Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3055fe69-c73e-38fb-918e-f2022d02635f.roa
File: 3055fe69-c73e-38fb-918e-f2022d02635f.roa (raw, json)
Hash identifier: w1qwUo8hT7z05da45Bz23+cv7jb1WYO8QgqL2Z+Rd3Q=
Subject key identifier: B0:15:DB:EA:35:51:DA:83:B8:C5:10:76:12:A8:1E:F1:97:82:CA:CD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62A9F94AB1FC86347E5C980
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3055fe69-c73e-38fb-918e-f2022d02635f.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:9f:94:ab:1f:c8:63:47:e5:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=18a184ed-33f9-454c-89be-107758e3da53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:c3:80:d0:42:f0:e3:54:71:15:e4:50:49:
82:07:1b:07:cd:4b:ec:f4:39:18:dd:fb:61:b0:2c:
02:7d:68:ff:f2:33:95:3e:d1:c9:1b:18:f7:44:4e:
79:3f:3e:b6:cd:a1:7b:e9:ba:92:0f:1e:62:32:ed:
2d:1e:05:98:88:c3:5c:dc:30:88:56:9f:6c:af:3b:
02:1c:8d:7a:06:64:1e:2f:2f:f6:c5:e2:d1:40:ad:
c4:16:67:9c:00:09:1f:37:01:0b:2d:ac:f8:8e:43:
fb:d4:60:54:81:fd:5b:e9:ff:5f:21:6a:4e:67:64:
df:9f:f7:8a:3c:d9:95:cc:8f:39:a5:46:35:9c:88:
19:07:d4:ba:f1:e2:fb:fa:24:b4:a0:5b:d9:f7:82:
75:db:ed:de:96:6a:b4:af:7f:37:2d:94:b0:2c:95:
d7:77:f2:fb:68:4a:65:4f:64:7e:51:7e:f8:60:e8:
a2:c5:d0:8d:99:49:3c:c4:d2:ae:82:74:2b:c4:aa:
ea:df:84:65:92:0c:51:5e:3b:12:13:48:df:f4:75:
74:06:76:0f:c4:32:1b:40:25:cb:31:9a:95:23:89:
da:65:e5:bb:f6:84:ac:61:2c:81:76:4b:42:8b:0b:
27:ab:95:73:62:fe:49:54:e9:ef:a7:e4:a7:f6:66:
ff:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:15:DB:EA:35:51:DA:83:B8:C5:10:76:12:A8:1E:F1:97:82:CA:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/3055fe69-c73e-38fb-918e-f2022d02635f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.151.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:44:8f:dd:52:21:c0:93:13:24:38:12:1b:5f:9d:ba:6e:6b:
12:cc:7b:5e:df:95:f1:e2:a0:53:96:74:c1:5c:cb:c3:b8:a7:
7f:8f:d2:47:27:b5:65:ce:97:a0:42:d5:69:47:a3:41:57:1b:
ad:1b:1a:0f:23:f9:e9:3d:71:c2:3a:b7:20:12:ba:ea:3a:43:
bc:3d:84:f7:f1:53:77:1e:ec:93:9a:9b:58:36:b0:6e:d8:f0:
7e:b3:f7:06:9c:a8:b2:82:a0:11:6c:90:81:5d:7b:c1:11:0e:
c4:11:21:fe:59:7a:08:7f:94:fd:9a:64:1a:82:99:18:5a:f4:
01:7e:cd:a9:51:d1:f8:5c:8c:9a:8a:18:f4:80:d2:d9:41:ce:
65:da:f1:4e:a8:cf:99:7a:e0:37:9e:be:b6:e3:99:64:cd:51:
1d:b9:4a:f4:54:b9:27:c2:ef:41:91:53:f4:65:cb:55:8b:1d:
6d:08:41:8e:e1:dd:73:e8:e6:32:f1:ad:f6:a5:90:2c:a1:1e:
f1:b8:7e:ed:8b:d9:65:14:2a:f0:b9:02:1b:c9:3b:e9:cc:0b:
f1:3c:f4:34:14:7c:1d:c4:1b:7a:27:3a:32:d7:da:1b:bc:79:
e5:64:8a:c4:15:f3:aa:50:88:c7:78:f0:5e:fd:4a:8e:d0:79:
91:1d:10:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:45:15 2025 by rpki-client