Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa
File: 637ba1ea-5a50-309e-a538-fe7efd71cc38.roa (raw, json)
Hash identifier: 64u7qzKzOAFeX7nboU3uB3tn3KjmvdO4epUXZz50M6Y=
Subject key identifier: B4:10:00:0F:2D:9C:AD:0C:B1:42:61:04:CE:D2:58:BA:66:92:47:95
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A64F36D88F004C3CE04C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.20.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:64:f3:6d:88:f0:04:c3:ce:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=9aff0e9d-411c-4442-9f2d-87da70cb250f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:79:fa:b7:a2:8f:42:99:23:eb:2f:79:2a:b6:
1b:34:41:17:03:64:75:06:c0:74:7d:3e:b6:33:e2:
31:e6:0d:9e:cc:d6:fc:3e:f3:69:45:df:52:d7:7c:
30:86:79:df:21:72:ad:e1:1f:f9:56:0d:b7:61:03:
f3:2a:e9:30:38:f6:3b:e8:95:90:0f:33:82:6b:d9:
cd:e3:1f:fa:c3:78:be:72:4f:37:7e:b1:5b:8e:9d:
32:0c:14:f2:b1:01:5d:a9:72:3c:3b:db:15:37:3c:
9d:b4:bc:b6:70:07:a2:9d:97:46:42:9a:61:78:cb:
39:58:88:03:05:71:a6:0b:d9:1b:93:bb:87:08:96:
b3:17:23:7b:5d:d4:4b:b4:95:6c:15:19:77:44:51:
f9:bd:d2:f0:6a:1d:43:6e:b5:93:ff:64:85:44:22:
2d:c9:64:c8:91:6a:b8:56:fb:3d:19:33:40:f5:e2:
d1:5e:6f:72:27:5b:a7:08:1a:f9:7c:7d:1e:5f:66:
8a:32:07:db:76:23:15:33:49:32:10:33:ff:5e:13:
ce:5c:e2:bf:95:f2:51:36:8b:65:85:74:75:88:85:
07:66:cc:33:98:bd:f0:9a:09:8e:6e:90:e8:1b:bf:
ba:3d:86:42:32:62:46:31:80:70:e9:29:a1:d8:79:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:10:00:0F:2D:9C:AD:0C:B1:42:61:04:CE:D2:58:BA:66:92:47:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/637ba1ea-5a50-309e-a538-fe7efd71cc38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:61:67:9c:d8:7d:7d:b8:58:e9:6a:4a:37:51:a5:7c:a4:f8:
3e:4c:95:20:89:84:b5:84:47:db:ac:86:5d:88:fa:53:1a:ae:
fd:70:74:f7:c9:7e:66:54:a1:66:b8:f1:19:ca:1a:be:36:9e:
e4:c4:2d:f5:69:4d:76:84:ff:58:ed:6f:da:ec:49:9b:f3:24:
75:82:58:ad:c0:a9:2c:bc:ff:e1:69:34:30:d2:d0:4d:fa:ca:
6b:2b:cd:c3:60:95:a7:fc:7b:43:3a:7a:a1:e5:02:18:46:b6:
9d:47:7b:2d:61:73:14:16:80:3a:a8:82:eb:b3:d0:56:23:1b:
26:ad:c6:dd:79:44:a2:94:f6:49:12:72:6c:74:e6:d3:15:2e:
9a:78:07:16:fd:a5:80:27:e2:a0:e5:12:bc:9c:6b:4f:f5:e8:
f8:6f:3d:4b:eb:22:8a:0f:5a:11:58:e4:7b:2a:0b:a0:06:48:
25:2d:3f:d5:2c:21:f5:be:d4:df:88:85:80:98:6a:a7:f9:e9:
61:da:b8:5e:d2:3a:73:b6:e4:f3:20:61:a4:8c:3e:54:0c:00:
d8:6f:6a:cc:95:06:7d:ad:cf:53:69:0c:81:68:9a:74:e5:bc:
53:ab:b5:9a:26:6c:56:a5:48:c3:ec:66:49:33:65:cf:5b:ff:
5a:51:6f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:31:09 2025 by rpki-client