Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc6d7584-bb03-378a-9a89-4654f9814f79.roa
File: cc6d7584-bb03-378a-9a89-4654f9814f79.roa (raw, json)
Hash identifier: na0nL5V5OYNuZgZl6nmeO1yKYfvOtMa0tZHKha1a37E=
Subject key identifier: C2:05:FA:7E:1C:AC:1F:97:A6:DF:E5:F9:C1:7E:69:52:40:03:25:19
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A6A65304EA6ECF2224380
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc6d7584-bb03-378a-9a89-4654f9814f79.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:6a:65:30:4e:a6:ec:f2:22:43:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=e1fd51a5-e14d-4bae-b441-581368facefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:64:f9:06:8c:11:f3:82:8b:91:9e:37:48:
3a:2d:39:23:50:4a:89:8a:4a:1b:62:3e:28:d6:b6:
07:1d:92:8b:b3:c2:57:b9:c0:20:d0:f9:3c:41:85:
49:c8:e6:ad:7d:d1:70:b5:19:88:7a:7f:6f:bb:eb:
c4:9d:6d:e8:d2:59:84:b5:cc:cc:84:fe:29:02:50:
c4:10:c8:9e:fb:52:2a:1b:a8:2d:f7:bb:5f:5a:c9:
f4:63:85:c7:47:4b:2b:ee:83:a1:3c:26:f0:1f:2d:
15:6b:dc:24:87:89:c7:8b:0d:21:d5:dc:db:a2:28:
dd:50:a7:ed:e1:23:05:a5:c4:51:de:40:b4:61:d5:
96:89:c5:6a:5e:37:93:91:d2:7b:ac:e6:6b:9a:9c:
2b:9a:ee:3f:f5:ac:db:66:c3:e4:c4:c4:15:b5:29:
aa:88:a7:80:e7:8c:ff:67:b8:97:66:d7:c7:fa:76:
e9:7a:5e:9e:ca:0b:35:d1:f9:21:27:dc:96:2b:cd:
24:93:38:cd:78:d1:4b:44:cb:19:83:15:e1:bb:fb:
fd:d9:53:05:02:29:7b:4a:5a:18:7e:14:ea:2c:a8:
60:98:3d:03:8a:8a:ef:10:97:9c:12:2c:c3:fc:ef:
19:ec:d2:1d:10:80:21:2c:4f:27:65:f5:f4:3f:32:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:05:FA:7E:1C:AC:1F:97:A6:DF:E5:F9:C1:7E:69:52:40:03:25:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/cc6d7584-bb03-378a-9a89-4654f9814f79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.113.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:b4:d1:63:82:a5:cc:d6:b9:d0:cd:28:be:aa:fe:80:9f:72:
db:10:ae:db:e8:cc:ad:ff:cc:98:fd:84:4e:2a:89:47:31:80:
69:74:89:6b:47:2f:e0:a2:66:32:1e:79:9f:d4:16:49:96:bf:
98:04:57:71:d7:1c:93:61:37:b1:8e:cf:f9:c4:83:39:d3:af:
cd:27:c6:44:8c:75:9e:50:78:5a:48:16:b7:d7:e5:e6:13:a5:
ec:e2:87:f2:59:a5:84:61:3b:70:c4:35:dd:7a:ba:d9:f3:b8:
ef:78:3e:46:f1:00:d3:64:35:f0:8e:c1:e3:93:84:bd:23:3f:
c8:83:e3:1b:45:87:3e:2f:cc:31:f0:e7:f8:ff:09:57:df:5a:
27:de:29:ab:86:35:99:12:73:a1:92:bc:30:51:a3:4d:50:4e:
0f:bf:47:c6:53:6d:f4:3f:5c:03:ad:64:25:e1:61:be:9e:b3:
b5:20:4d:0b:ee:9b:cb:b7:0b:30:00:81:72:f4:26:56:fa:cb:
38:73:3d:7b:c5:b7:f9:c3:77:27:4d:73:4f:1a:23:52:18:b0:
a5:b3:90:dc:5b:b3:3e:f7:58:65:9d:55:f0:e3:0c:10:44:37:
c1:43:55:9f:76:54:f2:94:17:36:ea:1f:e6:2d:f6:fb:88:fa:
0e:06:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:48:52 2025 by rpki-client