Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb0c2a43-ee01-3a9a-bd69-3bd19275c3e2.roa
File: eb0c2a43-ee01-3a9a-bd69-3bd19275c3e2.roa (raw, json)
Hash identifier: 5WayjXFgWauQ6k9I876aeWbYJBmQ2JJJGOUyhAFHoSQ=
Subject key identifier: 7A:55:7D:A5:14:70:F5:3E:FB:E9:E7:BA:AF:68:D0:28:7D:FA:BD:97
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285847E62B4BB21C6DCAAC1F4BBFC0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb0c2a43-ee01-3a9a-bd69-3bd19275c3e2.roa
Signing time: Sat 16 Nov 2024 14:00:41 +0000
ROA not before: Sat 16 Nov 2024 14:00:41 +0000
ROA not after: Fri 14 Feb 2025 14:00:41 +0000
asID: 15169
IP address blocks: 142.251.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e6:2b:4b:b2:1c:6d:ca:ac:1f:4b:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Nov 16 14:00:41 2024 GMT
Not After : Feb 14 14:00:41 2025 GMT
Subject: CN=431f4a28-c245-41d8-a4ea-8a888ae186dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:e8:34:b5:a3:ad:67:59:a6:46:38:5c:21:
48:fc:ce:b2:5c:a1:0d:eb:c3:f1:81:1a:43:7d:70:
62:bc:62:9e:ac:29:cb:63:7d:d2:fc:55:7c:4f:69:
46:c7:f5:20:08:31:07:eb:8b:36:e2:e1:02:be:04:
3e:0f:19:e5:8e:e2:ef:cd:12:dc:8c:6f:47:33:6a:
cf:18:a6:2c:07:6e:c2:8d:4c:49:b2:50:35:ba:4f:
d6:dd:19:42:9e:ba:b2:4f:29:03:88:12:d3:57:63:
3d:eb:5e:93:d4:1c:2d:e8:bb:6e:c1:4a:99:5c:34:
d9:9a:e7:32:a3:7e:cb:c4:ed:c8:8b:be:a9:7d:f1:
9b:02:c0:4c:d4:f8:d6:5a:7d:59:39:5e:31:e9:33:
8d:39:94:f8:1a:24:e7:60:e0:ae:be:ec:50:4d:0b:
e7:7e:e3:d5:3f:95:48:2d:e9:b0:5d:fb:ca:63:9a:
39:4e:e9:b3:5f:8b:a5:55:47:70:ec:79:2c:0a:9a:
ee:7d:82:5d:06:92:81:9c:08:fe:d0:a4:ef:53:5e:
c2:7f:c4:50:2c:1f:ab:4c:d3:16:6e:7a:57:fe:81:
d8:29:3d:4e:df:c9:f1:1d:57:90:61:8b:d1:63:bb:
9d:86:e8:6f:e1:e6:db:47:f8:12:ac:db:c7:a5:82:
85:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:7D:A5:14:70:F5:3E:FB:E9:E7:BA:AF:68:D0:28:7D:FA:BD:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/eb0c2a43-ee01-3a9a-bd69-3bd19275c3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.60.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:34:ed:99:bc:34:bb:2c:e8:f1:d6:e8:75:d5:5d:cd:9c:67:
29:b4:09:5e:f5:04:96:0d:3a:65:98:da:53:ef:7f:e8:39:ef:
10:49:ed:93:65:ed:7d:46:eb:fa:e2:cf:c1:4f:48:ef:9c:2e:
32:45:ed:d4:ce:8c:2b:c6:cd:d1:0c:0b:80:a7:89:09:59:98:
b6:bb:18:cc:f7:c4:1a:c9:74:cd:7e:38:72:b0:61:ab:9a:6d:
17:fd:10:1a:e9:56:e7:12:56:9b:5b:9a:f0:2f:29:ee:c0:71:
98:03:45:5c:46:2b:9c:50:4d:64:7a:4b:e3:8e:e6:dd:64:dc:
36:d2:8e:9f:c4:42:32:c5:f8:7b:06:21:fd:7b:c0:ec:bc:cd:
04:2c:75:ed:c7:48:cb:31:92:3b:71:4b:6b:81:e0:8f:c7:81:
64:76:0c:fb:81:c4:10:b1:1a:05:5f:3b:a3:6a:8a:6b:d9:ab:
34:ee:c1:a3:31:10:d0:b0:59:29:71:4a:83:c0:6e:2c:ef:b4:
bc:b9:32:69:a8:66:0a:eb:07:f7:d6:dd:b5:e1:d5:3f:9d:17:
c9:e2:83:bf:c0:39:12:d7:6d:62:20:94:d4:0b:f6:5a:f3:07:
0a:a7:20:04:35:fb:49:78:34:9f:bf:82:6a:ea:0c:99:85:b7:
45:44:97:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:54:51 2025 by rpki-client