19ffba9f-9e66-3e1c-ae00-48f3040ae0b8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.105.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:7a:83:ed:b6:31:5b:02:fe:7e:5a:9a:d2:8f:cf:fb:b1:5b:
95:10:d4:98:65:a2:85:0f:cd:15:a9:63:a4:6a:92:74:65:39:
28:be:55:0a:86:c0:88:f0:15:90:d2:43:bc:38:2c:53:78:7e:
b8:7d:33:bf:1d:d0:4c:7a:a5:d1:c1:f5:33:c2:23:78:7a:d1:
d7:88:e1:7d:3c:fd:68:7c:81:f6:77:7d:ac:90:bd:2a:b2:49:
09:37:8a:76:a3:8e:88:69:6a:58:6b:29:62:82:72:99:80:9d:
1b:d2:86:77:2f:49:ee:00:d9:b5:13:96:3a:b0:8b:87:97:b7:
03:5c:36:a3:c7:9a:41:30:a1:8e:7f:15:d7:29:03:16:60:03:
87:af:9e:44:22:52:16:bd:c4:3f:76:20:83:60:d7:ac:68:37:
15:5a:5c:d8:87:12:6e:6f:ce:1b:70:57:15:6c:42:23:a8:a9:
81:c0:bb:c1:97:f7:8a:a4:e1:0d:17:5c:97:3e:a7:74:e0:46:
cd:ae:ec:41:6a:42:a6:a1:50:9e:40:77:73:65:00:6f:40:90:
47:2a:ee:19:fd:6c:df:40:78:5f:50:3f:d2:48:d6:31:6f:f6:
b6:71:69:01:e6:39:1c:38:b4:2e:18:ec:1e:6b:46:c4:f0:46:
f7:9c:5b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:56:53 2025 by rpki-client