Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa
File: 5ea868a1-53fa-343b-8393-c4b366e016ff.roa (raw, json)
Hash identifier: 6iU+Id+UA9eg2MPupwu2IgF1MmFQF1RLupq6jQ5pRYw=
Subject key identifier: D8:AD:D7:33:F9:8E:7F:F8:DF:7E:B0:1B:B8:81:A1:0B:33:03:76:BD
Certificate issuer: /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial: 010D0C9F43285848C5816E3CDC7AA63DB0BE9E00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa
Signing time: Tue 04 Feb 2025 14:00:52 +0000
ROA not before: Tue 04 Feb 2025 14:00:52 +0000
ROA not after: Mon 05 May 2025 13:00:52 +0000
asID: 15169
IP address blocks: 142.251.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:c5:81:6e:3c:dc:7a:a6:3d:b0:be:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Validity
Not Before: Feb 4 14:00:52 2025 GMT
Not After : May 5 13:00:52 2025 GMT
Subject: CN=a1ce6e61-c462-47ec-80ac-a8e4b14b78ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:f9:c8:1d:46:e9:10:64:ef:08:39:a1:09:
d9:4c:bc:10:04:90:63:99:32:a0:73:a3:af:53:52:
e4:82:73:45:05:c3:85:31:64:97:c9:8a:ee:d1:ff:
7a:81:bd:fa:2a:eb:4b:0c:d2:95:8c:a8:5e:62:b3:
d2:c2:03:51:89:6a:ff:20:14:32:8d:19:60:88:50:
ed:21:52:79:f9:79:67:4f:e5:7a:b4:aa:65:c1:96:
fb:6b:d3:63:9b:61:4e:0c:00:4a:29:20:bc:99:96:
1f:18:85:fc:1e:7b:4a:e6:a4:fa:ad:24:39:96:08:
ee:da:0f:a6:90:73:4e:27:d9:4e:17:e7:67:9b:89:
fb:a7:5c:08:a7:31:6e:a5:1d:17:28:1b:46:40:2e:
52:5d:ed:73:cf:ff:df:0f:26:c4:46:82:ba:81:18:
23:d3:65:4a:52:a1:9e:60:cf:33:91:dd:36:04:7a:
b8:d1:76:9b:00:56:3e:c4:a6:b2:15:ac:3c:d8:4b:
a7:66:b0:09:89:94:6a:28:0a:91:f0:49:b2:2f:1c:
19:de:4d:d2:89:9a:8f:0e:e3:db:18:d3:c8:6b:d7:
65:97:24:7c:cf:cb:9b:ed:8d:70:b9:7a:22:f8:77:
50:34:99:db:67:23:4b:5d:5b:9f:a3:0f:69:ee:cf:
26:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AD:D7:33:F9:8E:7F:F8:DF:7E:B0:1B:B8:81:A1:0B:33:03:76:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5ea868a1-53fa-343b-8393-c4b366e016ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
X509v3 Authority Key Identifier:
keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
sbgp-ipAddrBlock: critical
IPv4:
142.251.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:24:6a:8c:38:4c:10:fd:b1:7a:80:15:2a:b8:9e:b4:78:2d:
fa:58:6f:c1:81:a5:6d:4f:94:db:d6:e0:f6:cd:c5:7e:1f:e5:
d4:c8:28:91:ef:da:f2:c3:2d:13:e2:e8:e6:e7:9d:e4:58:5d:
94:19:a6:b7:28:66:ba:3b:a4:5a:d9:ce:54:9e:1b:43:23:af:
b9:34:85:1b:54:2b:ec:07:12:b0:99:ae:4c:da:13:39:82:bd:
09:b6:81:dc:46:0a:be:06:22:db:9b:64:77:cb:3f:5a:6a:1a:
13:80:43:54:55:45:45:f1:04:c6:ae:66:93:f8:18:66:20:89:
4b:51:e1:eb:2a:b0:00:87:23:9e:fd:4e:2a:25:4a:c9:da:ef:
32:a7:a3:09:73:06:95:b2:df:ec:da:2e:d0:68:8a:ac:ea:b4:
1f:b9:d9:c2:33:b8:b2:20:73:82:26:49:d9:82:1c:6f:3f:f0:
ed:a0:9d:48:3f:d1:9c:0e:b5:95:13:a1:b8:79:65:9a:cc:a4:
fc:7f:30:4b:e3:86:87:f3:61:17:73:ea:2d:dd:36:e1:53:1d:
a2:af:bd:e4:0a:a5:a2:d5:ff:b4:eb:c6:4a:0d:70:e9:0e:4f:
53:2b:ce:10:d4:f7:cc:ec:10:4a:ac:d2:65:5e:c2:43:3f:aa:
05:9f:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:32:50 2025 by rpki-client