Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa
File: 34c28d43-5060-326b-b054-88ca80c8af57.roa (raw, json)
Hash identifier: /aFFgKNNh8hMFL7tPzMGgOldSU5GYrFRkHKwUh8EAR0=
Subject key identifier: 36:60:A6:C5:85:34:30:F5:B9:F6:C6:45:79:51:9E:A7:71:E4:8F:2A
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A61CA135F02D3B30FA940
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.13.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:61:ca:13:5f:02:d3:b3:0f:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=3865fc81-dbf9-459e-8d22-4c4b6762e6e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:db:27:43:77:6f:7a:0e:74:8f:66:19:cc:
61:e7:4e:1a:1a:47:8a:6d:a1:8f:29:8a:ad:14:22:
6e:ba:ec:ab:45:9b:80:b9:3c:ce:20:3e:7e:18:26:
11:39:52:f0:4d:fb:56:da:a0:93:aa:80:b4:f5:be:
28:e8:31:78:cc:65:64:59:be:c8:6c:40:13:0e:a5:
ff:f7:b4:6b:a0:dd:b4:47:5d:5b:71:76:8d:d6:25:
8f:4e:97:16:6b:98:fc:4e:c6:4b:65:54:e4:e0:d7:
1d:7a:ec:49:91:bd:08:93:cc:0d:34:99:56:46:1c:
e6:89:64:80:5d:83:e3:27:9c:c8:e0:e8:52:80:36:
d0:74:d7:9d:55:cd:51:47:c6:d1:cb:63:b4:7f:8d:
3c:15:0a:1c:b6:de:0a:a4:5c:67:a5:30:97:2d:20:
58:e7:fd:83:fb:f6:53:9e:95:c7:f7:60:0d:b7:91:
73:5c:d8:a5:61:fb:6a:c1:a0:ba:99:23:79:a2:12:
21:d2:01:56:27:96:d7:57:03:70:f5:9b:ef:5e:2b:
25:61:e8:e5:76:03:3f:58:f1:be:65:d6:6b:f0:7b:
d4:cd:6b:f4:62:03:05:fb:87:04:57:0e:49:ab:75:
fe:c1:6c:c2:da:2a:fb:51:73:7c:1a:68:e5:37:26:
ba:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:60:A6:C5:85:34:30:F5:B9:F6:C6:45:79:51:9E:A7:71:E4:8F:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/34c28d43-5060-326b-b054-88ca80c8af57.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.13.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:c0:53:74:ed:a7:00:c9:79:cd:f8:b4:e9:61:40:09:d5:45:
13:c9:37:1d:cf:93:4b:86:02:3f:6b:f5:5e:ca:e9:f7:36:f3:
b0:c5:ce:a6:92:e1:e6:92:3d:c4:3a:fc:40:65:29:18:74:4f:
5e:f5:da:3c:b7:d0:78:c4:37:cc:60:d6:04:de:5f:3c:80:bb:
da:c5:1b:03:25:8d:8a:a5:c8:ae:d5:76:dc:0d:73:06:57:a9:
5a:5b:fe:04:8b:33:c5:73:23:2b:0e:3d:a0:9b:45:38:42:2c:
45:18:5f:1b:60:a7:90:6d:af:14:d3:93:f0:12:56:63:d2:3d:
d7:a9:ec:79:a2:76:b2:39:f0:ce:bd:cb:27:d6:a1:d5:52:a7:
42:7b:67:2b:20:b8:38:04:41:43:67:8f:9f:c4:3c:c0:eb:c0:
c2:53:2a:c2:b5:dd:bc:8a:a3:62:a0:3f:00:07:fb:54:56:a4:
ac:fe:3b:db:3b:b8:49:59:a8:bd:75:40:87:6e:02:3a:45:9b:
af:41:e9:9d:ed:0d:6c:cc:92:6a:d0:3e:b4:c4:6b:b0:04:c9:
5e:46:80:1c:d3:7b:1a:d3:5f:5b:64:3c:4b:a6:05:04:96:7f:
73:19:80:5e:fe:59:7c:5a:3c:a0:04:16:ff:a3:46:4c:73:da:
df:ef:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:26:02 2025 by rpki-client