Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa
File: 668ba1c5-3435-3ef3-a8d7-a353e6418069.roa (raw, json)
Hash identifier: ZGwSs9ZIMFO5mUoZeaeTfdmdEqhfCT/G0bC+PT7DD34=
Subject key identifier: 53:23:41:54:1A:A7:B1:A3:F4:7B:46:BA:43:E4:2F:00:A5:8F:B1:03
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6AEA03A99EC042138A00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6a:ea:03:a9:9e:c0:42:13:8a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=8380f0f5-1593-40fc-a3cc-23740ac7b980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:91:c8:d1:bf:c5:bb:a3:40:aa:73:55:83:eb:
e2:92:a5:cb:9a:cc:ac:db:77:2a:7c:7f:5d:23:ed:
90:7d:4d:47:42:17:e1:3d:99:2a:4e:5a:55:29:8b:
6a:73:cf:1a:50:2c:27:c2:90:ed:df:06:97:c3:00:
42:f4:ef:07:b4:83:97:a8:60:b8:07:d6:0c:eb:4e:
42:7f:f6:31:2d:a7:f8:38:29:be:1f:e7:81:e9:b8:
5c:b9:da:ff:2d:5f:f5:76:ab:15:8f:2c:a4:c3:7d:
b6:d7:13:34:8f:af:68:b3:37:8f:fe:23:b5:0f:f2:
3d:10:ee:25:4e:1b:16:11:1e:51:df:db:99:91:88:
10:66:5e:cb:59:29:05:61:e3:8a:a0:f9:0d:1a:97:
53:0b:4c:13:96:86:b3:3a:1f:df:22:b8:4b:9a:b9:
34:48:6d:ac:ea:9b:de:6f:f0:0b:38:93:e2:ab:33:
50:8c:75:da:90:bb:39:b0:de:dc:d8:f4:bb:f3:7e:
33:b7:16:e1:7b:9d:b5:c4:aa:0f:f0:69:35:ef:bc:
69:06:bf:38:9c:8e:60:af:f6:2c:91:67:ea:d1:c2:
15:e0:cd:ed:44:b2:de:3c:54:7b:76:b1:cc:e2:5b:
9e:db:2e:2f:8c:73:71:3d:57:a2:ec:fb:15:37:c1:
35:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:23:41:54:1A:A7:B1:A3:F4:7B:46:BA:43:E4:2F:00:A5:8F:B1:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/668ba1c5-3435-3ef3-a8d7-a353e6418069.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:d1:09:61:6c:2e:1d:56:08:be:b3:5c:aa:df:76:39:b6:33:
64:e8:86:14:c3:4f:52:97:7c:b5:e4:c0:12:9b:4a:98:c7:c7:
ec:ce:bf:02:1d:62:5c:af:0d:22:f9:f7:85:41:40:58:d4:89:
d8:32:ec:87:14:f7:fc:a7:d8:73:9c:35:55:52:d0:ed:85:bc:
af:4d:25:41:07:07:fe:22:3d:c3:fe:ae:e7:5f:01:38:36:61:
c2:9e:f5:11:b1:35:93:50:51:c7:b7:46:e8:41:72:27:7d:db:
c1:28:35:63:7b:9a:11:b2:7a:9f:4d:1d:48:55:4b:02:bb:d6:
81:17:79:cd:0c:c9:08:9c:5d:0b:17:64:15:ba:00:ef:35:66:
20:15:04:8e:3a:8c:10:af:e4:35:89:36:2d:e4:5b:8c:8c:10:
f5:53:8d:34:75:8d:86:75:4e:7f:ca:f6:96:8b:5f:e5:8b:07:
ed:da:ee:0e:ae:fa:82:cd:58:48:d1:ed:ce:af:5e:76:83:cb:
c9:28:21:60:38:dd:48:94:49:fc:42:b1:d2:46:f1:0b:bf:51:
1f:0c:f0:db:8c:44:5d:98:91:a8:2d:d5:13:6d:d7:85:74:35:
77:5d:94:48:bb:22:68:db:ae:c3:77:21:d2:86:2e:75:7d:eb:
c8:ed:cd:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:26:26 2025 by rpki-client