Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa
File: bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa (raw, json)
Hash identifier: 2HWTcgeRGvwgAdbUnojSi7CuEVurfdW41BWCaSJXjrU=
Subject key identifier: 8E:20:FD:F6:44:46:EA:D8:5C:81:A8:52:B2:09:BF:CC:53:5C:9A:30
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6912608C2D1361568880
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:69:12:60:8c:2d:13:61:56:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=ceddfe12-04d2-4a10-b45b-a58f4d5cd3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:09:53:d8:05:55:fe:da:03:c1:79:80:4f:67:
cd:86:6d:ae:ad:7c:4f:11:19:b6:a8:99:9f:8b:e8:
f7:b7:54:47:cf:bb:d4:be:b3:1c:d0:a0:be:c3:4e:
b3:ca:8c:4d:00:e4:39:15:18:0c:eb:95:45:b6:3d:
0f:42:1b:03:a7:8f:54:12:6d:41:00:48:56:30:e0:
40:d1:9e:32:28:f5:54:44:10:fc:4d:d6:6e:80:52:
47:7f:ed:a5:f5:d1:6b:68:9a:df:4b:d0:33:68:38:
c5:bb:5a:a4:c3:ee:30:a8:bd:04:21:85:2e:5f:2e:
47:7d:92:a6:a3:08:af:de:3f:16:6a:2d:be:1f:7f:
34:06:fa:cc:e0:15:6e:b0:c0:5b:34:bb:02:3b:e3:
48:6d:03:75:f1:d2:c5:66:89:66:57:d5:c5:12:36:
3e:de:2c:12:62:9c:60:61:25:ac:27:d8:2d:c8:29:
ea:c5:82:29:11:5c:98:d1:c6:af:30:54:3f:65:ca:
f1:89:50:96:82:41:35:59:33:8d:c9:dd:dc:cb:72:
23:61:4b:b5:12:72:14:32:88:bc:93:0b:bc:75:7c:
3f:be:d6:4d:b8:90:0c:4d:2e:35:eb:b7:ea:3f:84:
cf:a9:1d:54:11:0a:cd:20:c1:05:32:80:92:55:ef:
4a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:20:FD:F6:44:46:EA:D8:5C:81:A8:52:B2:09:BF:CC:53:5C:9A:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/bcbf0a42-b005-3d9f-b46c-f6c32cb446c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.114.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:21:0b:1d:91:e8:ba:31:f5:58:ab:40:38:7e:83:35:d3:93:
60:d3:6b:0a:5a:5c:4e:5f:20:ae:bb:65:f8:4e:9d:b0:3a:70:
b6:35:07:a8:ce:28:08:90:84:30:09:14:1a:9e:56:27:7f:de:
be:cc:bf:de:6d:69:1e:65:26:9a:ea:b4:1a:bf:69:71:2a:b7:
bf:6c:13:58:66:bd:14:4b:25:97:a6:60:17:6f:c4:a4:d1:13:
a0:ae:14:55:ee:3b:9f:e9:61:14:ca:c6:6d:a6:7e:7e:a1:29:
45:d0:9a:fc:89:58:3e:55:02:fb:60:91:83:eb:91:e8:c8:5c:
49:b9:95:82:dd:4c:e1:9a:7f:59:26:92:9f:d9:3a:15:ba:f2:
78:4b:9e:55:dd:e8:99:8a:ed:88:53:e7:08:fa:b4:ab:a4:6c:
8f:1c:e6:2d:cb:a6:02:01:ce:a1:70:41:da:65:0a:2c:54:00:
d7:d4:a8:65:22:ff:ec:0b:fa:27:fa:0d:b6:79:4f:c2:56:c7:
c6:86:88:9e:fb:dd:78:09:19:60:05:16:81:de:3b:46:5e:6e:
8e:f9:cd:f2:b6:6a:cc:ab:94:5f:6e:8d:62:57:4e:4a:06:d8:
0b:a4:61:d3:ca:a9:71:97:59:6b:a2:07:3e:fe:50:a3:fb:cb:
8e:56:03:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEf/SmkSYIwtE2FWiIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI0MTEyNTE0MDAzOVoXDTI1MDIyMzE0MDAzOVowLzEtMCsGA1UEAxMk
Y2VkZGZlMTItMDRkMi00YTEwLWI0NWItYTU4ZjRkNWNkM2I3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQlT2AVV/toDwXmAT2fNhm2urXxPERm2qJmf
i+j3t1RHz7vUvrMc0KC+w06zyoxNAOQ5FRgM65VFtj0PQhsDp49UEm1BAEhWMOBA
0Z4yKPVURBD8TdZugFJHf+2l9dFraJrfS9AzaDjFu1qkw+4wqL0EIYUuXy5HfZKm
owiv3j8Wai2+H380BvrM4BVusMBbNLsCO+NIbQN18dLFZolmV9XFEjY+3iwSYpxg
YSWsJ9gtyCnqxYIpEVyY0cavMFQ/ZcrxiVCWgkE1WTONyd3cy3IjYUu1EnIUMoi8
kwu8dXw/vtZNuJAMTS4167fqP4TPqR1UEQrNIMEFMoCSVe9KeQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4g/fZERurYXIGoUrIJv8xTXJowMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvYmNiZjBhNDItYjAwNS0z
ZDlmLWI0NmMtZjZjMzJjYjQ0NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvtyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADchCx2R6Lox9VirQDh+gzXTk2DTawpaXE5fIK67ZfhOnbA6cLY1B6jO
KAiQhDAJFBqeVid/3r7Mv95taR5lJprqtBq/aXEqt79sE1hmvRRLJZemYBdvxKTR
E6CuFFXuO5/pYRTKxm2mfn6hKUXQmvyJWD5VAvtgkYPrkejIXEm5lYLdTOGaf1km
kp/ZOhW68nhLnlXd6JmK7YhT5wj6tKukbI8c5i3LpgIBzqFwQdplCixUANfUqGUi
/+wL+if6DbZ5T8JWx8aGiJ773XgJGWAFFoHeO0Zebo75zfK2asyrlF9ujWJXTkoG
2AukYdPKqXGXWWuiBz7+UKP7y45WA3U=
-----END CERTIFICATE-----
Generated at Fri May 9 19:05:55 2025 by rpki-client