Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0019c2c6-e9e1-33e5-875b-b3acc1625aae.roa
File: 0019c2c6-e9e1-33e5-875b-b3acc1625aae.roa (raw, json)
Hash identifier: M2aNClBV8goxoNVfecPPNyM/B6FU50fivwQ4sD8jnQ4=
Subject key identifier: 1A:79:D0:BD:10:82:6F:75:80:B8:F8:DB:B3:47:AF:88:87:71:84:25
Certificate issuer: /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial: 010D0C9F4328584882808854C9CC98DBAD6AF7B4
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0019c2c6-e9e1-33e5-875b-b3acc1625aae.roa
Signing time: Sat 11 Jan 2025 14:00:52 +0000
ROA not before: Sat 11 Jan 2025 14:00:52 +0000
ROA not after: Fri 11 Apr 2025 13:00:52 +0000
asID: 10958
IP address blocks: 142.214.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:82:80:88:54:c9:cc:98:db:ad:6a:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Validity
Not Before: Jan 11 14:00:52 2025 GMT
Not After : Apr 11 13:00:52 2025 GMT
Subject: CN=dab32da5-1aad-4a02-b156-75d7d413e0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:9b:74:d6:0e:f1:0c:c6:fe:ee:39:ce:6d:
c5:75:d0:ae:8a:41:30:94:e7:27:c6:a2:f1:5c:89:
a1:30:89:71:42:07:9b:9f:93:73:3d:43:aa:27:34:
4e:7b:c7:c0:ea:28:97:9b:b3:c9:3e:fb:7b:7f:34:
4f:2e:c7:6c:7d:a9:71:db:aa:15:36:87:c7:e0:d8:
72:ff:cc:84:36:cb:f7:7c:6a:fb:f6:d2:3f:fc:9b:
ef:a2:84:f2:63:36:d5:78:cc:61:c4:76:7c:ec:4c:
de:c7:c3:b8:65:d0:ee:a9:21:5d:ca:ab:3d:05:15:
ec:e6:28:ba:8f:21:77:36:e6:06:a1:34:30:36:60:
1f:3c:b6:2f:53:e0:36:5e:4e:6b:7f:69:d0:ad:91:
0f:d8:c7:5c:51:b8:aa:62:a6:48:76:d5:85:b5:70:
e9:7f:0b:17:cc:7c:c4:4c:46:94:93:4a:ea:8d:c0:
e1:05:46:73:b9:92:55:f0:da:bb:af:d8:dd:e0:4c:
03:ad:d8:60:a5:48:6d:7a:8d:0f:6d:8c:90:02:95:
e5:d8:6d:f5:83:4f:cb:f6:6e:1d:f5:93:51:cd:88:
e4:b3:a0:63:80:81:ed:7b:63:aa:18:e7:e2:20:5e:
c9:87:9d:2d:d5:af:a8:25:77:dd:20:59:9d:07:63:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:79:D0:BD:10:82:6F:75:80:B8:F8:DB:B3:47:AF:88:87:71:84:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/0019c2c6-e9e1-33e5-875b-b3acc1625aae.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
X509v3 Authority Key Identifier:
keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
sbgp-ipAddrBlock: critical
IPv4:
142.214.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:7c:47:87:24:6b:1d:41:ce:f1:e7:56:61:4b:c1:4e:6d:7e:
7b:4e:8e:3f:cb:c6:bb:ff:ab:f6:f3:65:e0:56:ea:29:12:e6:
28:dd:8e:03:5b:e3:8a:9d:71:81:5d:48:be:22:f9:d7:66:f7:
12:bf:4f:71:81:1f:c5:88:cb:b1:6f:82:6f:0d:1e:49:87:65:
0a:c2:03:2a:9c:32:37:5d:91:1e:16:64:48:68:bd:97:0c:7d:
ae:8e:7b:98:e4:0a:66:33:46:0c:76:91:b7:dd:e3:72:81:d3:
6f:cc:b4:95:30:10:99:e0:da:31:80:fd:44:b6:a4:94:95:d4:
78:35:6b:42:21:2c:31:1b:f0:dd:b3:78:f2:3a:92:70:ac:15:
98:37:5e:e8:b9:ad:35:05:6e:55:b9:37:04:9d:2e:3d:e6:61:
3e:da:86:e0:20:3a:02:2c:75:f5:73:d3:c9:18:ee:60:19:98:
b4:e5:3b:b8:20:1f:a7:20:07:23:10:f5:e7:18:59:e1:65:d4:
b0:18:ea:95:04:73:2d:43:67:55:9e:ae:25:6d:dc:00:28:8d:
4b:67:15:9a:33:60:5d:71:69:b4:34:93:5a:df:31:b7:99:33:
5c:37:d3:07:1e:36:ba:e6:3c:8a:0a:50:eb:58:f8:07:6e:9f:
60:a4:59:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:19:16 2025 by rpki-client