Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa
File: c381b149-36a4-3861-b92b-1f345c601274.roa (raw, json)
Hash identifier: 43jKtwgLrTO8IS1n+j3Pho9u3O9lN7JXtQDIlacUdQU=
Subject key identifier: 3B:8B:D7:FF:6D:06:FA:25:F2:DA:36:02:81:BD:82:1E:54:91:5E:5F
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6159D8ADC57FAECDFDC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:61:59:d8:ad:c5:7f:ae:cd:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=49ab94b1-fb70-4cd2-ad49-31fc71b7d9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:23:aa:3f:bd:7e:cb:cf:c4:1f:49:80:8a:6e:
15:a4:fc:00:1b:c3:23:33:c9:ca:a7:ab:cc:95:11:
4b:b1:a2:48:28:ad:ba:57:31:19:05:8a:de:29:e0:
47:43:0c:66:47:e1:27:d8:ad:fe:af:fa:37:fa:98:
95:b1:9c:f3:20:59:15:65:f0:85:78:d2:43:e4:88:
03:3f:ae:14:2b:68:8b:81:11:16:40:8a:bb:c9:fc:
77:73:ec:61:50:83:4d:49:a4:d9:01:bc:47:13:4d:
87:aa:78:d8:a7:3e:59:12:27:c3:c6:39:bf:53:9f:
75:b6:01:d6:b7:3c:e7:d5:7f:b8:f8:f2:b4:df:e0:
b1:52:a6:12:89:50:53:b2:62:15:be:bb:b6:26:e7:
ef:64:6e:0b:a2:02:6e:12:59:c1:52:5c:3b:a2:ab:
3d:26:aa:28:b4:d0:f6:67:a8:67:36:8d:56:0e:a9:
9e:7d:4c:ea:0f:83:d7:95:9d:94:39:2b:9e:1f:90:
01:90:ea:23:cd:1e:4b:1d:9f:5b:7a:60:66:2e:7d:
f1:b7:4d:d7:7c:14:f4:42:c0:27:63:f8:21:cd:ed:
b3:04:f8:46:0a:14:a0:ac:ca:48:6f:45:ef:ea:93:
df:fb:79:14:6c:c9:c7:0d:cf:cb:e8:90:ef:99:92:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8B:D7:FF:6D:06:FA:25:F2:DA:36:02:81:BD:82:1E:54:91:5E:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c381b149-36a4-3861-b92b-1f345c601274.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.101.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:c7:1f:5a:9c:a3:57:d5:e3:f3:a6:03:db:91:71:35:b9:47:
c0:09:60:05:26:7d:43:b6:1f:2b:5e:ce:b3:bb:2c:d0:d5:06:
f4:30:49:7d:ee:84:74:d4:f8:81:85:d7:1b:09:98:d6:eb:60:
9e:dd:65:df:20:08:6e:31:8f:aa:88:81:f6:1e:07:60:7d:c5:
d4:d8:93:f0:86:4e:89:c6:e8:5c:07:00:2c:8a:ff:19:fb:ea:
b5:42:12:8d:d5:2c:14:ea:de:aa:2a:cd:ef:43:ae:5a:cc:48:
36:43:fa:c2:ed:ae:9b:a1:68:b3:88:f1:ac:73:5f:2a:e9:cf:
85:8e:dc:74:f5:6e:b3:66:3e:2a:7e:bc:fb:28:db:ad:2c:9a:
12:c0:11:fa:c4:b1:05:a6:b4:00:67:b2:33:59:fe:2e:9d:28:
2c:09:09:d9:15:fa:be:69:99:4e:39:e7:7e:39:87:76:0c:db:
45:0b:14:c1:cf:9c:74:32:9b:4d:08:19:0d:e7:db:a5:60:a7:
8e:d0:7a:4f:5f:93:a3:b9:38:05:4a:bf:e1:49:e3:69:cb:f2:
8d:11:e6:c9:b2:01:5b:f0:02:c5:9e:57:c3:8a:68:b6:d0:ce:
a1:d7:47:e8:97:f7:a7:5a:f5:33:43:da:ad:fd:9d:44:4c:a7:
37:4e:98:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:40:24 2025 by rpki-client