Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa
File: 574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa (raw, json)
Hash identifier: rrCUq4tLCE25y1mgBjg8bzoxpwS5S6El3X1GH2jlByg=
Subject key identifier: 9A:A7:F1:19:7C:21:AC:8A:35:6A:58:14:1F:50:84:6B:32:2F:05:05
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F4328584883E5BE4AC0656B8CAFB67F20
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa
Signing time: Sun 12 Jan 2025 02:00:38 +0000
ROA not before: Sun 12 Jan 2025 02:00:38 +0000
ROA not after: Sat 12 Apr 2025 01:00:38 +0000
asID: 15169
IP address blocks: 142.251.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:83:e5:be:4a:c0:65:6b:8c:af:b6:7f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Jan 12 02:00:38 2025 GMT
Not After : Apr 12 01:00:38 2025 GMT
Subject: CN=7f813f1c-d90e-49de-8f76-e037ad9a6183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d5:a5:d3:5e:cb:74:d2:07:76:81:9f:f6:3a:
8f:6c:34:b1:d7:ec:69:32:36:08:b7:58:41:e5:2f:
32:f4:64:4e:2b:b4:30:63:4c:23:92:15:e6:d6:f2:
62:1c:1a:3b:42:9e:ca:1a:08:4e:75:5c:26:a7:70:
c7:4d:d9:77:51:72:f2:f3:2b:5e:b8:7b:6b:7d:b0:
a9:fc:e6:c3:d8:5a:c9:2a:25:e9:c5:75:57:2d:e6:
34:dd:90:d2:9a:7e:d1:75:0d:4b:b8:45:3b:e3:9c:
bb:f0:83:73:84:97:e5:2c:2e:fe:b1:86:18:fc:cd:
9f:d7:87:68:d4:4b:ba:0f:7f:bc:51:d8:49:34:dd:
18:ef:09:d5:a5:b5:ab:b7:8d:27:e7:6f:4b:be:1c:
d2:92:b4:54:8e:e4:c5:8c:b9:e5:1d:94:17:37:78:
f8:3a:c7:91:15:38:a3:d2:a9:16:54:19:46:63:b1:
5c:c0:dd:97:ae:9a:13:40:87:3c:78:b1:f0:62:d5:
19:b0:c7:3d:ae:ac:c6:eb:8c:3e:90:e4:d6:ee:36:
61:f7:b3:95:e8:15:79:bd:b7:c1:a2:a9:83:dc:46:
de:db:11:8a:dc:a3:31:7e:27:c3:c6:e0:00:7f:a7:
e7:0b:2b:4d:ab:25:81:5e:b4:4c:34:4f:5d:26:fb:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A7:F1:19:7C:21:AC:8A:35:6A:58:14:1F:50:84:6B:32:2F:05:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/574d42b8-6ba6-3d28-8bfa-3b18a8e91256.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.191.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:34:35:e8:53:e6:2d:c0:55:2b:42:53:38:5d:4e:95:c2:2f:
df:65:48:e1:d2:65:fb:66:d9:04:f5:21:fc:17:61:c5:0e:d6:
d8:84:ba:43:ca:b2:10:6f:0f:31:06:47:ee:13:95:87:2c:ee:
7c:21:39:00:38:fc:f2:99:2a:94:6e:59:27:0e:dd:1c:e1:ee:
b3:25:5b:1a:52:fb:f2:15:05:4d:ae:55:df:43:30:db:d0:a9:
ad:c8:d2:de:3a:11:24:5e:49:ea:22:f0:e3:15:e5:5e:1f:23:
44:c2:c9:3f:59:2a:23:e3:17:ac:e7:05:6a:80:3a:f8:5f:df:
29:c6:9d:7f:dc:99:3d:0a:04:a7:29:af:a3:33:7a:e9:03:2c:
3e:52:53:b9:cb:f7:e8:0d:02:d4:16:b5:1c:13:a3:91:cc:d7:
bc:ff:26:dc:ef:a4:62:02:cc:89:fc:92:44:5f:8d:be:fd:89:
31:0f:10:be:ce:41:ba:fe:11:c0:12:73:54:21:c7:a0:4d:b2:
60:b5:0e:13:74:1f:fd:c6:33:de:fe:8c:b4:37:05:18:b9:44:
29:7b:3f:13:21:0e:ec:37:6c:69:11:9a:5f:57:06:f5:62:58:
8d:c0:3e:c3:15:80:af:a7:4d:ec:53:05:e4:86:a0:d7:4f:cb:
e8:83:42:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:26:13 2025 by rpki-client