Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa
File: db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa (raw, json)
Hash identifier: 2F9zS6t8y8RI6ZyVzDDuQBabExmQjMdsfIMaJv8llTM=
Subject key identifier: B9:D8:9C:16:46:28:C5:2B:E9:56:81:85:8F:43:F6:3A:18:2B:23:DA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847FF4A53DB960C9E4C74D4C540
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa
Signing time: Mon 25 Nov 2024 14:00:39 +0000
ROA not before: Mon 25 Nov 2024 14:00:39 +0000
ROA not after: Sun 23 Feb 2025 14:00:39 +0000
asID: 15169
IP address blocks: 142.251.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:ff:4a:53:db:96:0c:9e:4c:74:d4:c5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 25 14:00:39 2024 GMT
Not After : Feb 23 14:00:39 2025 GMT
Subject: CN=98e073bb-015d-4396-9d5d-6bd539cc9403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6c:d5:24:e1:f2:58:33:0f:e2:df:64:ba:23:
9c:3a:cc:15:3a:a3:7b:c1:99:e4:cd:5e:d2:63:04:
6e:a4:e9:1d:64:1c:9f:d2:7c:ee:46:0f:7c:ba:f8:
d8:f2:9a:6d:94:46:90:fc:ea:12:2d:7c:14:da:9d:
3b:d0:02:17:96:ff:6d:f8:7f:93:10:5d:60:83:81:
64:d7:b6:98:ae:87:8f:92:d9:ae:d6:16:51:75:6c:
ae:50:f7:18:8e:54:54:27:4c:7b:e1:70:b8:6b:dd:
11:81:67:ce:03:90:80:70:88:3a:16:17:55:6f:2a:
8c:bf:3a:54:22:e3:f0:2b:ab:c4:a9:a7:35:0b:3d:
19:e3:55:31:82:54:29:5b:dd:c6:a5:c1:ae:a2:42:
f7:3c:e9:78:f5:a4:a0:a4:f1:50:cf:de:42:ab:cf:
c3:fb:f6:4a:08:77:cd:49:61:37:3a:5d:ec:c1:d4:
ed:40:fa:26:17:a0:57:7a:48:3e:ab:11:35:b4:22:
85:68:22:44:c0:db:9c:bb:5c:54:93:49:51:16:96:
f7:f3:41:94:79:6d:24:60:03:98:41:b1:08:a6:c2:
1c:c2:be:8c:16:3c:78:a5:72:df:40:d3:be:bb:97:
77:ae:98:12:23:43:74:50:93:5b:a9:a1:53:f2:6c:
df:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D8:9C:16:46:28:C5:2B:E9:56:81:85:8F:43:F6:3A:18:2B:23:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/db4b3d57-ee5a-3b89-a956-ff4aa0ca25c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:f6:5a:5e:56:af:55:f8:5f:31:9d:67:8d:3a:b8:df:fe:98:
ab:62:da:be:56:a2:e1:7e:c9:7e:e9:a2:27:c3:59:b8:25:cb:
86:ce:bc:55:da:f0:23:80:9e:b0:9c:24:b1:7d:60:39:d0:b4:
39:1c:70:11:a6:67:6f:bf:aa:1b:5d:0e:cf:76:d3:98:8c:f7:
b4:0a:7c:e9:e7:40:ed:df:cc:e3:5f:ea:38:31:dd:e1:a2:cf:
0a:3a:60:ec:0f:b7:9d:e7:15:1c:fb:ef:6e:cf:01:f0:ba:fd:
fc:cc:36:b3:df:4b:14:a1:5a:e3:63:aa:e2:16:01:6c:ba:a2:
cc:51:cf:2a:cf:f5:0f:65:96:1e:cb:5c:72:55:43:c9:f4:b4:
af:bb:07:89:10:a0:ca:2d:98:ac:f8:64:37:2e:9e:f7:b2:86:
20:44:d6:48:9c:cb:22:3a:d7:9e:12:94:df:d6:b6:5f:c6:2e:
a8:ec:4e:5a:58:a4:25:b3:26:99:09:9d:4a:8a:8a:a0:07:7f:
ed:33:74:08:99:81:73:7b:d8:92:5c:77:13:f0:90:d1:69:24:
a9:f1:b6:59:9b:a1:af:ed:d5:03:64:e5:b0:83:36:28:4c:a0:
79:38:15:98:1f:74:a5:b4:9a:c4:3e:29:68:ce:7c:19:9a:d5:
b2:29:33:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:01:04 2025 by rpki-client