Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa
File: 967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa (raw, json)
Hash identifier: xSC3MV05jcvUJuZjLaYtUCxe6x/ltxw2CdUTF9L9T+U=
Subject key identifier: 31:07:E3:01:DC:48:79:51:C4:C5:EA:56:E9:50:73:44:28:49:83:28
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A71A80E9CD03F23248580
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:71:a8:0e:9c:d0:3f:23:24:85:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=acad3c07-3e55-47a1-a99c-86b465311072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:66:d8:32:fc:8e:cf:59:28:ce:99:45:3e:4d:
b8:7b:c1:0b:ca:0b:59:03:9e:19:0d:5f:2d:6b:2d:
f1:f3:a9:5d:87:34:26:2c:fa:35:00:99:00:3d:3c:
d3:55:36:a2:30:b4:c5:5c:89:4b:de:6a:e7:f2:88:
ed:5b:8a:4a:4d:dd:bf:f6:13:24:22:ed:7b:36:97:
c9:61:62:4a:70:2a:2d:71:aa:5d:ff:f8:88:c5:ac:
65:ee:a0:e8:8c:dc:f2:d5:b8:d0:ca:ce:71:2d:a4:
38:e2:7e:ec:d2:e5:86:ec:15:ac:dc:b6:87:50:3e:
6c:61:58:3a:69:6e:ec:68:e3:36:8e:3f:91:8d:d3:
20:64:6d:56:c8:17:15:b0:c8:c3:a9:cc:5c:46:19:
82:23:b6:8e:17:52:57:7d:96:41:86:49:72:d2:60:
25:29:ff:c9:7d:f4:d8:be:bd:96:7e:bc:99:ec:0f:
da:f4:99:d7:a5:79:76:67:ee:d9:1e:16:84:14:df:
c3:ba:fc:a7:1e:44:27:c4:8d:3c:59:92:70:cb:d2:
4d:2d:56:db:2d:dc:88:35:02:a6:b3:b3:8b:d8:3f:
a5:4d:7a:e5:15:aa:bd:31:e9:23:b2:0d:69:96:1c:
a2:1c:90:14:da:63:60:f5:39:d8:22:a8:75:2a:eb:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:07:E3:01:DC:48:79:51:C4:C5:EA:56:E9:50:73:44:28:49:83:28
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/967e992c-36f5-32d5-ae5a-82a52b9f6b7d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.3.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:65:d4:06:6b:57:de:d0:25:90:e5:a4:b3:ef:33:b6:1c:9e:
df:ff:98:34:ca:ec:3c:ac:99:31:af:ac:4e:e6:44:2c:15:04:
e6:45:2c:8c:cb:34:37:0f:8e:fb:00:e6:e9:5c:9f:94:4d:55:
f0:3e:05:81:5b:ac:27:67:54:ff:87:d8:37:88:9d:00:03:cb:
b7:9c:ee:01:70:17:eb:b2:a5:e2:68:be:b3:39:9f:f5:7e:ce:
a8:bd:44:14:ba:27:2c:58:c8:30:7a:9a:19:71:f0:4a:92:69:
0c:a7:0d:ac:7a:d7:1d:a2:d2:5c:3c:a8:29:96:57:71:6b:e1:
61:bb:e8:3f:11:64:a7:de:6f:91:7f:84:09:ff:11:42:9e:b0:
b6:2a:5a:d8:8c:de:91:21:d7:ab:95:b4:42:61:66:be:57:21:
01:7e:ce:fa:bb:f6:d8:bf:d8:bc:02:12:24:85:67:3b:7f:93:
6d:c2:13:13:d8:b3:d8:9b:1b:47:05:4a:99:84:9e:37:11:07:
17:1b:14:3e:4d:e8:8d:0a:5d:56:df:2b:c9:8d:41:8d:1e:49:
63:f3:be:8a:3f:2c:2f:ed:68:d3:f7:38:90:72:77:c6:cd:8b:
f9:ed:b3:9e:5a:58:39:99:23:8b:a9:44:d7:6d:81:0f:82:2b:
5b:45:c2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:32:32 2025 by rpki-client