Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa
File: 308f5d06-7ebf-3daf-b45c-37864122c3d4.roa (raw, json)
Hash identifier: Ecm/H0dFFJK/HIpGqhKvRaFHkymcU2/FbgVzyaMyEPk=
Subject key identifier: FC:6D:AE:16:BD:C6:DB:6D:41:D4:F5:9A:06:56:20:1D:FF:53:B5:E8
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848DEA12724C6B060E28A7A88C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa
Signing time: Thu 13 Feb 2025 14:00:50 +0000
ROA not before: Thu 13 Feb 2025 14:00:50 +0000
ROA not after: Wed 14 May 2025 13:00:50 +0000
asID: 15169
IP address blocks: 142.251.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:de:a1:27:24:c6:b0:60:e2:8a:7a:88:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 13 14:00:50 2025 GMT
Not After : May 14 13:00:50 2025 GMT
Subject: CN=5234cd96-c152-4d0c-94cf-c57b1e8feb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fd:4a:04:25:7d:43:81:ac:64:67:d5:0a:ac:
a9:bc:34:51:f7:62:34:37:b3:ca:3b:d5:de:31:67:
6a:13:5b:65:b5:a2:2c:90:47:0b:56:52:db:d5:23:
15:25:1a:4e:28:d4:92:d9:b0:cb:e5:4a:ef:61:07:
bb:82:da:e0:39:65:91:b3:e3:f5:e8:b5:31:d8:1f:
07:fb:71:2f:e7:8a:ab:56:fa:88:c6:67:71:b4:b9:
c8:f0:80:4a:ee:ba:6c:cd:00:b7:79:4e:07:b8:d6:
dc:5f:9d:1b:9a:08:61:d3:56:20:90:05:d5:6a:a2:
e5:2e:52:62:79:06:45:9c:bc:4d:8f:eb:03:f7:e6:
02:cd:b0:ee:48:a6:2d:96:ae:61:63:d9:b6:31:11:
07:32:17:0a:ea:45:97:26:35:a8:6a:a0:e7:15:09:
68:c0:18:8d:9b:96:75:16:40:f7:03:29:31:8c:0a:
cc:a6:0f:56:9c:80:d8:df:79:f0:94:b2:4d:cf:6b:
15:16:97:b4:d8:71:71:13:cf:f9:50:f4:a4:5b:35:
c0:c3:62:38:a4:1a:20:d7:6b:9b:90:7c:b5:e6:e2:
b3:99:85:10:5e:54:3b:f3:66:2f:f9:1b:db:5d:b2:
50:40:f2:c2:21:3a:5d:81:70:d9:f1:9b:43:59:34:
68:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:6D:AE:16:BD:C6:DB:6D:41:D4:F5:9A:06:56:20:1D:FF:53:B5:E8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/308f5d06-7ebf-3daf-b45c-37864122c3d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.98.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:11:7a:06:a7:b2:d4:a3:3e:3d:04:c9:fd:6a:d9:7b:ee:8d:
f3:34:0d:ea:2d:9c:be:33:89:c6:2a:3c:b3:e8:8f:b3:dc:14:
ec:8a:a4:00:b8:13:98:d0:fe:e4:96:59:a9:76:f7:a1:f9:e5:
53:2a:8d:50:92:75:8d:bf:21:47:fd:c1:9d:cd:f3:e2:e7:4a:
f4:f2:65:e3:28:e7:fe:78:ca:d0:1d:66:a1:67:0d:6b:87:ab:
af:8d:e6:ef:b9:12:ab:03:6c:f0:a0:67:55:e9:84:a1:6a:10:
a0:db:c6:8f:c9:a6:0c:b5:0c:5b:24:63:0b:10:84:fc:59:48:
4b:f1:25:b7:ab:c5:74:9b:34:83:19:2a:80:f4:03:93:8e:02:
bb:b1:bc:85:f2:5c:8e:00:bd:62:f8:71:ec:f0:25:e0:5f:67:
d4:c4:ad:cb:27:07:60:d0:0b:68:fc:18:d2:52:ac:70:fb:4a:
64:83:3b:70:b9:9d:94:41:da:f6:9d:51:62:80:32:04:b8:e7:
a3:1a:ac:6a:24:b4:55:2a:fa:2c:6d:6d:95:3e:39:48:c4:d5:
f4:64:a0:50:68:c0:42:29:56:93:29:55:dc:0b:b0:66:9a:6b:
5f:88:ad:1c:66:70:97:cf:8f:f3:03:12:73:e2:e8:e0:d5:9a:
b9:d7:8a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:27:15 2025 by rpki-client