Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa
File: 16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa (raw, json)
Hash identifier: nbGzkdarfLiArNd3eI15Z9d0Ao65rZw8iZyZLx519a8=
Subject key identifier: 74:2C:86:17:47:8B:B5:23:2C:31:1B:C4:38:DD:6B:76:A2:E3:06:EF
Certificate issuer: /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial: 010D0C9F43285848CC7B9B27A99ECCF5BBA2B380
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa
Signing time: Fri 07 Feb 2025 02:00:39 +0000
ROA not before: Fri 07 Feb 2025 02:00:39 +0000
ROA not after: Thu 08 May 2025 01:00:39 +0000
asID: 271
IP address blocks: 142.231.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:cc:7b:9b:27:a9:9e:cc:f5:bb:a2:b3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Validity
Not Before: Feb 7 02:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=c85fa3d1-fa66-472b-bb50-c15bd2574a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4c:be:e0:a4:47:d8:39:58:b7:7f:d1:18:9b:
d7:f3:00:42:85:77:3e:45:98:2b:b5:1e:8a:eb:ef:
f5:9f:a0:3c:e0:6b:b8:4d:3d:0c:be:e3:95:5f:6c:
d8:e0:07:0f:96:65:b9:59:59:12:d0:51:09:f5:f7:
3a:d3:18:3f:bb:db:d8:df:77:8e:5f:c0:4d:97:2d:
56:7a:1e:28:8f:f8:49:db:2d:61:2d:a8:d0:82:e4:
df:53:c0:ec:03:c0:4f:34:ee:e1:b7:9f:2a:2d:36:
89:1f:52:15:b1:ce:dc:4c:75:81:3e:58:fc:86:57:
e3:f5:22:8c:c7:50:9e:02:ef:1a:e5:27:d1:94:2c:
3e:1a:9d:74:0e:02:98:5f:bc:70:80:85:80:39:32:
ad:c7:8c:06:18:23:c2:a5:b1:16:87:2e:ed:eb:d0:
2f:e2:f3:11:65:db:31:72:4f:a6:97:69:4f:d5:f3:
3e:43:32:2d:4f:2c:cb:b4:11:0f:c1:3a:8d:ba:71:
39:c5:bf:b9:18:22:8f:ae:29:f0:f5:42:ca:42:89:
32:2e:ad:f2:d6:3f:3f:ca:fb:f7:84:96:95:84:e9:
8d:ff:e5:1f:cf:ba:a0:8d:04:0f:bf:e2:55:94:06:
42:82:72:b1:55:52:8f:e4:11:32:6a:4d:1f:8d:a4:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:2C:86:17:47:8B:B5:23:2C:31:1B:C4:38:DD:6B:76:A2:E3:06:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/16150a42-1826-3f5b-9f2b-1dd9016eaca3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
X509v3 Authority Key Identifier:
keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
sbgp-ipAddrBlock: critical
IPv4:
142.231.109.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:f0:19:cd:23:4e:35:83:17:7b:41:43:8e:5f:c1:b7:a6:17:
d8:62:e9:aa:ad:fe:68:5d:63:3c:a0:86:9c:59:6e:42:c8:00:
3d:c4:4c:d4:86:44:83:bb:e2:ca:24:ea:c4:24:ae:72:94:9e:
2e:c2:c1:02:9c:f3:03:83:29:ec:e0:58:6c:6c:82:06:54:bf:
9f:fc:ba:e1:83:a2:f1:fd:66:d3:ed:59:d6:d9:e8:6f:5c:81:
1b:61:16:7e:93:b1:d8:05:55:34:29:ba:15:3d:e7:52:cd:76:
78:40:dd:f8:7a:2b:e0:e8:6e:a5:05:f7:63:e5:d5:97:55:84:
ce:98:64:ce:24:72:30:20:6a:93:a4:8b:3b:1b:53:4c:67:cd:
d0:f5:3f:5a:bc:ec:6a:32:2a:42:68:df:d2:aa:bc:9a:35:74:
40:b3:f3:d2:85:36:74:18:df:ee:83:4f:4d:bc:98:81:df:88:
e5:11:5b:58:04:21:03:e7:f6:a2:83:a9:40:5b:85:24:a2:16:
b3:da:12:b7:35:fa:34:3d:42:42:f8:32:7d:40:91:7d:9d:aa:
40:b7:bf:08:a8:d7:d3:3d:10:49:42:75:a1:42:a3:a8:c7:a3:
dc:57:3a:83:0e:1c:ba:b9:c4:ce:1e:e4:64:ae:3d:1f:c4:df:
51:f3:f8:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:58:22 2025 by rpki-client