Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00ab2f26-db13-31ce-9b97-abd800257692.roa
File: 00ab2f26-db13-31ce-9b97-abd800257692.roa (raw, json)
Hash identifier: xC+Kj3nfTVjXqhAA0QUAKh8qP5x6Yfp5GL/B/jbxRh8=
Subject key identifier: D8:4F:E0:B9:61:31:32:C1:1C:8B:50:5D:69:5B:FB:F9:D4:64:3F:E3
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A06B4F47EB207A71FE19B00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00ab2f26-db13-31ce-9b97-abd800257692.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:06:b4:f4:7e:b2:07:a7:1f:e1:9b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=ad2293d2-7541-48b4-a1ac-7bef9e2b55e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:77:dd:e4:d9:bf:5a:2b:54:ea:45:7c:98:
43:0d:79:4e:61:60:84:52:d3:ba:ac:ec:6f:e5:67:
0f:09:ca:34:4f:f3:51:44:65:48:23:b7:f2:3c:72:
03:2b:73:71:eb:69:56:4e:90:ff:ae:3a:c2:85:50:
c6:06:22:8f:9e:9c:32:66:be:7a:d0:d1:76:0c:8a:
57:2f:39:36:61:ff:8c:85:1a:a2:52:ab:b2:46:cf:
3a:66:19:f5:dc:1f:79:e8:23:26:d3:f3:6f:ed:47:
7c:1b:86:10:6b:f4:3e:e7:36:47:67:1a:52:f5:a3:
f8:fc:bc:4d:db:29:6e:95:4e:9d:46:f7:0f:05:db:
9e:1c:6d:95:bb:03:00:48:a6:b6:3c:d8:e3:22:5e:
10:57:d3:58:d1:eb:7c:88:5b:75:6d:8c:ce:ff:c1:
ec:03:b6:a8:14:d4:b6:0d:84:67:19:15:68:17:88:
d1:1e:4f:36:3b:30:75:94:99:8b:70:b8:32:53:15:
60:a8:ba:26:78:dc:01:dd:57:ae:6e:18:0b:99:82:
4f:38:0e:63:93:84:15:df:9d:46:46:15:4a:bb:23:
c3:99:2f:cf:b7:a6:88:8f:70:bf:6c:b4:b8:b2:d6:
ef:c2:ba:56:6d:bc:d4:c6:4f:57:06:2d:cf:6b:cf:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4F:E0:B9:61:31:32:C1:1C:8B:50:5D:69:5B:FB:F9:D4:64:3F:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/00ab2f26-db13-31ce-9b97-abd800257692.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:07:d4:2e:15:49:25:b4:f3:d4:2a:2c:e4:1b:a8:88:51:00:
10:43:cf:5b:97:b5:88:c4:4a:50:3c:fd:8e:dc:35:a4:bb:24:
01:02:97:fc:d2:f8:5a:96:85:18:56:b8:fb:6c:98:ad:9d:7e:
dc:2a:40:a3:1e:d0:bc:4f:b2:1e:c4:fb:00:e2:db:4d:73:1f:
5e:90:16:78:61:72:1e:5b:a5:7d:53:77:fc:39:af:a6:3e:b2:
58:b0:64:81:74:19:f5:4c:2f:95:b7:df:fd:f8:60:2e:a5:3e:
a0:ec:ce:20:1f:f9:b2:dc:2e:65:38:4c:c7:78:f3:cf:72:ed:
05:58:16:ee:ac:3b:5c:0d:59:70:65:73:96:72:76:46:8d:d4:
ae:38:57:86:56:10:f7:69:6d:68:a6:67:e9:90:1e:a5:ba:92:
86:37:58:94:7e:e4:f6:45:d7:1d:b5:e5:94:c0:97:25:01:37:
a9:e1:c5:64:56:0b:7f:ae:c9:35:16:7b:9a:97:6d:59:f0:ce:
7b:05:d5:a7:a4:b1:7f:78:78:3e:bc:6d:99:fe:42:a6:9f:8a:
7a:69:f9:45:42:e7:f7:0b:e1:8c:51:db:2e:59:47:c0:1b:68:
0b:bd:2a:f6:22:54:1a:0e:93:83:d6:47:f7:d7:7b:78:dc:a7:
f2:cb:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 09:55:57 2025 by rpki-client