Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047a6116-2ad6-355c-90e1-8a71418ab239.roa
File: 047a6116-2ad6-355c-90e1-8a71418ab239.roa (raw, json)
Hash identifier: a7BZzdMG9NCPeSH9FXC8brTvMqHeGkya7nD1CeT+XEo=
Subject key identifier: DF:54:38:3F:08:39:D5:B0:CD:AC:5A:B3:4F:30:67:19:9D:0F:E6:88
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F432858430A12E0E521F44CBDD0384300
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047a6116-2ad6-355c-90e1-8a71418ab239.roa
Signing time: Sun 27 Aug 2023 12:00:00 +0000
ROA not before: Sun 27 Aug 2023 12:00:00 +0000
ROA not after: Thu 31 Oct 2024 04:00:00 +0000
asID: 15169
IP address blocks: 142.251.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:43:0a:12:e0:e5:21:f4:4c:bd:d0:38:43:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Aug 27 12:00:00 2023 GMT
Not After : Oct 31 04:00:00 2024 GMT
Subject: CN=d356cec9-cfd1-43f2-aade-8f6f21f243fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:af:44:23:99:d8:db:be:07:c9:da:71:71:6f:
bb:86:4f:39:4f:c5:7e:5c:ed:22:b0:85:08:e6:93:
9d:30:73:80:bd:a5:e9:98:69:35:32:53:a3:c7:cc:
b5:03:7a:bd:61:3a:84:72:e4:35:29:64:36:60:c6:
49:f0:fe:77:5d:da:77:be:e2:64:b4:67:ec:13:68:
6a:0e:31:cf:0f:31:f5:89:42:a6:9e:bb:2a:80:d6:
c1:5a:81:6c:9c:83:c1:fc:ca:25:82:08:67:96:17:
7e:31:fc:d9:69:3a:06:35:72:92:17:dd:a7:92:0b:
68:13:12:61:03:9d:0c:5a:23:c5:56:ad:02:24:ac:
72:ac:ba:1f:ed:9b:58:70:9f:05:d4:8f:17:f6:6c:
99:90:4f:e0:08:ed:b9:50:ef:b2:5e:be:a7:6d:f8:
2c:34:3a:78:79:25:ce:fe:4b:67:d2:80:60:9b:cd:
62:4a:64:ab:f6:8a:30:ed:c0:87:2b:78:dd:a6:ba:
9d:e2:bb:e1:44:02:d0:8b:d2:2a:1a:e5:83:1b:b7:
2a:ca:93:69:d7:36:d4:78:15:b0:04:e1:0c:d0:c1:
b8:f1:b1:93:1f:d5:27:f8:f6:f3:2a:a2:03:a0:ec:
63:27:04:b0:df:67:bf:2e:52:a0:09:61:7f:ab:96:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:54:38:3F:08:39:D5:B0:CD:AC:5A:B3:4F:30:67:19:9D:0F:E6:88
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/047a6116-2ad6-355c-90e1-8a71418ab239.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:8d:de:55:2e:62:67:3a:50:87:aa:33:94:53:14:d2:60:55:
3b:6b:4a:f9:34:6d:c3:fb:b6:86:6d:56:a3:68:86:47:ee:5b:
49:12:c4:79:03:ce:a6:f3:cd:96:39:1d:cf:e4:3d:91:b5:54:
a9:71:b9:75:b9:d3:dc:12:9d:98:ae:bd:75:2d:83:fc:35:be:
b7:a1:49:56:8c:02:47:eb:41:c3:f8:2f:a7:9f:ab:5d:0e:59:
4a:f1:91:be:70:45:34:02:47:e8:da:87:5a:ee:33:dc:31:63:
05:3f:42:24:39:56:13:45:f0:b4:75:3f:d0:e3:08:bd:aa:2a:
b9:8b:7c:df:60:8b:3f:b1:8e:89:71:86:57:74:c4:37:41:a8:
4d:ec:b9:89:fe:50:ec:7d:98:26:36:33:43:9f:0b:95:29:51:
7c:f5:d7:73:6c:1f:be:bf:62:95:c8:e9:0b:e2:6e:1c:d9:fd:
45:c0:4b:10:a1:62:90:8f:b9:e1:15:6b:d0:d2:10:03:7c:fc:
e7:ef:c9:13:b9:0a:d9:bd:4d:46:13:56:60:4d:47:83:8f:d4:
0e:d3:6d:0c:99:66:a9:ad:85:1d:e7:b1:2f:99:1d:04:8d:cd:
b2:c1:a1:3a:97:f6:17:9c:d5:3f:70:ec:33:50:5b:43:31:f6:
55:75:f5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:12:42 2025 by rpki-client