Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/168189ad-30c5-3335-bc6c-f2f3e139b8ea.roa
File: 168189ad-30c5-3335-bc6c-f2f3e139b8ea.roa (raw, json)
Hash identifier: KPP9kpsvzXYqsuKIPetjQ9G9cO4QRz5dR4gBLjKb6jk=
Subject key identifier: EB:90:A6:B6:E7:DF:C8:9C:69:A6:CD:36:6D:38:47:1F:8C:06:8F:C9
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C58219B3D81DC4C9230C8480
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/168189ad-30c5-3335-bc6c-f2f3e139b8ea.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.251.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:82:19:b3:d8:1d:c4:c9:23:0c:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=f29dc283-1f2b-4d45-a9ef-5ff3487bedb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b6:23:6d:9c:91:20:bf:b5:36:cf:0d:79:57:
75:c6:82:93:a5:70:5c:cd:2f:3a:b6:2a:6f:7a:46:
8e:91:0b:82:2b:6c:6c:c5:ac:eb:d9:c7:38:c2:7a:
a6:eb:8c:bc:ac:3a:c0:33:c5:6d:3e:ad:47:10:43:
e5:9d:9b:1f:c5:b4:4c:c3:bf:f6:5b:d8:ff:4c:fb:
bd:b9:f8:11:1f:01:bf:04:75:59:5f:0c:8d:85:a6:
bd:b8:7b:12:c9:69:6c:9a:78:42:a4:b5:0c:92:07:
6e:8f:6d:23:26:ef:cb:49:7f:9d:d6:cd:ff:26:cd:
c0:d8:a9:fd:6d:ca:20:ea:57:dd:12:9f:03:f8:ed:
10:5d:44:63:43:e0:98:12:24:0f:8a:07:1e:ec:10:
30:6a:00:51:1d:54:b9:e2:3f:5c:c7:f7:bf:9f:c7:
3a:b5:15:18:89:24:06:e2:e3:75:cc:7a:20:2e:4d:
b2:36:d9:10:aa:60:7e:57:44:e5:18:8d:df:9d:ad:
02:f6:4a:47:78:73:d0:8a:f7:11:8c:98:0e:73:1e:
c7:f7:61:53:66:67:11:07:b2:ee:a6:de:84:bb:23:
ab:e7:b6:4a:a9:df:a9:35:39:f7:09:1e:91:f5:2c:
c2:60:83:ff:5b:b9:f0:45:89:cf:9b:7f:4a:e7:6c:
05:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:90:A6:B6:E7:DF:C8:9C:69:A6:CD:36:6D:38:47:1F:8C:06:8F:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/168189ad-30c5-3335-bc6c-f2f3e139b8ea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.132.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:f6:73:b0:03:36:ab:8c:fa:d9:33:03:b6:a8:8e:dd:93:b4:
64:2c:82:3e:9a:69:1d:cf:bb:e0:5a:10:dc:51:42:51:70:6d:
2b:da:cf:9e:58:d6:ed:4f:f9:5f:31:e7:6d:5e:02:0b:85:cb:
5c:86:66:b1:ca:14:f6:f8:bc:3d:a5:60:a2:2f:ed:92:c8:5b:
4e:c9:c4:7f:f4:e2:43:35:41:01:d6:27:9e:a7:f6:75:f4:c2:
8b:d1:07:2e:37:d0:23:8a:51:86:9a:4f:fc:5b:0a:ef:3c:62:
0a:0b:18:42:d4:55:e6:d2:b0:70:c9:3e:d8:f6:f8:b8:4b:c7:
2c:06:0e:bf:5b:f0:49:b3:b5:54:52:d7:75:d0:ef:c6:7d:7b:
db:bf:89:0f:05:df:7f:18:0e:f8:2d:06:c9:22:20:95:b2:db:
d5:81:e7:fb:80:05:3d:ac:26:6e:35:9a:7c:d3:e3:10:bf:25:
96:03:33:a4:a0:0c:d2:0f:73:27:4c:f0:b3:23:43:b7:ad:b3:
0b:00:93:60:6c:8b:40:80:ca:18:3c:df:21:b2:05:6a:b0:66:
ee:a6:54:9f:4f:94:1b:6e:b0:66:ed:5d:f6:6c:59:01:34:d5:
9e:cc:ef:42:80:87:1a:d4:d3:d2:d2:e6:f1:f8:70:6b:20:27:
34:80:f8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:39:10 2025 by rpki-client