Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa
File: a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa (raw, json)
Hash identifier: /+YSL2hZHAcRrSRecNH6541aag5E5IgFLN/jAZuYII4=
Subject key identifier: 9E:DF:D3:5B:1A:A3:A0:80:97:E8:B1:5A:95:1A:7F:BD:F0:B1:47:49
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6E44B1BD7F8070904080
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6e:44:b1:bd:7f:80:70:90:40:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=61cf0d7f-4954-4bf4-b2ec-011b2860b9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:5c:bc:5b:6e:f2:76:be:ed:36:75:76:d8:
c5:09:ec:48:99:3d:7a:44:ce:f7:f2:62:45:e4:fb:
42:28:92:1b:eb:11:a4:2a:d1:76:9d:8a:ce:b3:ae:
0b:5c:04:84:44:b7:47:57:79:32:13:03:a9:be:44:
80:e3:12:75:a1:d0:28:87:0c:ea:03:eb:e6:fc:03:
4c:1e:c4:b6:3e:b5:09:3a:72:5a:56:ab:b2:2d:2d:
f4:fd:ef:32:a8:cb:db:84:0f:c7:a5:4d:c7:23:fd:
49:2e:1b:0e:63:0f:c9:4b:bc:6b:86:d1:97:7d:3f:
2b:46:71:85:89:76:6c:64:d5:f2:2c:3a:f0:37:57:
8a:e9:6b:07:b0:e7:e6:31:c2:f1:64:af:ae:10:d2:
cb:ad:1d:b2:16:34:de:54:cd:63:59:fb:9c:3f:0a:
55:57:7e:bf:01:e6:f7:c4:c7:09:66:c0:43:30:85:
6b:5e:ab:79:55:7b:94:ec:17:f7:dd:72:3f:2c:98:
b6:4b:ee:12:16:f8:7b:fd:7d:fd:79:ba:b6:f0:b8:
6b:c4:46:3b:95:ea:48:ca:92:67:62:aa:c4:ea:a5:
c6:b4:49:93:72:9f:db:e8:09:e9:5f:39:cc:4d:ed:
62:b9:1f:0f:ce:17:41:a6:37:2d:33:08:c7:35:14:
64:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DF:D3:5B:1A:A3:A0:80:97:E8:B1:5A:95:1A:7F:BD:F0:B1:47:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/a5823a16-a0c9-3d79-bac0-530099bb5a1e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
53:38:28:b7:f4:c6:1f:20:0d:29:e6:48:b1:bd:89:1c:89:8c:
3c:af:37:e3:d5:e4:90:43:61:c4:37:8f:30:2d:48:57:d9:1e:
c1:94:18:81:6d:bb:86:65:2a:83:48:b8:72:9a:23:dc:8a:1b:
1c:f8:38:61:ff:68:c2:5a:20:8b:79:7e:f0:53:4f:ff:6d:63:
3f:b9:63:47:81:54:0c:7d:cd:9b:a7:27:70:00:e0:72:f7:89:
5c:d2:a6:0d:b6:2b:9a:52:43:b3:77:7e:af:29:8e:5b:c8:a6:
79:73:ce:59:ff:e5:d6:89:e0:c7:3b:cd:3e:a2:32:5b:f2:f7:
99:27:68:1b:6a:8e:54:2d:ae:44:78:e7:f8:0a:1b:8b:d3:f3:
c6:80:54:d3:ab:c8:88:01:6f:b6:6c:15:2b:56:4e:77:11:7f:
e4:40:6b:cb:da:50:53:35:6d:33:d5:f1:2a:15:48:86:16:21:
f8:49:4a:df:16:e5:7a:b1:02:30:a4:46:74:e8:46:3e:49:a9:
b5:87:5a:17:65:05:56:49:07:90:eb:09:b7:bf:8b:f6:30:8d:
8c:a8:c5:f7:f4:ca:d4:69:a4:ed:f2:07:42:58:39:c0:8c:45:
53:1b:9d:84:18:53:b4:13:3d:56:26:2c:e2:b0:bf:e9:02:b6:
64:9a:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:51:36 2025 by rpki-client