Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/135d837d-9ce4-3b98-9ac8-bbfe68655354.roa
File: 135d837d-9ce4-3b98-9ac8-bbfe68655354.roa (raw, json)
Hash identifier: ns57qDeBeFqYWkrs5Mq3+W3I4xPnpFmtnsPR7zOIMxE=
Subject key identifier: FD:FE:D4:B0:00:41:5B:A2:FC:57:90:01:21:81:C8:81:BB:E8:45:A1
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C582315752C760344EB724C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/135d837d-9ce4-3b98-9ac8-bbfe68655354.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.251.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:31:57:52:c7:60:34:4e:b7:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=21911c1d-605d-426e-9a57-a00ab58fcd5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b2:b3:57:6c:5d:c0:48:e3:de:80:8c:97:63:
73:31:ed:02:06:b7:e1:fb:51:3d:2a:8b:65:6d:da:
9a:dc:b3:b8:a6:9d:94:5a:a6:05:39:5e:3d:5e:ff:
db:17:21:02:0f:ec:4e:fa:5c:ca:99:80:5f:9a:b5:
e4:14:5d:80:15:bc:f4:fb:d8:d1:1a:b3:7c:22:4e:
dd:16:39:f0:f6:d0:15:9e:ba:2f:7f:ad:4f:c3:23:
53:33:1b:12:6d:6d:22:51:68:ad:24:88:50:5b:d0:
c3:04:be:0a:e6:db:61:8b:9f:35:e2:2e:f1:7c:b9:
e1:7e:e0:ce:d3:ca:e7:82:b7:64:47:23:39:c1:7f:
7b:dc:2f:62:58:8a:1e:70:37:52:45:62:ef:2d:63:
d1:a8:2f:22:76:28:ab:08:18:31:74:53:02:84:a0:
0f:26:43:e2:ac:b9:e9:58:82:fc:ef:72:a7:b3:96:
d2:01:99:3d:e3:bb:ff:32:24:d7:71:5f:87:18:31:
50:ba:a1:dc:46:7f:5f:a2:93:67:fd:ca:67:9a:b0:
22:ad:a4:57:b5:8a:f2:05:fa:d3:2a:96:52:38:cc:
5c:e9:42:9a:08:33:05:a0:4b:6f:8f:2d:0f:e1:c9:
74:e7:c4:2a:a1:60:26:25:15:08:f7:81:fb:a7:97:
22:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:D4:B0:00:41:5B:A2:FC:57:90:01:21:81:C8:81:BB:E8:45:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/135d837d-9ce4-3b98-9ac8-bbfe68655354.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.153.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:92:a3:79:4a:21:cc:fe:f7:46:ac:98:43:b6:68:ec:8e:08:
50:a2:d9:c4:d4:be:80:33:4c:b4:23:38:57:17:aa:05:4f:80:
cb:b9:4d:0f:b9:42:a9:ab:7b:e5:0a:fe:94:71:1b:14:e4:e6:
c0:cc:2c:e6:53:e3:06:88:b0:65:9a:7c:f9:bd:78:e0:fd:a6:
b1:31:62:39:2d:06:87:27:98:76:ab:78:cf:6b:39:77:f3:8c:
15:2e:ab:64:d8:26:b4:ea:6f:19:6a:31:ee:de:b6:0a:e3:ac:
e0:62:da:e5:77:20:72:ba:2c:1c:0d:14:51:55:47:9d:f9:3f:
02:56:26:00:1a:be:5a:a2:6f:3b:bb:75:58:21:3c:c2:ae:6f:
09:9f:bc:59:67:b5:53:ce:75:8d:d0:e5:39:2b:a1:6e:6b:f7:
d8:0f:3f:b2:6b:6c:29:b6:64:9e:cd:93:3b:30:90:95:54:55:
2d:75:e9:67:d1:24:54:c4:07:2d:cd:df:12:d2:e3:05:ba:a2:
72:43:4c:b1:49:ec:a8:76:60:fe:ab:00:ad:0a:13:a9:03:c2:
d8:9b:31:bb:2a:98:00:76:cd:33:28:eb:3b:88:bf:b3:6a:7a:
8d:79:45:78:3a:3b:2c:ab:78:2c:7c:fc:44:b0:82:79:ac:7f:
34:20:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:51:32 2025 by rpki-client