Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b7c1e4c-21ef-377b-8ff4-df6951797ca9.roa
File: 2b7c1e4c-21ef-377b-8ff4-df6951797ca9.roa (raw, json)
Hash identifier: HD6CaEh7B2QBec2vn4TxoZqXC1YK7qaBzu8eaj9J+nQ=
Subject key identifier: 07:38:E3:29:D0:77:40:C4:FC:77:D7:89:5A:DD:98:5D:C5:A0:46:11
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A65AA1AFCAE8F14DF5A20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b7c1e4c-21ef-377b-8ff4-df6951797ca9.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.121.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:65:aa:1a:fc:ae:8f:14:df:5a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=393fbe77-82d2-4313-8129-d8af260dc4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:18:ce:83:79:07:af:bd:33:41:53:d3:bf:
41:30:dd:77:84:31:e5:cf:eb:f6:98:53:66:ea:fc:
e6:80:22:21:2d:dc:fb:c1:9b:ef:7b:77:e7:fe:a5:
8d:91:f2:ae:fe:0b:48:6e:67:2f:ef:8d:c6:00:25:
69:5b:85:f8:b7:d7:9e:96:c5:49:4e:c4:f2:61:cf:
35:0e:a0:b8:cf:95:37:27:6c:d5:2e:36:c3:19:99:
a5:ea:8a:f9:ce:1b:dc:a3:17:7b:31:af:ec:94:e9:
81:31:9a:af:cf:18:14:a6:a1:c8:f6:ad:f7:f1:5d:
6f:79:0e:ac:90:d0:e4:a2:1c:3e:19:95:82:85:92:
66:e5:cc:f3:fd:aa:ed:ed:70:57:43:30:4c:80:38:
ac:e2:b4:45:7c:5e:7b:6f:1f:d7:50:0a:b5:01:d2:
ef:25:de:c3:bb:3c:97:7d:2e:59:bf:56:85:f9:16:
cb:76:60:b2:ab:5f:4f:c2:26:c0:ee:aa:f7:04:f0:
35:c9:fb:1f:a1:45:0d:a4:ae:8b:bb:50:0f:c2:43:
18:96:d8:53:de:88:18:ff:03:50:09:bc:22:45:5a:
8f:f2:c0:e5:8b:5c:d6:93:cc:b1:2e:d0:17:50:78:
91:8e:44:4a:5f:ca:e4:f4:4b:ba:42:a4:8a:16:50:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:38:E3:29:D0:77:40:C4:FC:77:D7:89:5A:DD:98:5D:C5:A0:46:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/2b7c1e4c-21ef-377b-8ff4-df6951797ca9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:86:63:ba:93:bb:fb:4a:1a:c8:75:f3:06:1d:70:d8:c3:71:
44:a5:2c:38:43:ef:63:60:54:11:0a:04:5a:9e:e1:bc:85:ae:
80:ce:11:b1:eb:08:37:5f:c0:7d:16:c5:fe:f9:2e:7f:ec:5d:
52:9e:c2:fe:3f:3b:4d:a5:ea:eb:92:f4:ff:7e:43:e0:02:6a:
03:f5:10:e6:cf:63:d6:16:ac:44:d8:92:01:22:97:5e:7b:81:
ba:4f:74:3c:0a:4c:88:41:b1:b3:86:b6:eb:59:d6:a3:b8:31:
eb:e0:d9:5d:86:92:db:e7:c8:84:fd:a8:6c:db:b8:82:c3:dd:
75:de:96:ff:98:8d:19:8d:37:59:cb:6b:cb:ee:f4:3a:63:94:
ed:92:d7:9b:cb:b6:8d:96:5b:da:2f:d0:4d:ef:76:79:36:04:
25:33:53:fc:4b:f9:eb:9a:f1:b4:3d:d0:7c:d8:8b:93:9e:4f:
a8:41:f1:29:83:cb:98:4e:84:d3:f8:a7:a1:45:e9:1d:3e:48:
4d:35:94:70:f3:28:29:00:b9:ea:8a:b9:fa:60:5e:7f:8e:1c:
65:e0:8a:96:e2:5e:90:ce:71:3a:49:80:98:a7:41:6a:24:b1:
7f:51:ac:82:42:c7:e6:d2:a0:90:4f:9d:68:58:e6:c6:4a:f0:
6b:e0:0f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:02:04 2025 by rpki-client