Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9370632d-52a3-399b-ab0b-2c0193ef4ddd.roa
File: 9370632d-52a3-399b-ab0b-2c0193ef4ddd.roa (raw, json)
Hash identifier: 43DozNyf4303z3vlNJyg0O+VKcMPrexgd4fqVN780Yk=
Subject key identifier: 23:22:12:33:54:0C:3B:DC:AA:C9:F4:A0:03:1B:1B:F7:58:59:8D:D4
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858482A8FE42D380F872AAAB44180
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9370632d-52a3-399b-ab0b-2c0193ef4ddd.roa
Signing time: Wed 11 Dec 2024 02:00:38 +0000
ROA not before: Wed 11 Dec 2024 02:00:38 +0000
ROA not after: Tue 11 Mar 2025 01:00:38 +0000
asID: 15169
IP address blocks: 142.251.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:8f:e4:2d:38:0f:87:2a:aa:b4:41:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Dec 11 02:00:38 2024 GMT
Not After : Mar 11 01:00:38 2025 GMT
Subject: CN=8200149b-39af-455f-a3e1-2a7824a34750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e6:30:35:dd:bf:3f:7d:66:a6:f2:c7:88:21:
78:6b:03:88:b7:43:b6:89:a1:26:f6:e2:9e:62:1a:
6c:ae:4a:ea:26:dc:bf:98:db:b7:d4:19:78:04:b1:
fe:8a:0d:83:71:fc:57:60:1c:da:38:a3:1d:69:ca:
90:3e:13:5d:ef:7d:bd:05:eb:b9:ee:3e:fc:91:24:
aa:f5:04:98:72:c2:ad:1e:ca:6a:02:9e:d9:24:7b:
4f:e2:1f:3d:93:09:78:30:fe:a5:df:ae:ce:ea:bb:
77:a0:d3:b9:7a:e7:92:cd:4c:f5:68:e3:a6:a3:32:
26:20:e3:01:22:80:84:21:d6:5b:33:fd:ca:32:98:
55:d5:46:92:4b:74:0a:49:9c:b2:b3:76:ab:af:60:
ab:b6:1c:15:db:1d:a1:2a:ef:a3:32:ad:e4:d8:70:
6d:1f:f4:ed:b0:5f:f9:fe:15:fc:34:16:01:cb:c1:
ae:94:c6:8e:29:72:ec:2f:3b:7e:23:3c:90:a6:eb:
74:23:b5:1e:92:ba:ee:fc:2e:87:38:b6:cf:24:11:
56:6a:83:3c:83:62:b0:f7:18:7c:1f:0d:d7:4b:0a:
d1:25:a3:eb:ea:de:cd:fb:68:d7:45:b7:71:12:49:
00:eb:83:25:c1:75:af:07:14:4f:4b:91:59:88:c7:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:22:12:33:54:0C:3B:DC:AA:C9:F4:A0:03:1B:1B:F7:58:59:8D:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/9370632d-52a3-399b-ab0b-2c0193ef4ddd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.188.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:c6:b3:26:48:fa:0d:86:fb:91:d7:40:c9:11:60:48:1e:16:
da:64:0d:44:8d:85:e5:fd:3f:69:6a:75:c6:6a:47:91:2b:da:
a0:0d:19:22:95:72:f4:d5:5b:c3:65:d7:03:d1:9b:9b:4b:01:
b0:4e:e9:13:8e:0d:82:dc:28:96:39:78:5e:6b:33:2d:f6:32:
65:eb:35:b5:2a:dd:64:96:d8:e0:32:42:f1:78:e5:2f:fc:9d:
5d:80:52:db:10:9c:15:2d:63:73:bc:f1:7b:86:da:05:6a:80:
ac:6c:ac:fc:10:f7:23:10:19:ee:d0:53:2e:c2:35:21:36:26:
1e:9a:fc:5d:b9:29:a6:4e:3c:56:a1:09:c4:4d:82:75:93:43:
74:fc:ce:23:05:9d:29:f0:ca:4b:8d:41:9e:48:69:8b:15:2e:
44:d5:91:5f:e7:75:87:bf:a8:e3:a7:83:9a:e5:6d:dc:1e:c9:
09:d4:85:49:06:21:5b:40:42:07:f9:55:44:2e:51:cb:66:58:
34:95:44:f2:34:ca:64:b3:10:dd:b9:97:36:84:8f:5b:d9:ff:
61:81:45:50:29:4f:6b:8a:fa:a8:b9:bd:34:e1:03:ca:ae:6c:
c1:3a:92:b8:bc:f6:ba:e7:7c:6a:34:e3:e1:33:43:33:f3:51:
cf:f5:87:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:21:58 2025 by rpki-client