Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6fa0f-9f13-3da0-8662-5ea80f030e28.roa
File: d9a6fa0f-9f13-3da0-8662-5ea80f030e28.roa (raw, json)
Hash identifier: 6kpxy/0eWlVsTfayHMFqCKahM1Ffs5N5eAmWmyOjbPg=
Subject key identifier: 32:D0:21:22:3A:84:75:AD:07:84:8F:49:0B:0A:92:78:A3:CD:E3:49
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B672BDCAFF1B24FF5AFE0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6fa0f-9f13-3da0-8662-5ea80f030e28.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:67:2b:dc:af:f1:b2:4f:f5:af:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=badc70c7-1860-44b9-8da9-454e32e7cbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c7:fd:b3:fa:9c:80:12:ba:f5:ac:ea:c4:d5:
93:a4:65:8a:44:f7:70:62:b8:ee:4f:9a:66:66:be:
48:9c:f8:ff:47:a7:ab:2a:89:a3:e9:ca:cd:9a:ee:
dc:43:b3:8f:f7:d0:0b:88:0c:9e:9b:14:71:58:ed:
d1:f3:ff:8c:8c:47:19:b6:f9:46:1f:44:2c:08:3c:
cd:df:9a:bb:70:08:56:94:89:20:28:02:52:aa:02:
71:3a:4a:18:80:cb:f9:bd:4c:49:73:42:61:6e:6d:
16:0e:f3:18:7b:1e:b1:ff:08:fa:bc:43:44:ae:b7:
25:96:be:eb:0b:1b:d2:c9:11:53:76:d0:28:6b:d8:
f0:8d:b1:3e:5d:19:2b:3d:66:59:1c:8f:d0:9b:0b:
b7:58:b3:60:d9:41:ac:6a:42:f0:64:4b:47:30:d1:
4b:a3:6b:7b:79:9c:3d:71:7f:eb:8d:a8:6d:5c:46:
da:e0:c0:8d:a5:a6:e6:7f:a0:b2:b9:9e:61:56:14:
51:05:7a:a3:84:77:4b:dd:b3:37:da:49:2f:a6:68:
05:a7:96:d4:77:3e:cc:ef:23:86:07:64:e3:ef:46:
e1:16:f8:99:1b:cb:99:24:b3:61:25:bb:6a:12:f3:
c2:76:03:18:75:ac:53:c3:e5:2f:c9:5b:01:e0:00:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:21:22:3A:84:75:AD:07:84:8F:49:0B:0A:92:78:A3:CD:E3:49
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d9a6fa0f-9f13-3da0-8662-5ea80f030e28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:b1:90:84:29:e5:a3:74:e3:d6:05:f5:d9:51:4a:12:fd:c7:
05:9d:90:28:c2:c6:ac:e7:35:19:0a:c6:cf:77:b0:1a:1e:fa:
fd:dc:b1:11:64:8b:ec:9d:e1:ff:04:4a:78:f4:83:c0:41:7a:
1b:f5:04:df:af:04:3b:c4:c7:ba:80:54:9a:63:e2:8c:5d:b7:
c4:29:06:8d:ed:00:bb:1e:02:61:88:0e:5a:d4:b7:2c:8d:1b:
d5:16:37:52:ed:d9:83:ea:b6:cb:b0:bc:dc:11:b9:da:8b:73:
7c:87:73:56:2b:0b:81:a3:89:d8:6b:aa:22:49:68:ab:19:58:
54:0d:f0:22:06:eb:e4:db:7e:85:0a:01:e3:09:a7:a2:1d:e7:
70:81:c6:e3:45:a8:b7:71:6a:69:46:96:68:55:b6:8f:b1:ab:
be:82:28:c6:10:a4:be:cd:45:c5:0e:8b:0c:dd:9c:c9:b5:a9:
2a:30:4e:4c:42:00:35:47:9f:76:0a:d6:c3:da:ce:a2:48:d8:
33:a2:03:de:53:34:e7:da:dd:03:58:17:2f:8f:3b:c5:c7:fc:
da:5a:5e:00:fc:c1:51:8e:e1:cd:e9:6f:38:08:ad:61:f8:81:
3c:97:9e:10:77:1a:84:a8:b5:af:8c:8a:ac:a8:23:f1:b5:e6:
fa:91:3c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:09:04 2025 by rpki-client