Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d73c8666-b3f9-3673-a827-bacb6630c255.roa
File: d73c8666-b3f9-3673-a827-bacb6630c255.roa (raw, json)
Hash identifier: y8HCerrAwpgMeQ5jo47rvxlJPH+GcZ5pVLbUYCQKfKY=
Subject key identifier: 0B:9E:F6:56:F5:2B:EE:0B:7E:21:69:A0:AD:FE:FD:BF:07:2C:78:D3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AA3EC8626698090A96680
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d73c8666-b3f9-3673-a827-bacb6630c255.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:a3:ec:86:26:69:80:90:a9:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=04df5537-a4bc-4199-9cf3-3beb7dc261e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:18:a9:bd:45:1b:0a:df:cc:f7:19:2e:8d:06:
6f:20:36:e2:9a:13:3b:74:97:4e:6b:cd:6f:af:9c:
d6:ff:87:dd:11:a6:20:fc:92:7c:73:d9:56:05:dd:
66:29:87:70:4f:3c:51:2e:ab:b3:0c:de:88:eb:7c:
27:ef:e7:d1:b9:1d:23:42:cf:76:35:41:49:b8:d6:
ae:d2:f0:33:e4:d6:a4:b4:e1:f4:d9:b1:4a:c3:68:
d1:0b:a6:0c:27:76:9b:5e:f4:8c:0b:71:5a:18:a9:
af:9b:ea:97:58:fe:42:c6:46:00:c8:5f:28:56:7c:
6e:bd:01:9e:e4:33:9b:71:9a:18:d0:cf:87:da:93:
b6:11:12:2d:4c:e9:32:0a:f0:96:54:48:7a:63:e1:
7f:cd:5f:17:9d:5d:b1:49:0d:2d:61:d3:da:85:ee:
ee:27:55:54:b4:90:27:6c:f9:64:d3:09:51:67:94:
b1:b8:36:95:25:f6:ed:f3:6a:6e:d7:a8:42:90:48:
c7:4d:70:ed:21:9b:79:56:a0:93:d4:b0:44:53:a8:
d9:96:e1:59:02:64:cc:07:43:43:92:ac:a9:9f:c4:
cd:8f:0c:43:97:dc:20:84:51:cb:f3:15:84:c2:f4:
09:ca:09:c8:13:85:48:5b:9a:ba:5c:e5:ec:9d:1b:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9E:F6:56:F5:2B:EE:0B:7E:21:69:A0:AD:FE:FD:BF:07:2C:78:D3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d73c8666-b3f9-3673-a827-bacb6630c255.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:fc:b0:7e:9d:f4:1b:f9:b8:6f:ac:b5:77:98:7f:17:17:ac:
a6:07:0e:2b:40:ab:6f:ed:22:29:9c:29:68:07:eb:2d:8c:11:
12:d4:70:10:05:c9:34:8f:23:2f:38:bd:22:04:da:4b:e0:64:
ca:56:5f:eb:7a:b2:e2:e2:7d:d6:5d:57:53:48:34:38:f8:6d:
6f:8b:e0:4c:ad:a3:bb:a2:10:7e:b7:0b:db:af:30:dc:fa:2f:
2a:14:7c:3e:17:42:48:17:7f:2d:50:ab:3a:d1:22:26:cd:8d:
a3:de:60:c5:32:9d:ce:49:70:eb:7d:ca:62:c7:12:2d:72:62:
24:f5:75:7a:4c:6d:46:ea:39:c9:80:a5:47:c9:b4:f9:1e:e5:
ff:0e:d7:84:71:d6:5f:05:13:84:55:76:d7:8a:9c:14:1b:a8:
c6:6e:51:52:6f:2b:c8:49:e5:f6:64:66:be:81:61:ef:f4:e7:
f5:e9:ae:c4:a9:d5:ba:bc:76:90:13:2a:fd:be:1d:14:c9:dd:
54:0b:72:25:71:00:93:cd:2e:a9:7c:ba:c1:0b:87:59:0e:f3:
e5:94:a9:31:2a:ce:38:d1:e4:64:3d:04:cd:64:5f:82:3e:68:
be:dd:c1:ce:c0:a8:d4:5d:63:a6:e3:43:31:dc:13:7c:8d:ce:
6e:a8:4d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:26:27 2025 by rpki-client