Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa
File: e1a72dfb-1439-3141-a432-e977c9893c8e.roa (raw, json)
Hash identifier: x0XYYeJsm7kqyjwa4wmX/Nz/TpveBDR1LL2IpQgtjzI=
Subject key identifier: 96:D2:C2:4B:6D:2D:61:01:5C:D9:86:7B:3C:2C:7B:E5:EF:C3:A1:AA
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62AB72CC2E4AF57399BD6C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2a:b7:2c:c2:e4:af:57:39:9b:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=d7c92004-4cff-4922-a370-abc0c1ba5b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:45:d6:85:06:62:34:2c:8b:9d:56:d3:71:
5e:df:a3:6e:40:9d:cf:d8:de:13:2c:79:d8:e7:ee:
b3:e4:84:0c:83:54:ee:e7:df:2e:25:a8:9b:01:ce:
7d:c9:38:ba:4d:cd:1e:42:e6:86:a3:f4:73:df:95:
6e:d8:c3:a9:84:b0:3b:f8:b7:9b:7f:7d:ba:7c:57:
13:aa:0f:ee:30:ce:ef:68:e3:6c:22:09:c3:d7:11:
e1:7c:b9:fe:c0:cb:74:75:b7:b3:9c:a3:f5:81:5a:
54:be:c5:b0:67:6e:fe:5f:ab:23:f8:df:ba:c8:8e:
02:70:91:a4:b8:0b:18:26:fa:49:f6:a6:95:79:6c:
5b:9d:33:8f:43:26:75:fb:dc:ce:ee:db:11:b9:00:
33:9a:f0:e1:5b:f6:32:d3:81:4f:25:15:6a:e4:46:
9a:d8:d9:e8:0d:09:e1:4b:61:bb:8e:df:3e:04:0c:
e1:de:23:91:66:ea:d5:76:9b:99:11:08:79:6d:0d:
10:1d:1d:be:51:a9:f6:f5:76:0a:5f:c1:79:90:8c:
7a:d8:f4:53:87:02:7b:86:00:38:b0:a3:48:ed:ff:
dd:0f:0e:a6:58:ad:9a:f5:b6:91:8e:04:b5:52:9f:
18:dd:6e:ce:33:6e:39:3e:a4:92:63:55:d6:82:a3:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D2:C2:4B:6D:2D:61:01:5C:D9:86:7B:3C:2C:7B:E5:EF:C3:A1:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/e1a72dfb-1439-3141-a432-e977c9893c8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:82:07:99:48:87:fc:de:25:28:0d:e6:da:9d:23:fc:f8:38:
4c:db:85:e3:4a:96:f2:fc:36:07:12:f6:5a:15:fc:9a:5d:e6:
0d:2c:68:5f:11:d3:c2:36:b6:93:43:f4:0e:f7:f7:4d:de:4c:
68:72:5b:71:d2:aa:68:65:d8:8b:c5:58:24:15:be:5b:7d:ee:
22:32:df:ca:3c:3d:ec:c8:4e:26:eb:61:49:e5:db:8f:5f:dc:
dc:dc:7d:d2:96:a3:c0:86:84:d6:fa:2d:2a:5a:53:aa:76:af:
4a:25:af:18:55:3e:01:c6:d7:20:62:f0:da:58:a7:16:45:80:
9d:0b:a2:fd:5b:3a:d3:bb:89:63:91:96:fa:eb:4e:21:02:87:
eb:a2:b9:8b:67:d6:d8:b5:d2:1e:9b:3b:22:df:34:82:d5:57:
65:21:02:f3:92:b1:4f:9b:94:47:81:d5:94:f1:77:8a:a0:96:
d9:d6:3b:6a:b7:1e:b7:31:6c:57:dc:82:e2:96:6a:c6:f0:b6:
f9:fc:20:bd:c8:34:88:a1:20:56:b9:32:e9:a3:54:3d:13:bb:
54:f5:d6:a6:f7:be:0e:7e:8f:d5:e1:df:87:20:37:63:70:8b:
f5:19:17:b4:ba:32:cf:81:dc:b2:f5:7f:1c:27:17:08:69:0c:
cb:11:7e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:26:27 2025 by rpki-client