Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa
File: 23e558ef-b1ed-349b-bb7c-72c343e78b57.roa (raw, json)
Hash identifier: q+0YaHyNr4M/mTzxGR4GiT9efC8BXABFChMP7LN31OU=
Subject key identifier: 1D:B9:D4:00:E4:20:68:1D:7B:B1:83:4A:2F:C3:35:73:18:88:19:0D
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62A99D8271B8B91B8829480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:99:d8:27:1b:8b:91:b8:82:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=63b61c78-4eee-450c-98ea-27ca6f0f7d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:da:1c:57:b3:78:a6:97:e3:25:55:de:de:ee:
96:05:16:60:f0:17:01:ca:41:ac:69:06:7c:49:6a:
38:7b:f1:56:fd:f0:47:ad:25:a3:6e:69:bb:de:e0:
3e:b0:8c:ea:36:00:f9:82:12:87:c6:52:fc:bd:41:
88:12:7c:3c:0e:8d:c9:ae:70:8c:4b:15:4d:a4:28:
59:ec:50:86:b7:30:44:f0:c7:aa:dc:d5:f6:9d:ca:
90:e6:f7:23:12:c6:f3:49:98:5e:63:e2:ef:39:89:
96:fb:db:23:02:c0:af:ce:f5:42:05:07:71:bd:7a:
5b:fa:0a:1b:32:ba:c0:42:0f:0f:de:68:04:72:0d:
5d:28:37:59:5a:33:d3:27:a8:f1:62:a4:2f:44:23:
16:62:57:44:59:a9:2a:56:7a:c4:fd:e2:d7:a5:59:
91:d5:90:af:c9:44:26:3f:05:a6:86:05:e7:06:f5:
77:8e:54:3b:62:e1:88:02:0c:f7:99:8b:6e:c7:65:
87:4e:48:12:87:cc:00:9b:20:14:bd:19:31:4c:33:
37:5a:07:30:12:ad:93:d0:b5:cb:3d:a4:4e:8a:20:
05:34:68:be:ed:35:a4:e8:d5:95:b5:0f:a5:85:c8:
df:69:fd:6c:f0:94:4e:ed:73:06:d7:47:ea:8a:15:
c0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B9:D4:00:E4:20:68:1D:7B:B1:83:4A:2F:C3:35:73:18:88:19:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/23e558ef-b1ed-349b-bb7c-72c343e78b57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:db:01:3d:c9:e1:c2:5a:8d:c7:17:6c:74:59:cb:72:4d:fc:
c9:0d:e4:eb:6f:9d:fa:47:de:cd:7a:35:5d:86:90:39:1a:6f:
54:fd:fe:2f:05:c7:8e:1a:a9:ae:b7:ea:a9:bc:47:63:13:5b:
55:cc:4d:2d:7e:aa:a3:80:fd:41:56:c0:2d:73:be:37:7e:78:
8d:f4:04:9f:40:c7:fa:6e:a6:62:5b:9a:9d:fb:10:a6:ac:76:
db:4c:38:eb:67:c9:54:ad:fa:a9:32:88:cc:6a:df:55:57:6c:
48:3b:6e:70:99:f1:4f:c2:2b:48:dd:b8:95:62:1c:44:ca:cf:
b8:a8:da:61:0f:ca:6e:86:e7:17:60:1a:33:36:ef:f3:3f:7b:
de:72:fd:09:01:43:d0:bd:f3:40:d8:69:7b:c6:fa:de:b4:b8:
12:35:b2:27:0e:05:15:ed:a6:86:13:1c:39:dd:90:6c:06:0e:
c5:74:77:a0:c7:0b:de:13:f8:c6:99:f8:cd:59:68:e4:15:da:
56:f1:f2:61:06:bf:f2:95:7b:e0:1c:7b:75:17:ba:7b:82:09:
84:6d:c4:ba:9d:3d:88:c9:4f:38:74:1a:42:e3:d0:a0:3b:6c:
c5:81:cd:b1:31:e9:b8:aa:bb:98:67:7e:28:f3:a9:60:a6:7f:
44:d5:0b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:06:56 2025 by rpki-client