Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa
File: df76bf95-5cc2-3e42-9028-4902a21538ad.roa (raw, json)
Hash identifier: Pd9IWfPv0rJpuI8NVp9ZhGOJBCpaunJv4ceTxSlrWMI=
Subject key identifier: 4D:56:13:00:DD:72:36:6E:41:A8:82:C5:49:7C:04:54:D7:5E:60:E6
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB498800A7750176DB200
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.120.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b4:98:80:0a:77:50:17:6d:b2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=c90020bb-558d-4dd6-8016-a466694fd396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:53:c9:76:2f:17:37:86:66:03:91:1d:a4:
9a:ea:0b:36:6b:db:33:ef:07:e1:f3:b4:f7:ea:2d:
39:c3:f3:47:9c:91:85:a3:87:2a:01:9c:4f:45:37:
43:62:80:94:4c:be:41:79:03:65:f8:ef:1a:32:d3:
b5:be:1b:3c:d6:d0:86:ab:f7:2c:af:41:ff:ec:3d:
8b:e2:47:3d:87:2f:8a:24:bd:44:47:d3:b3:0d:e0:
de:0d:b3:1e:f0:89:19:93:3f:25:48:cd:65:8a:97:
47:c0:f1:c9:4d:22:d7:b0:fc:43:f9:c8:36:74:0b:
4f:97:16:e8:bd:64:b5:e0:70:56:50:10:cf:3c:e4:
8a:e3:7f:70:a4:9b:cc:37:22:75:6c:9c:55:17:67:
8a:93:60:15:b8:a4:a7:65:0a:1c:2a:27:55:28:08:
d2:40:49:c6:bc:03:db:cd:78:2d:fe:9c:13:6f:5a:
a4:37:9a:1f:35:35:d2:69:15:62:a8:4d:66:1f:45:
4a:74:36:fc:22:fb:b1:ac:cb:0c:98:f8:e2:13:a0:
02:48:0f:a6:9f:22:34:41:e1:35:2c:0a:6c:5c:b7:
54:1b:00:1d:5e:df:9a:65:12:39:c6:f2:3b:f0:19:
8a:93:db:0e:20:17:d3:d0:f7:55:c2:0d:d6:5a:68:
8b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:56:13:00:DD:72:36:6E:41:A8:82:C5:49:7C:04:54:D7:5E:60:E6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/df76bf95-5cc2-3e42-9028-4902a21538ad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.120.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:a7:20:28:e0:eb:f7:f9:37:c3:ee:c9:73:2d:4d:cc:7c:8d:
89:5d:e1:23:fd:d3:ac:02:04:2d:72:9c:a4:63:be:3b:3c:d0:
53:5a:f9:9f:7f:54:b0:06:a4:88:73:52:e0:02:72:cf:9a:8f:
63:e3:98:70:d2:a6:22:47:e8:85:f9:cf:4e:e6:72:b1:7c:e9:
b3:24:74:3b:42:44:77:97:2c:8e:3d:6d:03:f6:ed:dd:78:98:
d8:1b:94:ab:34:86:aa:13:8c:43:10:64:83:c7:9c:2d:7b:c8:
ab:26:d0:7b:dd:41:fd:a5:b3:eb:d0:0b:17:f1:fe:7f:5c:92:
67:0b:c0:35:b9:6e:cb:99:e5:60:2f:91:a1:57:a7:f5:92:84:
7e:4a:85:3e:5a:da:e0:9c:b7:49:50:7d:cf:82:63:bc:00:fa:
ba:d5:fc:9a:ed:47:09:77:e6:c0:cb:a8:a6:df:61:0f:6b:96:
96:e7:d8:bc:9c:51:73:8a:ea:64:5e:9e:15:63:eb:e6:85:97:
79:05:d2:3a:3f:0f:7c:ed:6e:33:02:18:c7:71:cc:10:ba:1d:
28:26:72:49:08:99:0d:d5:2d:13:98:b7:40:f8:8e:03:41:9a:
41:56:6c:38:7d:32:23:39:90:4a:d9:5c:62:0d:d9:95:a9:7a:
54:67:95:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:37:19 2025 by rpki-client