Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa
File: ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa (raw, json)
Hash identifier: KWV8PzW05IX+pRhD493cViziKQLu+FEGZqJqr7jZWWI=
Subject key identifier: 64:21:68:09:80:32:C9:0A:1F:26:E1:05:6C:52:A3:93:87:DC:3D:46
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B4A3A6F95D2EAB9436B40
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:4a:3a:6f:95:d2:ea:b9:43:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=8c9957f2-dd1f-437d-89b8-e7010731bc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ac:be:e2:49:c4:7c:09:ad:76:81:db:40:e8:
91:66:cf:dd:4d:02:6e:d6:ef:05:f5:34:d9:bf:28:
0e:7d:f3:86:b1:4f:b2:c9:c8:9f:1e:d7:f7:9b:c4:
69:58:ce:e4:b2:e4:22:5a:63:99:71:19:a5:75:4f:
19:33:34:da:34:6c:28:e9:1e:ae:46:51:ec:4b:23:
47:dc:b2:63:97:b2:a0:eb:da:9b:90:d7:e4:19:4b:
81:18:0d:2c:33:46:67:06:67:89:0d:13:80:92:81:
2f:88:fc:02:2e:1e:23:2b:b8:75:89:b4:52:c7:fe:
11:66:b3:25:c8:10:cf:59:b2:54:d2:cd:39:ba:e6:
de:1f:ed:80:3f:6d:f0:d6:57:26:62:78:cc:08:e0:
7e:fc:e8:10:fe:f6:1b:70:7b:e6:71:c6:94:cb:73:
f6:a4:38:17:b5:8d:b5:6f:34:1b:50:f0:6b:b3:1f:
4e:4d:dd:f4:1a:f3:0c:8a:8b:5b:2e:be:26:16:d1:
d8:64:a3:71:e6:46:80:23:a1:cd:a3:cc:42:fb:d2:
c3:91:5f:0e:9b:5f:e1:3e:20:ca:d5:20:6e:6e:25:
53:13:de:6d:5f:18:d4:4f:5a:35:71:7a:6a:a3:32:
6d:9b:e2:6d:9e:59:92:a6:f8:40:1e:b6:ed:f1:22:
20:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:21:68:09:80:32:C9:0A:1F:26:E1:05:6C:52:A3:93:87:DC:3D:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ce48287f-e5aa-343a-ad9d-8445a8f647e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:69:1e:4e:3c:7a:bf:da:f7:67:71:1e:f4:2a:8c:73:70:10:
a5:67:67:f5:07:d6:0b:ce:5b:3b:3e:68:90:5b:77:9a:a3:d0:
84:26:89:9f:e5:a7:f7:0b:6a:d8:58:81:ea:c0:17:ce:c5:b1:
14:09:64:8e:83:6a:a5:2e:1d:66:ec:26:94:d3:c5:16:c9:b6:
a9:60:00:76:85:e6:99:d2:43:93:b7:80:87:97:da:c6:2a:90:
87:44:de:36:9e:3f:d8:1b:9a:2f:7e:89:ba:df:7e:05:f7:8e:
f7:2f:ec:96:0b:a1:27:0c:d7:3b:f2:95:3e:15:9d:19:cf:b0:
df:54:36:1d:8a:f5:90:68:91:98:dd:e5:16:03:d6:1f:99:98:
b7:e9:32:a6:6c:35:f7:75:83:84:1e:cc:a3:2e:88:f4:71:89:
53:fa:38:0f:d7:b9:7b:52:19:1c:5a:41:37:da:3e:ed:22:ea:
3a:42:f8:15:88:9d:00:32:65:37:32:9d:f8:6e:3f:8e:89:76:
65:14:5a:e8:5f:73:47:95:91:10:51:98:36:33:35:ed:45:1f:
30:36:7a:ab:49:94:63:2c:53:c8:8e:12:f2:62:0a:f1:9b:1d:
9f:85:6a:98:c6:6a:60:8c:60:e3:fe:5a:73:d6:04:b0:b7:aa:
0b:3d:96:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:36:40 2025 by rpki-client